Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fl4G7ThvirBYtsIYTRDKT9Tfyj8.roa
File: fl4G7ThvirBYtsIYTRDKT9Tfyj8.roa (raw, json)
Hash identifier: wTac+YnoVsaJ07nhX005vLcf3rRl5PHhWDJC4XA2Kkk=
Subject key identifier: 7E:5E:06:ED:38:6F:8A:B0:58:B6:C2:18:4D:10:CA:4F:D4:DF:CA:3F
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0194EF5F800A4388477E9FFD4B934833BE3A
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fl4G7ThvirBYtsIYTRDKT9Tfyj8.roa
Signing time: Mon 10 Feb 2025 10:20:00 +0000
ROA not before: Mon 10 Feb 2025 10:20:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211056
IP address blocks: 45.11.186.0/24 maxlen: 24
45.81.16.0/22 maxlen: 22
45.81.16.0/24 maxlen: 24
45.81.17.0/24 maxlen: 24
45.81.18.0/24 maxlen: 24
45.81.19.0/24 maxlen: 24
185.201.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 08:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ef:5f:80:0a:43:88:47:7e:9f:fd:4b:93:48:33:be:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Feb 10 10:20:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e5e06ed386f8ab058b6c2184d10ca4fd4dfca3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:5b:e5:2b:97:38:44:40:2a:53:68:b2:52:
50:4e:26:69:93:38:49:96:c4:92:4a:c0:0c:4d:1c:
ee:48:83:78:8f:88:0c:e6:a4:07:47:05:0f:e8:3b:
e4:08:bb:80:6b:a7:bc:47:3a:ee:55:63:fb:7d:e5:
b7:0c:c1:6d:8b:d3:98:f9:00:4a:75:f0:60:68:ec:
48:b3:7c:b2:19:06:79:c2:4d:8b:96:01:59:65:3b:
3a:97:dc:b8:e2:15:e5:3f:80:d3:81:8f:2d:eb:d2:
d4:0f:8c:ac:69:ca:30:c2:27:5f:b9:0f:97:67:98:
70:e1:43:c4:02:e7:16:79:b6:22:b8:0e:a6:54:8e:
1e:1d:ee:7a:62:62:05:87:2c:e8:d1:a6:db:08:08:
43:4b:4e:41:a9:30:d4:1e:11:0f:16:6b:b3:0d:24:
70:f9:df:96:5e:a4:0b:a5:10:ce:36:a5:8d:c5:41:
08:bc:e7:e6:b4:b9:24:8a:fc:7f:39:22:80:ae:99:
2e:90:3a:7f:46:21:63:87:36:dd:01:c3:ad:85:bc:
4d:51:52:f3:a6:f8:38:26:d3:ea:81:8d:e1:f7:1e:
46:2e:f6:09:9a:59:1c:af:9b:fa:b9:9e:f0:39:1f:
a8:fe:cb:95:cf:74:a3:ee:13:5a:b9:c8:4e:df:10:
26:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5E:06:ED:38:6F:8A:B0:58:B6:C2:18:4D:10:CA:4F:D4:DF:CA:3F
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fl4G7ThvirBYtsIYTRDKT9Tfyj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.186.0/24
45.81.16.0/22
185.201.49.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fa:f6:45:0f:ae:1e:d4:7a:bc:ba:cd:bc:d8:ab:c8:2c:89:
35:bd:30:f6:8c:8e:d0:65:9b:84:88:8a:a5:73:54:ec:2f:60:
16:0b:10:04:72:fe:14:f5:f5:9a:72:71:db:d1:9c:d5:23:b7:
e7:4f:b6:36:1b:30:a5:d5:e7:0a:5b:65:8d:41:9d:f3:62:8f:
61:fd:91:13:05:9d:d7:53:b8:21:a0:68:8e:f3:07:19:90:fb:
aa:2d:91:74:2d:f7:ae:1e:5b:84:37:6a:7d:b8:66:70:7a:77:
3e:fa:7d:c2:e2:f0:31:ce:fa:95:92:d1:7b:67:a7:5e:b1:aa:
54:0b:1c:36:31:7c:36:9f:d3:e3:66:9d:1b:23:09:fa:1b:3e:
90:ee:42:6d:5d:63:a3:75:11:c4:02:f7:a6:5a:e8:f1:a7:87:
e1:be:67:95:88:5a:d9:f1:14:ea:54:43:8f:2a:7d:65:7e:41:
89:94:30:ce:46:2d:11:09:2f:e7:ec:f2:af:ac:fd:51:f9:bf:
32:46:b1:56:46:cf:31:ad:d6:a7:26:1e:a6:d2:7d:9c:15:23:
0b:0c:23:94:09:0b:3b:10:02:10:8a:5d:2d:b7:ce:d7:4a:ff:
26:34:51:19:9a:e0:56:ce:f4:44:58:0e:45:44:96:97:09:7f:
88:de:58:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:10:20 2025 by rpki-client