Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/_za77BV608Dii9PMUEAaW1pqAWg.roa
File: _za77BV608Dii9PMUEAaW1pqAWg.roa (raw, json)
Hash identifier: 9rsh06MF7iulUsEH5CZ6tqTXHPY1vajRmuaE7vwPJrs=
Subject key identifier: FF:36:BB:EC:15:7A:D3:C0:E2:8B:D3:CC:50:40:1A:5B:5A:6A:01:68
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 0193CEE2FC7002CD04B5EFCD2EA5DD300D7F
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/_za77BV608Dii9PMUEAaW1pqAWg.roa
Signing time: Mon 16 Dec 2024 09:53:22 +0000
ROA not before: Mon 16 Dec 2024 09:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47430
IP address blocks: 45.139.9.0/24 maxlen: 24
185.105.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Dec 2024 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:e2:fc:70:02:cd:04:b5:ef:cd:2e:a5:dd:30:0d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Dec 16 09:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff36bbec157ad3c0e28bd3cc50401a5b5a6a0168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:fc:f7:6d:2c:fc:24:88:76:b7:fe:04:14:
45:f7:43:b6:8b:41:cf:d6:da:1c:97:06:92:55:7a:
29:4f:3f:df:e1:c2:b5:0c:78:ef:33:e3:02:e1:79:
3a:5f:d7:52:52:66:9c:84:40:20:74:69:ad:dd:72:
d9:97:fd:58:e2:99:a3:df:8e:14:e5:dc:7f:50:63:
e4:a6:2f:bf:08:74:2a:1f:0a:3a:24:fd:a9:72:4f:
52:4c:4e:7f:91:6f:c5:6a:1e:72:60:80:a1:dc:03:
fb:66:0e:aa:05:1c:6e:39:fa:97:b7:5c:bf:c0:ac:
76:50:8a:d2:a7:5c:7c:93:bf:bf:db:70:84:91:38:
3f:f1:05:ae:9e:d0:1c:01:60:d4:d2:b5:fc:16:c9:
50:83:72:48:27:d2:cc:d2:0f:86:86:ce:ee:52:ab:
87:09:be:a3:31:c2:25:b5:ad:50:4f:80:04:a7:75:
e7:62:09:4c:9c:68:87:58:99:13:fe:42:96:eb:c8:
f4:09:10:d4:00:7a:2a:37:4c:34:34:ed:81:ea:77:
ed:e8:d1:6b:59:f8:c3:d0:55:26:9f:0a:3b:d0:e6:
db:ae:a2:f4:1b:1a:22:fc:85:a6:ae:f2:5b:1d:2d:
11:6e:ff:45:ab:b9:1c:c5:fa:a0:3e:59:d6:30:09:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:36:BB:EC:15:7A:D3:C0:E2:8B:D3:CC:50:40:1A:5B:5A:6A:01:68
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/_za77BV608Dii9PMUEAaW1pqAWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.9.0/24
185.105.238.0/24
Signature Algorithm: sha256WithRSAEncryption
70:bf:ed:b0:93:87:fc:19:b7:92:b9:97:98:98:75:de:90:8d:
4a:3e:57:45:76:b8:c8:8a:96:05:d0:8c:27:98:61:49:ba:1d:
fa:ea:ff:ce:3f:7d:da:2c:f2:d9:1b:a9:9e:31:5c:42:c9:39:
0e:e3:a7:bf:8b:17:13:24:7b:d0:01:c4:9a:ce:a5:16:27:34:
f2:2d:70:bb:e1:dc:c5:02:88:0c:eb:a0:32:51:ed:da:8f:0e:
9b:6a:2c:c5:e7:f6:d9:b0:bc:f6:7d:45:d9:1c:27:7d:cf:e5:
fe:28:da:17:b2:7d:30:9e:76:05:bd:ad:27:a1:0b:b5:5a:13:
09:02:99:ae:01:8e:ed:d5:f4:2e:f4:01:8a:71:c9:f6:8e:d2:
9c:ca:0c:00:94:1e:2d:d2:b7:1a:01:0b:60:46:a9:dd:73:35:
6b:e8:5c:17:66:28:58:c6:9c:91:6a:a7:e0:f8:72:99:8a:89:
6f:7c:d3:c3:90:6f:97:30:fa:78:17:ff:d4:b1:0c:bc:13:e8:
8e:19:81:d9:72:0f:d1:37:39:7f:c4:a0:aa:f6:1f:a1:35:59:
a9:e9:42:eb:3e:88:e7:be:4e:ff:59:7a:94:a0:0d:01:ff:85:
52:c3:28:2a:45:bb:57:41:ce:c4:cc:cb:ca:67:26:56:13:dc:
cf:e5:da:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:09:53 2025 by rpki-client