Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N1v7v-pCViHE-yeLv8kti1IjA30.roa
File: N1v7v-pCViHE-yeLv8kti1IjA30.roa (raw, json)
Hash identifier: 7VZUWWdPJlEDp6G0YtFZFdwWdfvcgdyLkgCkRhfgbJc=
Subject key identifier: 37:5B:FB:BF:EA:42:56:21:C4:FB:27:8B:BF:C9:2D:8B:52:23:03:7D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01969F969EE00D486C3408DC1C47A3617C35
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N1v7v-pCViHE-yeLv8kti1IjA30.roa
Signing time: Mon 05 May 2025 08:36:10 +0000
ROA not before: Mon 05 May 2025 08:36:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 45.85.160.0/24 maxlen: 24
45.92.247.0/24 maxlen: 24
195.66.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 May 2025 07:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:96:9e:e0:0d:48:6c:34:08:dc:1c:47:a3:61:7c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 5 08:36:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=375bfbbfea425621c4fb278bbfc92d8b5223037d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:21:e3:6b:41:a7:22:a8:cc:a9:fd:19:34:
04:0b:72:5e:12:23:e7:d0:38:5a:6e:03:ba:f3:f9:
d5:d0:ef:30:ac:8a:7c:8f:b9:63:ce:e6:5e:7d:bb:
2c:30:69:7c:42:61:07:d3:1e:82:52:70:18:49:66:
c3:7c:fb:1f:a7:14:8a:70:61:38:c1:ee:2d:06:d8:
99:bd:d9:cf:fe:2e:07:9a:c9:05:43:11:09:c0:11:
63:56:b2:27:55:d6:89:ac:4b:b9:af:6c:3f:1f:a9:
74:a7:c4:43:45:35:07:c0:8a:b5:de:29:f9:58:f2:
4a:30:69:61:f3:b9:3b:89:52:2e:6f:eb:08:3f:76:
4f:a6:39:02:02:55:21:4b:79:f3:2d:b4:f6:d0:71:
18:17:99:a4:39:3e:14:05:69:46:fe:a7:66:d4:9f:
7c:dd:39:4f:b0:69:79:fb:19:72:2a:a0:c1:0e:d7:
b6:e8:48:1e:d7:16:e4:fc:2c:ab:28:e4:01:ba:24:
90:c2:49:a5:92:60:49:a1:24:70:7c:f6:e3:4e:44:
7d:c0:f8:0a:4f:17:2b:05:98:a8:1c:f2:08:90:e8:
45:90:72:1a:0b:e1:fb:5f:bf:74:2f:97:d4:8f:9f:
22:d0:46:85:1f:58:f4:92:83:11:6a:5c:cf:10:d9:
43:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5B:FB:BF:EA:42:56:21:C4:FB:27:8B:BF:C9:2D:8B:52:23:03:7D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N1v7v-pCViHE-yeLv8kti1IjA30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.160.0/24
45.92.247.0/24
195.66.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:19:a7:11:45:b1:c5:ac:01:c2:43:35:9d:ef:89:d0:1f:a3:
6b:b6:3b:10:9b:21:d9:90:b7:dc:50:cf:85:6d:97:78:9e:37:
b4:bf:68:d3:9e:52:b5:e4:9d:89:c6:ed:51:0d:5c:b0:0e:7f:
25:01:88:7f:f6:5b:6d:c7:2c:fb:d7:c3:38:71:8d:cc:58:74:
4d:7a:15:6e:4a:c4:08:c4:f4:5a:00:10:fa:37:4e:5a:ba:94:
25:25:3c:b2:e5:ac:ab:4e:d4:cb:7f:2c:03:8c:d6:13:82:a0:
88:4e:2d:2a:34:33:99:f1:05:b9:e0:d1:1f:36:e3:10:a2:7b:
f9:5e:07:3b:43:bc:f1:ef:2e:6f:60:d4:db:b8:e0:30:b4:15:
73:46:1f:ba:04:5e:56:00:d6:65:23:78:b9:a2:f4:64:4d:4b:
a4:2c:a1:a9:fc:43:22:cb:3a:c8:9c:6d:67:fe:c8:00:a7:b2:
fc:1c:5c:fd:0e:f6:e3:5e:97:41:87:ec:f0:ce:4f:76:98:74:
c7:cc:12:5a:17:c7:ae:d9:9a:ea:01:f4:c5:44:85:41:be:7d:
03:78:59:6b:1d:66:c4:37:9b:46:e7:9d:84:93:42:88:8d:1a:
8e:ac:ef:8a:b7:be:ba:17:2d:7c:ed:db:28:d9:ab:d4:6d:16:
71:9b:67:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:34:21 2025 by rpki-client