Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/CD_FBn11OU5OANpZvLuEuOvTjHY.roa
File: CD_FBn11OU5OANpZvLuEuOvTjHY.roa (raw, json)
Hash identifier: gyBqmFRSTM76SkMogGnb6Q8fxPuwNFXNrLpKIE3ou3Y=
Subject key identifier: 08:3F:C5:06:7D:75:39:4E:4E:00:DA:59:BC:BB:84:B8:EB:D3:8C:76
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 01951AE0EB112758D1D05D31AD283EEB6329
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/CD_FBn11OU5OANpZvLuEuOvTjHY.roa
Signing time: Tue 18 Feb 2025 21:05:02 +0000
ROA not before: Tue 18 Feb 2025 21:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 45.145.17.0/24 maxlen: 24
80.91.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Feb 2025 07:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:e0:eb:11:27:58:d1:d0:5d:31:ad:28:3e:eb:63:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Feb 18 21:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=083fc5067d75394e4e00da59bcbb84b8ebd38c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:f3:b3:9f:57:1f:1b:a5:84:55:e2:a7:0b:
dc:40:11:41:4e:fd:d7:2f:54:41:22:3e:49:85:94:
74:01:13:af:fa:db:9d:a2:8c:c9:71:a4:29:ed:22:
8a:a8:5e:88:c6:72:03:ed:3c:c5:dd:ed:5f:4d:8a:
13:e9:7a:1d:92:9c:bb:60:de:59:02:54:10:49:4b:
6f:a8:1e:1d:da:c6:1f:e8:08:f5:18:9a:89:b8:42:
72:a5:ec:41:10:ea:a3:14:40:4e:0d:e7:c6:17:f7:
42:87:e1:8b:89:50:fb:13:51:ea:18:49:c2:c2:d3:
e8:21:3e:84:5e:07:90:bd:3f:ae:9d:c5:00:b8:c0:
d7:f2:19:19:37:8b:7c:a3:97:91:e5:f3:f3:07:fd:
13:43:bc:b8:3f:1d:f9:3b:35:74:ee:5c:9b:b3:7c:
2d:08:4b:d9:41:23:cf:74:72:cc:0c:b6:0a:68:27:
bb:c6:d5:18:15:ff:6c:e1:6d:79:a1:07:68:86:03:
77:06:b5:b2:db:17:08:7b:22:ad:c6:4a:7a:52:c0:
72:57:6c:34:da:cd:ef:cf:c8:a4:84:c6:b9:a1:dd:
7c:ec:b5:98:89:11:92:53:94:fe:67:a9:29:09:49:
93:3b:90:00:4c:0a:f4:f6:f3:72:87:e4:36:ae:1d:
38:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3F:C5:06:7D:75:39:4E:4E:00:DA:59:BC:BB:84:B8:EB:D3:8C:76
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/CD_FBn11OU5OANpZvLuEuOvTjHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.17.0/24
80.91.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:3d:e4:8b:65:25:4e:92:9d:32:93:a7:ad:ea:36:37:49:41:
97:e8:36:9a:c5:19:9d:cb:2a:82:1a:38:92:59:c1:1d:ce:02:
89:f0:73:8f:69:f7:55:44:fe:6a:f5:0f:7e:52:cc:3a:c4:50:
39:f9:a7:85:fa:af:53:f9:69:e7:54:e7:df:d5:ba:b5:95:cc:
52:b9:e8:e2:af:a3:c7:da:78:99:f8:11:06:0c:a2:ea:aa:56:
20:73:8d:23:a2:67:07:92:de:d9:c1:59:40:86:78:71:1f:94:
e6:a0:3f:6a:7a:27:69:b2:4b:77:c8:c4:6e:ec:b7:18:a9:0e:
ed:e8:ff:09:6e:16:72:37:3a:27:a5:7d:5b:2e:b3:d0:c2:01:
49:a2:bd:07:bd:e4:5a:61:cf:08:26:90:63:62:93:6e:34:6d:
dc:ed:3e:35:ee:c3:4f:7e:5d:7c:33:22:a8:08:81:f6:33:5b:
1b:9e:3e:4f:f1:0d:25:d5:d2:5f:89:3c:bf:62:b3:0c:e5:96:
72:ec:1a:b5:3d:33:dc:d2:ff:4e:23:52:84:4c:88:5b:f5:12:
8c:00:16:9c:ab:28:17:64:a6:6d:da:d4:c1:a5:d7:3c:44:5a:
89:04:14:6f:e4:69:c7:31:98:34:a4:9b:38:cb:0a:ad:a7:32:
ec:ab:90:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:49:02 2025 by rpki-client