Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4X9EsQgoa9sby4CSy_BknAF2Eoc.roa
File: 4X9EsQgoa9sby4CSy_BknAF2Eoc.roa (raw, json)
Hash identifier: 8KHopRocEzgE3U9WdoA1qaXYP4U5wngjjklMyaf3zlY=
Subject key identifier: E1:7F:44:B1:08:28:6B:DB:1B:CB:80:92:CB:F0:64:9C:01:76:12:87
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196A494B1E7499FEE2E98E0CD0B365D64E6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4X9EsQgoa9sby4CSy_BknAF2Eoc.roa
Signing time: Tue 06 May 2025 07:52:10 +0000
ROA not before: Tue 06 May 2025 07:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 45.151.103.0/24 maxlen: 24
192.156.217.0/24 maxlen: 24
193.23.253.0/24 maxlen: 24
193.27.10.0/24 maxlen: 24
194.33.61.0/24 maxlen: 24
194.62.30.0/24 maxlen: 24
194.62.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 06:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:94:b1:e7:49:9f:ee:2e:98:e0:cd:0b:36:5d:64:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 6 07:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e17f44b108286bdb1bcb8092cbf0649c01761287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:94:d5:8c:c9:5d:2d:97:14:5d:7d:4a:7b:
be:f9:cd:08:a5:80:5a:b4:91:34:96:ed:1f:74:0a:
42:b4:b3:c5:6f:46:4d:28:c9:60:b8:28:c1:b9:d7:
a7:14:b1:47:67:cb:1d:2e:31:fb:a0:b4:09:36:f8:
13:44:24:85:d0:e4:9c:e5:2d:e4:c3:7e:d5:22:8c:
65:de:87:b5:52:ac:92:77:49:9f:f2:5f:2e:4b:bd:
1a:b6:a5:ef:81:f5:a7:5d:9d:cc:0c:16:2c:fa:52:
03:02:28:f2:f9:52:45:2e:1a:01:90:2e:a3:e3:fb:
46:1b:4b:2b:1e:4a:4a:ec:a6:b1:36:ae:de:39:79:
ff:9a:79:ed:63:83:ed:f3:88:4e:6d:69:a0:4c:1c:
26:74:d8:d1:02:99:5e:06:88:02:60:28:cf:a8:94:
30:bb:ad:5d:e6:9a:60:9f:91:b8:b0:e8:5e:a8:cd:
b2:8e:c8:e5:02:a4:83:4c:dd:76:c9:ae:f7:f4:ec:
5c:d9:63:03:50:1b:5d:70:c6:33:86:26:7a:4e:7a:
ad:78:bb:78:2d:97:a2:ea:b3:48:f3:a5:88:9f:f7:
5b:a0:1c:69:f4:c2:86:0b:ac:0d:51:c2:9d:84:b3:
7d:37:94:32:df:ec:85:c5:11:e8:04:bc:e5:9a:f8:
0d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7F:44:B1:08:28:6B:DB:1B:CB:80:92:CB:F0:64:9C:01:76:12:87
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4X9EsQgoa9sby4CSy_BknAF2Eoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.103.0/24
192.156.217.0/24
193.23.253.0/24
193.27.10.0/24
194.33.61.0/24
194.62.30.0/24
194.62.66.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:21:26:98:cf:ff:2f:9b:38:a9:de:a6:ae:8e:65:f5:81:a3:
a1:33:4a:f5:a1:93:5b:3e:80:74:f3:e1:95:6a:71:54:05:ac:
47:79:f1:b7:e5:71:af:08:e3:ad:49:b4:5f:04:53:88:dd:f8:
c1:40:5c:67:fd:6f:63:95:3d:76:f5:7b:77:10:34:5d:43:d4:
0a:da:50:a3:2e:56:78:24:7f:d5:d4:30:bd:b4:1d:05:76:bb:
07:1b:6e:51:46:fa:db:2f:3e:0c:48:a8:f5:43:02:08:16:ba:
47:56:26:3e:d1:42:22:f2:c2:05:a6:e5:d6:a8:f6:23:cf:df:
a7:94:71:a0:ad:c3:11:15:ee:a9:38:63:73:29:dc:6b:3d:f6:
47:2a:08:fe:db:1b:21:01:26:b4:ce:21:f5:a3:2d:84:58:cd:
98:e3:8c:7f:6d:1c:41:a0:46:6a:f8:56:35:06:49:6c:fc:6f:
db:cb:c6:a5:ec:c9:72:1f:f3:99:23:58:51:75:40:b7:c4:f0:
1c:16:c0:40:b4:c4:d9:32:ec:2a:eb:bc:ce:d1:5d:f6:9f:5c:
e2:22:79:6d:2f:76:ae:79:d3:d0:9a:ea:79:cf:fd:b3:76:2a:
9d:93:b7:15:76:01:e0:bf:2b:09:e4:5e:6b:ad:57:e2:b0:6e:
12:09:c5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:19:09 2025 by rpki-client