Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/A9YT9csvm-2k2ZHMwhsHEWBYBwU.roa
File: A9YT9csvm-2k2ZHMwhsHEWBYBwU.roa (raw, json)
Hash identifier: dEiP1Wytr/mCJ90IjHUUQElJFYPYJKhEX41bcZkorbk=
Subject key identifier: 03:D6:13:F5:CB:2F:9B:ED:A4:D9:91:CC:C2:1B:07:11:60:58:07:05
Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial: 01968314097139A868679348133A6FE39122
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/A9YT9csvm-2k2ZHMwhsHEWBYBwU.roa
Signing time: Tue 29 Apr 2025 19:44:10 +0000
ROA not before: Tue 29 Apr 2025 19:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 45.149.168.0/23 maxlen: 24
45.149.170.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 12:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:14:09:71:39:a8:68:67:93:48:13:3a:6f:e3:91:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
Validity
Not Before: Apr 29 19:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03d613f5cb2f9beda4d991ccc21b071160580705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:65:7d:51:8f:b8:f3:55:ad:14:86:a9:7c:
61:a4:44:1e:d2:64:05:b0:72:36:95:c3:44:42:3c:
01:8f:9e:c1:5b:ae:5c:92:89:4b:d1:6b:c6:d7:f4:
96:c8:0f:5a:44:b8:7f:ef:8d:31:03:17:ba:cc:f7:
f1:eb:69:15:72:5d:c6:f3:9d:84:34:03:b2:af:06:
2e:02:c8:0a:85:c0:b0:ac:7b:e1:35:46:90:db:26:
8d:c2:01:95:5c:5a:3d:16:c6:ab:6e:61:44:6d:ec:
b5:af:e3:e5:51:02:62:da:2f:86:d7:9a:8e:5f:da:
a1:95:9a:3c:56:a6:31:f8:25:82:9c:ef:b2:eb:02:
e1:73:75:3c:6c:fe:8d:d1:5a:01:bd:c5:7a:24:03:
a4:93:e4:f9:8c:b1:15:69:bd:d4:fe:84:4d:65:8a:
da:b1:01:5f:d0:80:67:87:d0:45:fd:65:be:75:86:
4d:c5:ac:f2:0b:d7:7b:e0:21:88:ac:8b:1d:8c:b9:
72:e5:cc:e6:1d:f8:3a:3f:df:8c:22:29:57:af:ff:
a6:58:fe:9a:1e:44:1c:14:f9:00:ff:35:59:7c:89:
46:7c:53:0e:04:2d:54:41:c2:ae:df:8f:a7:ef:69:
d4:60:07:4d:59:d7:f3:ea:86:10:a3:ee:b2:c8:db:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D6:13:F5:CB:2F:9B:ED:A4:D9:91:CC:C2:1B:07:11:60:58:07:05
X509v3 Authority Key Identifier:
keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/A9YT9csvm-2k2ZHMwhsHEWBYBwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.168.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:e9:d9:18:c4:e6:84:99:ff:c3:36:0f:38:ad:27:36:52:34:
9f:1c:05:dd:39:30:af:9c:a0:c7:21:90:f8:e1:fa:e9:32:41:
24:86:a5:0b:e1:d6:47:b0:f2:e7:b3:e3:9c:78:91:d4:44:48:
45:fb:68:e8:b2:b3:18:7b:27:ee:a0:e7:f9:5b:77:11:ff:ec:
4b:6d:67:e9:e9:ad:11:97:a8:92:73:73:a6:ee:94:36:86:e1:
3d:99:a3:cf:4a:ad:c9:eb:53:44:4f:e0:73:56:b2:c5:e2:0e:
47:10:3d:65:7e:e9:e4:5a:ec:a9:64:26:f7:67:8c:8d:82:eb:
a0:82:f1:f7:0e:61:c3:21:98:62:a9:24:b4:e7:0d:ee:89:be:
e8:39:68:68:c6:16:d5:ed:ff:7f:72:af:9a:cd:29:1f:ca:f3:
b2:31:95:7b:e9:e7:31:b7:3e:a3:8d:87:26:04:8d:6a:11:ab:
e5:74:7f:a4:27:1e:a4:f5:79:75:02:98:8f:f4:b6:d0:e1:53:
f3:c8:82:9a:c9:3f:fe:b7:93:9c:1d:f3:6a:bf:96:6c:27:23:
c2:51:4f:c3:36:6e:e5:a1:ad:36:24:db:fd:f7:43:2a:6e:9d:
9d:4c:24:30:62:ad:56:da:fe:4f:f4:33:1f:9e:b2:af:cd:13:
df:80:fa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:02:47 2025 by rpki-client