Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4DMhb51GvOYePbUbFNc187PkJ4Y.roa
File: 4DMhb51GvOYePbUbFNc187PkJ4Y.roa (raw, json)
Hash identifier: qG4Sk2DAmrhaOggfee5kjJoNpbjRjX5OtwsVZ82TnvE=
Subject key identifier: E0:33:21:6F:9D:46:BC:E6:1E:3D:B5:1B:14:D7:35:F3:B3:E4:27:86
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01954D289556A6ED6DE9CC88A543D5000812
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4DMhb51GvOYePbUbFNc187PkJ4Y.roa
Signing time: Fri 28 Feb 2025 15:24:20 +0000
ROA not before: Fri 28 Feb 2025 15:24:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214927
IP address blocks: 45.9.117.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.140.13.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
45.152.208.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
185.122.171.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
185.126.66.0/24 maxlen: 24
193.23.245.0/24 maxlen: 24
194.33.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 17:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:28:95:56:a6:ed:6d:e9:cc:88:a5:43:d5:00:08:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 28 15:24:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e033216f9d46bce61e3db51b14d735f3b3e42786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:23:e4:e2:c3:3f:a3:d9:49:b9:c5:85:fb:
46:0f:3d:1c:6f:95:69:6a:80:ef:6f:31:1b:b6:24:
24:a0:50:5d:e1:fa:19:c4:de:66:2a:c2:74:ec:80:
86:ee:c3:b9:64:2a:cf:a0:b3:cf:67:b0:54:61:1d:
e4:b1:87:11:a6:66:b1:90:10:3d:5d:55:49:63:4f:
17:23:a1:44:e3:47:5b:23:ab:4f:1b:f9:25:e7:a5:
04:30:4c:67:5d:10:e4:a3:b9:14:5f:0d:5e:34:c6:
0f:1d:81:42:18:3d:b6:01:c8:3e:99:0c:d1:87:68:
83:4f:c3:37:2f:99:54:4d:b9:a4:cd:4a:f4:a2:ef:
21:d7:84:0c:68:c0:3e:ca:99:85:26:b6:99:bc:d6:
03:f9:ed:ca:06:a5:01:8c:ed:c0:ac:1e:99:e5:5d:
6f:bb:b8:92:c1:69:3b:8f:34:f6:c9:09:7b:32:9f:
00:41:6d:90:bc:65:fd:98:4c:f9:33:ab:ad:d0:5e:
58:19:ab:2b:be:28:5e:8a:6e:f0:7d:99:79:50:30:
ef:47:c4:9a:45:e8:a7:46:4a:42:ad:af:5f:02:84:
a1:e0:a4:7d:ae:46:99:01:4e:27:3e:19:3e:f3:17:
66:6b:30:7f:4b:c0:b7:a8:5d:24:b0:73:ba:be:7e:
2e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:33:21:6F:9D:46:BC:E6:1E:3D:B5:1B:14:D7:35:F3:B3:E4:27:86
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4DMhb51GvOYePbUbFNc187PkJ4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.118.248.0/24
45.131.215.0/24
45.137.81.0/24
45.140.13.0/24
45.141.177.0/24
45.152.208.0/24
85.209.128.0/24
103.114.43.0/24
185.122.171.0/24
185.126.64.0/24
185.126.66.0/24
193.23.245.0/24
194.33.29.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:fe:c9:1f:d2:ae:84:59:7d:2f:a9:b4:90:68:cc:2c:09:64:
1b:ff:81:57:f8:ec:57:a5:13:63:b0:a9:08:ad:7b:8a:ee:ae:
25:1e:3a:47:7c:91:bd:26:b9:e8:d0:2b:0d:3e:78:9b:6a:84:
ce:77:b2:80:6e:1c:75:98:d5:9f:bd:48:e2:59:47:7b:06:df:
8b:bc:5d:1c:11:b8:d8:89:eb:c3:ab:22:62:4f:f1:70:de:07:
fe:42:c4:77:67:f6:74:65:24:81:03:26:21:31:6d:0d:0e:0f:
58:34:2d:57:af:ce:f4:c6:ef:81:21:d1:45:c8:25:ea:2a:1f:
5d:07:bc:05:d8:c2:78:a0:a3:b8:70:d8:a5:ce:0a:56:06:78:
11:f3:44:10:a8:5a:f9:49:2a:cc:b5:e2:1d:ff:66:f7:07:43:
39:21:9f:bb:1d:87:7a:39:81:fd:25:78:dc:d2:0e:22:5a:6b:
91:d0:c2:8d:27:6e:ae:0d:fa:ff:5e:94:96:ee:29:71:04:1d:
6a:5b:b9:93:e6:4e:c3:8d:9c:68:79:1c:df:d4:54:d7:49:65:
7c:b9:d6:47:5c:26:4e:48:d5:27:26:c4:68:ca:31:65:19:b2:
16:ca:f7:50:7e:90:21:0c:e3:85:16:f7:d0:6e:f6:07:b8:dc:
55:5b:23:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:17:43 2025 by rpki-client