Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8cyXdtXkzJqIVYIRySJFM4yNNN4.roa
File: 8cyXdtXkzJqIVYIRySJFM4yNNN4.roa (raw, json)
Hash identifier: orVDwXQJQiEQA9NdKix+TmxjefQIBpePquhCG3VibUA=
Subject key identifier: F1:CC:97:76:D5:E4:CC:9A:88:55:82:11:C9:22:45:33:8C:8D:34:DE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196AEB662F75BC2C172BA7DEC7B32B10BD1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8cyXdtXkzJqIVYIRySJFM4yNNN4.roa
Signing time: Thu 08 May 2025 07:05:10 +0000
ROA not before: Thu 08 May 2025 07:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200010
IP address blocks: 45.94.46.0/24 maxlen: 24
185.242.247.0/24 maxlen: 24
195.66.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 07:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b6:62:f7:5b:c2:c1:72:ba:7d:ec:7b:32:b1:0b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 8 07:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1cc9776d5e4cc9a88558211c92245338c8d34de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2c:cf:f1:c7:a3:f0:20:18:a9:c6:aa:0e:6b:
d8:5c:20:b1:82:22:ba:dd:8d:6f:1e:d5:63:d8:3f:
8a:ac:25:21:41:4d:d6:e4:f3:e8:68:96:fd:7f:d5:
e8:57:0b:d5:a4:40:26:df:27:2e:31:85:e9:ca:13:
a2:bc:91:65:dc:11:a7:4b:79:9b:81:5f:2d:c6:93:
a4:1c:f7:67:21:a6:dd:b5:dd:69:40:0c:93:3d:1d:
27:1a:e6:85:58:0f:44:3d:71:6e:7b:d1:a0:4b:db:
3c:4b:d1:b2:a1:ba:aa:1f:2a:08:ab:ac:68:76:e4:
28:18:94:27:2a:f5:c0:0c:a6:a4:fc:74:38:5e:aa:
92:07:20:59:f2:af:ac:5f:85:a1:b2:88:15:42:34:
d9:f2:91:36:b6:9f:21:39:c5:ad:7b:06:95:26:00:
e3:55:b4:ad:cc:9f:b1:f3:7c:e7:e5:c1:60:9a:c5:
ba:58:80:42:c7:f7:9e:36:bd:c1:37:91:4b:1f:7a:
36:fb:ae:9b:83:9e:f1:e8:c3:2f:7a:e8:e5:8c:02:
44:c5:ef:ed:cf:0d:ee:46:a6:69:5d:9e:a1:e1:d8:
b2:38:35:9f:c7:b6:c3:eb:92:ac:91:d3:cc:44:e7:
52:a2:44:0a:53:ca:f4:32:93:aa:50:cd:76:a4:d6:
4f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CC:97:76:D5:E4:CC:9A:88:55:82:11:C9:22:45:33:8C:8D:34:DE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8cyXdtXkzJqIVYIRySJFM4yNNN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.46.0/24
185.242.247.0/24
195.66.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:86:92:21:55:dc:52:fc:86:03:c4:65:60:85:b1:f2:cb:d2:
ba:ec:68:9b:9f:65:2d:14:d4:5f:aa:30:98:a0:16:8c:44:66:
c4:95:da:be:7e:dc:60:72:8f:07:5d:9f:60:d9:d8:15:b2:b1:
4a:63:90:c8:7c:fe:94:ec:40:e0:38:0d:d7:b7:ce:4c:a9:f7:
be:f7:ad:4a:6e:ab:71:fc:37:27:37:0e:bc:1e:70:f9:a1:d5:
77:a5:22:4d:bd:b5:9e:cd:b0:b0:4f:c3:4a:19:a1:9f:b0:2e:
5e:67:94:4c:2d:d8:82:a8:11:1b:c3:5b:ec:1e:93:47:55:20:
66:f9:6f:19:b7:a8:b6:7b:a5:91:52:06:6a:5c:b5:cb:20:14:
fb:61:51:b5:4c:e2:7e:75:5d:0d:94:42:0a:1c:36:06:5b:d4:
14:f7:26:8e:ce:ad:fe:35:f1:6d:44:bf:17:c3:56:0d:34:e1:
c1:9d:ba:da:f7:01:a4:4b:8d:b1:d1:cf:63:51:b3:c6:2c:fe:
b1:92:bb:c6:60:48:40:c9:87:1f:9f:bf:d7:7c:26:2f:c7:26:
b7:bd:3d:3f:c4:0b:ed:25:c6:fc:0b:3e:4c:36:ad:15:1c:e8:
ca:5f:5d:74:a9:3d:ba:c2:2f:94:ef:6e:bc:e7:c3:1a:c8:3c:
c3:ef:ae:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:19:53 2025 by rpki-client