Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6h41OtIL6FZivxHKJzfzhqAoEfk.roa
File: 6h41OtIL6FZivxHKJzfzhqAoEfk.roa (raw, json)
Hash identifier: I9mb4MNzQ9zXiExQoYEYKbQa+kivU05QAgjs1zUs0gQ=
Subject key identifier: EA:1E:35:3A:D2:0B:E8:56:62:BF:11:CA:27:37:F3:86:A0:28:11:F9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019695E0F860074C723A6E14BD2F3E2AF10A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6h41OtIL6FZivxHKJzfzhqAoEfk.roa
Signing time: Sat 03 May 2025 11:21:10 +0000
ROA not before: Sat 03 May 2025 11:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 45.151.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 07:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:e0:f8:60:07:4c:72:3a:6e:14:bd:2f:3e:2a:f1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 3 11:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea1e353ad20be85662bf11ca2737f386a02811f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:32:b1:16:73:a7:b9:d6:d2:a7:01:de:81:
00:35:fb:3b:25:e6:75:db:81:55:7d:1b:56:85:11:
9b:97:cf:d9:b3:f4:d4:57:ac:e3:05:e3:d6:85:9c:
a5:e9:eb:ba:35:5c:2e:19:b1:3b:0d:48:9a:74:64:
4a:59:87:7b:52:d7:f4:b5:8b:70:89:39:23:22:e2:
79:e0:f2:2d:6e:0b:d3:27:73:05:eb:46:2e:69:32:
aa:9b:c0:e6:08:56:88:0e:85:cc:f6:b7:a9:2a:c2:
cd:32:44:2c:4b:56:5a:c6:fd:74:02:da:60:ec:d2:
ea:a9:9b:19:c5:4a:59:4b:76:6c:e1:06:ac:b8:21:
86:56:e3:90:e3:82:12:62:d5:e7:8f:c9:87:12:e4:
12:41:f5:ac:27:f9:4a:cc:57:f4:2a:36:0d:e5:30:
95:ef:82:99:51:91:d2:52:91:4b:5c:e6:88:e7:09:
5e:5a:98:35:c9:a4:3b:02:e5:c0:d5:c5:b0:c1:3a:
b7:c9:ab:1b:d4:71:3b:ca:e6:91:3c:1e:b0:2c:be:
62:05:08:cc:32:6a:d0:7d:e8:3d:18:bb:36:2d:3b:
20:93:ca:e0:11:29:06:7f:e1:f6:78:31:59:33:aa:
56:bd:d9:45:d7:01:02:d9:43:00:19:ef:61:46:80:
41:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1E:35:3A:D2:0B:E8:56:62:BF:11:CA:27:37:F3:86:A0:28:11:F9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6h41OtIL6FZivxHKJzfzhqAoEfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.91.0/24
Signature Algorithm: sha256WithRSAEncryption
45:fc:7d:d4:25:be:89:bc:b6:d3:5f:93:5f:fe:d8:74:a8:47:
f0:5b:da:a6:bc:fb:78:29:7a:fe:d5:3b:1f:ad:bb:18:75:8e:
03:93:9f:a4:dc:d8:cf:01:5d:e9:26:75:b3:3e:d1:c3:3a:4e:
17:ca:87:11:96:eb:12:59:c1:b3:81:07:c8:fe:65:fe:49:e2:
b9:da:f9:da:58:b6:70:7c:ae:35:32:01:d6:04:21:95:89:05:
69:92:e9:29:c6:3f:ab:59:d7:9d:89:6e:ca:81:c6:8e:47:7a:
98:d4:df:57:47:46:09:70:41:8d:93:66:ee:ce:9f:87:61:60:
fe:59:f1:8e:08:a3:5d:d3:fe:c3:97:c1:68:05:f2:26:6d:23:
d2:61:e2:c5:8e:14:f8:4e:27:95:53:11:ca:f2:dc:34:94:44:
2d:e8:05:d4:38:e5:5a:1c:d0:df:80:7d:80:ab:c1:b8:4e:ac:
c5:4c:b6:6c:67:d1:95:fd:12:9d:95:f6:d9:91:9a:20:67:1b:
28:b5:7c:8b:b8:ba:e4:2f:d0:e8:7f:3c:b6:1e:9e:ab:cd:f3:
d7:82:e5:a8:02:e7:d1:f6:e4:b0:c3:c4:e8:70:86:01:7d:a3:
95:98:42:e5:cc:57:89:65:38:57:68:de:21:be:a2:df:94:a3:
af:ac:2d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:52:18 2025 by rpki-client