Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/7dqni1Uekr4LIJ7l89gIDXQvQuM.roa
File: 7dqni1Uekr4LIJ7l89gIDXQvQuM.roa (raw, json)
Hash identifier: 1L6EsUhb4cKjHpodJIGaqnF6PfeyAEuJ6PfaxdKbyvc=
Subject key identifier: ED:DA:A7:8B:55:1E:92:BE:0B:20:9E:E5:F3:D8:08:0D:74:2F:42:E3
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0197A38A031686F7EC5A7532A403D29A4C46
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/7dqni1Uekr4LIJ7l89gIDXQvQuM.roa
Signing time: Tue 24 Jun 2025 20:03:40 +0000
ROA not before: Tue 24 Jun 2025 20:03:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.94.0/24 maxlen: 24
80.246.230.0/24 maxlen: 24
80.246.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 20:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a3:8a:03:16:86:f7:ec:5a:75:32:a4:03:d2:9a:4c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jun 24 20:03:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eddaa78b551e92be0b209ee5f3d8080d742f42e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8a:06:6b:58:8b:71:09:7e:17:4c:f5:1a:3c:
13:52:e0:a8:2c:c9:e4:6d:79:0a:19:8a:50:8d:1f:
1a:03:85:95:ba:2f:d6:97:ee:87:6e:0e:9b:8a:3f:
5d:43:55:28:41:97:2e:02:dd:08:0f:48:1a:58:f6:
3f:6d:f4:46:72:06:03:66:04:03:f1:d7:60:d0:ee:
f2:18:16:2f:e3:84:86:7e:9a:60:c4:4c:66:83:36:
ea:bf:57:cc:0c:ab:23:b4:09:90:71:5f:81:0a:b3:
50:29:f3:ce:fd:cd:0f:63:3e:f4:a1:66:a0:72:61:
4c:44:03:cb:8c:3e:ee:71:32:c4:d9:41:99:96:ea:
88:7d:71:c3:a1:db:33:3c:d8:26:b8:e9:a0:6c:72:
0c:af:0c:c7:f0:42:0a:af:fe:da:7e:a2:7d:d1:74:
b8:2c:29:f7:e3:6e:30:e2:72:33:c2:d4:15:34:0f:
90:c3:8c:ac:df:0d:76:24:fc:8d:60:3a:84:ab:e6:
a5:b2:8a:6a:3f:99:87:50:18:07:69:54:87:93:44:
1b:29:5b:35:54:7b:63:21:b2:96:a3:30:28:1d:8e:
3e:e8:c3:36:7e:83:b5:6d:91:a3:b8:87:0b:d3:96:
fc:66:89:9f:01:eb:6b:21:bb:10:49:03:e2:6b:42:
e2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DA:A7:8B:55:1E:92:BE:0B:20:9E:E5:F3:D8:08:0D:74:2F:42:E3
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/7dqni1Uekr4LIJ7l89gIDXQvQuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.94.0/24
80.246.230.0/23
Signature Algorithm: sha256WithRSAEncryption
08:08:70:d8:b4:34:8e:41:00:41:eb:b4:9a:5b:8c:b2:47:2d:
b8:0c:91:5d:3f:64:cd:e6:9a:a9:76:61:1b:50:6a:e3:54:0e:
c2:2f:6c:1e:4f:eb:6f:f5:08:a8:e0:d3:20:ff:10:39:3c:93:
ce:49:b8:29:d0:3c:fe:41:a4:0e:da:3d:67:09:4a:c2:48:f1:
28:a1:46:08:18:4c:f3:76:e5:1e:67:0d:07:17:bc:f8:e1:ca:
a4:e1:da:63:7b:ef:b8:5b:2a:dc:6d:9d:8c:51:57:ef:fc:f3:
50:1c:62:2d:7f:88:d9:8a:34:22:fe:4d:57:03:47:e4:fb:35:
ae:9c:f3:63:ab:e8:25:ad:98:62:a7:f9:08:6f:ce:f4:c6:da:
bd:5e:7d:8b:4a:5c:46:23:f5:0e:d8:95:39:15:1b:ed:48:f0:
a0:a8:5e:d5:60:d9:90:e4:fb:af:1c:b2:1e:0b:9c:44:78:f6:
75:e1:a5:e6:f3:48:39:db:8c:9a:c0:d5:27:90:77:30:bb:89:
e6:b8:1c:08:9a:73:ee:c0:ff:6b:91:c1:7a:08:36:7a:1a:4b:
0a:23:65:d1:7c:02:fc:0b:8f:27:bb:74:29:83:5c:2b:d7:51:
30:8f:b3:6d:81:34:0b:94:a2:72:8e:b8:84:3a:c5:d9:42:c5:
5d:c7:5a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:15:31 2025 by rpki-client