Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RXEN9OW4nbOollxBhFG5_NEWdes.roa
File: RXEN9OW4nbOollxBhFG5_NEWdes.roa (raw, json)
Hash identifier: R1kr9izkGT5lGZf9U6DsMszajsnw/IoJUICwcZYpezE=
Subject key identifier: 45:71:0D:F4:E5:B8:9D:B3:A8:96:5C:41:84:51:B9:FC:D1:16:75:EB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0191AEC52AC3DA041D96E0633D24D1EABA9D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RXEN9OW4nbOollxBhFG5_NEWdes.roa
Signing time: Sun 01 Sep 2024 18:07:22 +0000
ROA not before: Sun 01 Sep 2024 18:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.86.12.0/24 maxlen: 24
45.152.198.0/24 maxlen: 24
103.114.40.0/24 maxlen: 24
2a0e:1a84::/32 maxlen: 32
2a0f:3d80:bac::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a0f:e6c6:5532::/48 maxlen: 48
2a12:ecc2::/32 maxlen: 48
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 04 Sep 2024 16:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ae:c5:2a:c3:da:04:1d:96:e0:63:3d:24:d1:ea:ba:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 1 18:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45710df4e5b89db3a8965c418451b9fcd11675eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d5:97:60:ab:98:0b:e3:df:6e:19:b3:ac:8c:
6f:de:18:d7:1d:f3:4f:3d:97:9a:b3:11:c9:81:18:
69:07:44:c8:5d:58:d0:90:4a:e8:e4:91:d4:aa:36:
1b:f3:24:72:f0:4e:2a:d0:1d:d8:05:5a:5e:90:aa:
8f:58:c5:bb:1b:69:98:b9:bf:3b:dd:df:98:1b:7d:
63:75:1c:cb:b2:fa:8f:bf:a7:77:7d:6b:bc:f9:e6:
53:ad:d1:f5:99:08:c6:4e:5c:d8:7a:51:ef:4d:1a:
db:9a:b8:e7:5d:f0:d1:67:de:b2:4c:a7:57:57:bd:
c0:d6:c5:b4:82:28:1b:46:04:94:fe:6b:16:de:00:
a3:4e:0f:44:31:d7:30:5a:fb:48:a1:0a:41:ab:98:
22:52:d7:77:67:2c:be:a5:08:ad:b5:f7:62:21:fb:
41:4f:30:2e:c9:77:76:7b:e5:0b:17:e8:a8:dd:09:
05:82:87:f4:8a:57:15:e1:a8:25:dc:10:1f:bf:42:
3e:3f:5d:8a:c7:ba:74:d2:76:40:36:82:e1:b2:aa:
a8:5d:81:e1:9d:c7:8a:5d:dc:70:cd:8f:a7:2a:9c:
70:8d:62:3d:10:3b:fc:e6:1a:da:12:55:e6:18:dc:
86:e7:1b:e3:33:1a:ae:e2:eb:ee:38:b3:25:6b:91:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:71:0D:F4:E5:B8:9D:B3:A8:96:5C:41:84:51:B9:FC:D1:16:75:EB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RXEN9OW4nbOollxBhFG5_NEWdes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.12.0/24
45.152.198.0/24
103.114.40.0/24
IPv6:
2a0e:1a84::/32
2a0f:3d80:bac::/48
2a0f:3d82::/32
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a0f:e6c6:5532::/48
2a12:ecc2::/32
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
68:f5:0d:dc:ae:35:b4:92:61:36:0e:c7:8d:06:83:63:60:04:
d2:a0:ad:74:df:46:91:74:31:03:27:b1:7e:41:c4:2d:dc:ac:
eb:46:5e:91:ca:b8:a4:92:35:f7:fd:97:f3:be:ab:78:84:24:
28:06:b0:28:0b:22:44:d2:04:48:53:51:20:c9:4b:59:5f:3c:
1b:1b:38:92:f2:df:e8:ed:47:00:08:ed:93:ee:92:8b:12:9c:
7a:93:1e:92:05:f2:7f:f9:c2:36:df:18:18:5d:1f:a3:59:1a:
9b:65:63:a7:55:2d:1f:11:b2:72:cd:7f:fb:10:ab:35:ad:09:
cb:be:a5:2b:75:8a:ad:d3:7c:d5:d8:5f:27:c7:9f:53:a5:ff:
27:59:73:80:6b:61:b1:72:56:71:25:9a:9f:f1:67:4a:b8:91:
dc:51:3e:2d:27:9b:db:06:e7:de:a5:e8:97:48:16:04:b0:a3:
4f:76:cc:67:80:dc:ac:03:cb:15:e7:e3:8c:a4:1f:4f:96:36:
a7:01:a2:33:e6:a1:e0:83:ed:b1:00:38:53:58:d7:69:87:03:
d9:f5:e9:11:c3:8a:e3:61:a7:2b:eb:67:0c:70:90:bc:d0:ab:
48:ec:18:13:e0:1f:c9:06:6d:88:67:e5:af:a7:71:b4:37:64:
f6:37:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:30:13 2025 by rpki-client