Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/i1bUl9gIzSUDZhBuFdTigyjrPxw.roa
File: i1bUl9gIzSUDZhBuFdTigyjrPxw.roa (raw, json)
Hash identifier: s+RTw04IPsVA4HotQMGR1i5MQvFWhu59/gLUeaXoYlk=
Subject key identifier: 8B:56:D4:97:D8:08:CD:25:03:66:10:6E:15:D4:E2:83:28:EB:3F:1C
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0194EE97E8D3D2F8210F0494C618CB6A5085
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/i1bUl9gIzSUDZhBuFdTigyjrPxw.roa
Signing time: Mon 10 Feb 2025 06:42:00 +0000
ROA not before: Mon 10 Feb 2025 06:42:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211056
IP address blocks: 45.11.186.0/24 maxlen: 24
185.201.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 10:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ee:97:e8:d3:d2:f8:21:0f:04:94:c6:18:cb:6a:50:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Feb 10 06:42:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b56d497d808cd250366106e15d4e28328eb3f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:07:ae:9d:75:ab:a0:b4:70:d3:f8:0a:40:
0d:da:8d:94:81:95:92:10:5d:18:a2:52:a0:2b:d4:
cc:22:be:fc:9c:9c:72:99:80:64:cc:e8:ed:3d:3d:
70:12:34:16:ea:c4:d7:25:3e:3c:04:c8:1f:ff:d0:
86:a1:06:3a:d6:84:a7:c7:6d:88:88:59:33:91:9a:
26:7e:35:a0:ad:1f:ff:34:6b:33:ef:89:d1:bf:8c:
90:4e:19:0e:0e:54:24:a6:8b:2c:93:c9:65:57:b3:
1f:8f:bc:f4:32:47:26:35:a7:17:ce:00:f8:32:e2:
af:ab:bd:87:91:bd:80:ad:83:f1:b2:8c:5e:78:73:
a5:7f:fe:e1:2c:b0:4e:9c:6d:65:93:95:a1:80:27:
41:d9:9c:75:70:67:44:08:b5:60:a2:89:e3:6e:ee:
45:4a:96:a8:66:fd:47:61:c8:d1:af:ae:b0:b3:a2:
5d:7b:01:3e:da:fb:dc:a9:d0:f0:c3:53:a0:c5:69:
b2:99:7e:65:cd:06:85:e8:a3:79:05:51:e7:16:dd:
ec:17:ae:31:18:c3:6e:09:31:8d:61:2f:76:c7:89:
c0:f6:7a:c8:c1:a4:5c:0b:de:ed:69:4d:87:6e:44:
1f:83:95:9e:53:47:d6:e1:c4:99:ff:51:60:4a:f7:
65:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:56:D4:97:D8:08:CD:25:03:66:10:6E:15:D4:E2:83:28:EB:3F:1C
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/i1bUl9gIzSUDZhBuFdTigyjrPxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.186.0/24
185.201.49.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:cc:47:3b:bc:cc:42:c9:90:40:28:b2:c3:e1:3e:96:36:8e:
6b:bc:85:74:26:46:3a:3f:1c:92:17:96:f4:6a:2e:05:f3:a1:
90:a7:ca:e0:7a:2c:96:e9:d6:ce:51:3f:a8:96:8e:22:50:24:
0e:4a:76:ab:87:77:23:ad:e3:42:3f:e6:8c:8c:30:b9:85:68:
48:7e:52:cb:42:34:e9:42:3c:0d:ae:5b:25:7c:d2:58:27:b7:
d6:52:53:49:0a:c4:38:46:c7:c7:0c:37:49:c2:e4:62:e9:4c:
b6:6b:2b:af:ee:9b:50:18:a1:34:e7:6a:fd:49:86:31:02:10:
8a:54:e4:bc:ef:0a:a7:fa:49:48:4f:94:dc:b9:e2:ca:e2:2e:
be:96:bf:4f:df:5c:ed:fe:9a:b6:a7:51:18:d4:b0:81:35:6d:
3e:c1:1e:c8:75:f0:7b:10:bd:07:b2:95:1a:f0:b4:ac:79:cb:
6b:f5:4a:63:d7:72:51:ef:10:1e:d9:b1:79:4d:c7:c9:6b:e9:
83:31:30:06:44:e6:45:87:06:28:a7:5a:18:22:ef:80:06:8d:
8f:dd:48:35:dd:99:8e:f9:53:84:fc:48:98:67:6d:c7:da:b6:
a7:ae:27:2a:72:be:dd:ab:37:84:83:d0:9e:69:bc:e0:97:39:
84:38:60:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:06:47 2025 by rpki-client