Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sT88VjBIuHcM5J3wz8JkvH7XJRg.roa
File: sT88VjBIuHcM5J3wz8JkvH7XJRg.roa (raw, json)
Hash identifier: 5RJ/vLSwFnwU8HPDVysleLwinHQAU/b9z2dtjF38314=
Subject key identifier: B1:3F:3C:56:30:48:B8:77:0C:E4:9D:F0:CF:C2:64:BC:7E:D7:25:18
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196CFBB72F0D76D63FCD38527717278B050
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sT88VjBIuHcM5J3wz8JkvH7XJRg.roa
Signing time: Wed 14 May 2025 16:58:10 +0000
ROA not before: Wed 14 May 2025 16:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 45.9.116.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
45.128.76.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
93.190.244.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0f:140::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:cc00::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a0f:dfc0::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:e4c0::/29 maxlen: 29
2a0f:fc00::/29 maxlen: 29
2a12:ecc0:158::/48 maxlen: 48
2a13:18c6:66::/48 maxlen: 48
2a13:7d80::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 22 May 2025 07:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:bb:72:f0:d7:6d:63:fc:d3:85:27:71:72:78:b0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 14 16:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b13f3c563048b8770ce49df0cfc264bc7ed72518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2d:75:e3:d6:06:62:e2:d2:62:7e:05:78:0d:
0e:2c:97:43:7d:8c:f6:44:84:68:bb:59:8b:51:53:
f3:82:d3:1f:f2:42:91:08:fe:12:71:e0:52:4b:8c:
bf:d5:48:8f:3e:c3:9e:6a:20:d7:a2:83:49:61:ef:
71:ec:c1:04:07:b2:0b:c7:f4:aa:ae:5d:f5:b9:9c:
0a:56:88:b3:a8:5e:c7:7e:cc:92:9a:83:52:e9:2f:
b8:b4:43:dc:e7:28:20:2e:22:e0:0c:3a:db:e9:42:
7a:7f:fc:0c:ce:a8:aa:75:77:ec:c9:53:8d:99:01:
82:b4:53:a9:01:c7:4c:47:ee:4a:4a:21:fa:36:a6:
2f:0a:4a:b2:98:a1:86:d5:f6:8d:2f:82:2c:53:4b:
14:82:dc:ea:cb:01:ac:73:c7:86:e9:4a:36:0c:c3:
b8:11:06:9a:9d:f8:c7:7f:f5:2b:4e:7b:87:6b:60:
c2:fb:5c:d1:d3:08:2d:d6:02:c0:92:f1:c7:cd:ab:
0b:f0:88:55:b9:3d:cb:09:f6:e1:f0:eb:93:a6:5a:
8a:22:0a:cc:f7:a3:b3:fd:06:cf:af:24:23:11:95:
75:f4:f1:de:b1:c4:d1:90:17:19:2b:31:9f:37:3b:
36:a2:b4:ac:2a:69:8a:b9:ad:e0:e5:84:08:b2:6b:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3F:3C:56:30:48:B8:77:0C:E4:9D:F0:CF:C2:64:BC:7E:D7:25:18
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sT88VjBIuHcM5J3wz8JkvH7XJRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.116.0/24
45.9.122.0/24
45.128.76.0/24
45.154.58.0/24
93.190.244.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a0a:2d06:102::/47
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:99::/48
2a0f:140::/29
2a0f:2500::/29
2a0f:cc00::/29
2a0f:d200::/29
2a0f:da40::/29
2a0f:db40::/29
2a0f:dfc0::/29
2a0f:e040::/29
2a0f:e4c0::/29
2a0f:fc00::/29
2a12:ecc0:158::/48
2a13:18c6:66::/48
2a13:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
a4:a9:88:85:f0:b9:ea:0b:c8:0a:f6:76:ed:6e:88:ee:eb:10:
0f:c4:fb:56:15:d4:08:cc:90:b8:21:a6:18:11:d8:3c:0c:f8:
e9:85:37:7f:8e:d0:dc:77:4d:44:ec:cd:55:ef:21:b9:f5:1a:
75:2a:ca:05:cf:5b:53:b3:0a:28:f2:ac:01:f3:93:7c:18:fa:
30:9a:96:17:d3:ff:34:a7:e3:79:37:0b:11:04:c7:2b:74:3e:
74:14:45:17:08:18:a9:61:77:00:00:a4:f4:46:52:03:90:11:
a6:2f:b4:bb:34:2e:5d:3e:89:49:7f:3e:ed:11:87:9a:d4:4a:
bf:4d:c4:8a:cf:b6:3c:12:47:c5:47:55:34:c0:87:22:78:31:
45:95:1c:9c:48:c8:63:a8:f3:2c:bf:ad:66:de:cb:1e:1f:71:
37:d1:c9:62:cb:ab:98:9b:a2:80:fd:ac:6d:2b:d2:ed:c6:41:
f3:70:d3:21:bf:fe:75:78:2f:70:6b:5d:bf:e6:d8:c5:fd:f6:
0a:bf:06:c4:cd:be:34:55:b1:05:c0:c1:34:d5:d3:2e:33:a5:
d5:e6:67:61:fa:2f:b1:ce:a0:07:66:d7:65:63:41:78:09:be:
1f:45:60:a0:7c:d2:4b:f1:e7:57:bf:2d:27:4a:f8:3e:f0:d9:
91:bf:05:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:45:45 2025 by rpki-client