Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WLrpb7LB1az6iGUtJYOpMoIlo0o.roa
File: WLrpb7LB1az6iGUtJYOpMoIlo0o.roa (raw, json)
Hash identifier: /9J/RFkgZ5FlR8zOQACd0gSgcqrGPjo25GQYUk0KUWo=
Subject key identifier: 58:BA:E9:6F:B2:C1:D5:AC:FA:88:65:2D:25:83:A9:32:82:25:A3:4A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196614BF7F2885E33AB53F9EC836B01853B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WLrpb7LB1az6iGUtJYOpMoIlo0o.roa
Signing time: Wed 23 Apr 2025 06:18:10 +0000
ROA not before: Wed 23 Apr 2025 06:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 45.86.15.0/24 maxlen: 24
45.141.176.0/24 maxlen: 24
45.146.91.0/24 maxlen: 24
45.146.180.0/24 maxlen: 24
185.214.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 11:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:4b:f7:f2:88:5e:33:ab:53:f9:ec:83:6b:01:85:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 23 06:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58bae96fb2c1d5acfa88652d2583a9328225a34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:5b:bc:af:85:63:06:b2:57:3a:8e:aa:63:
7a:fc:7a:6e:54:0e:d5:70:8f:19:22:18:15:ea:d7:
67:5a:e8:c4:bf:b1:5d:83:04:f1:99:64:ba:c7:74:
f5:04:86:ee:e3:04:22:b5:90:8b:5f:e3:49:2b:a2:
64:49:e7:8c:d2:29:51:4b:5e:37:cf:73:e8:97:ca:
10:2b:ae:2f:03:93:29:46:10:12:8d:5f:8a:2e:27:
8e:56:fc:73:33:2b:30:4b:a5:ea:20:2a:82:da:a3:
da:20:4f:4a:81:a8:f4:6f:a6:c3:df:12:08:12:a3:
ef:c9:93:c9:9a:15:0d:1a:2f:06:8d:0e:26:d1:50:
8c:7b:49:29:d3:08:bb:7e:3d:b4:63:cd:a5:35:4d:
07:14:50:7b:11:f2:3a:eb:6a:d3:48:9b:a1:cc:45:
e0:f7:32:51:67:4a:48:90:ef:db:85:ea:48:79:51:
1c:94:c2:43:08:da:84:a5:de:9e:55:a4:74:27:cb:
6d:be:86:d4:c8:9e:8d:a6:53:cc:9c:81:67:ee:0d:
e0:73:75:09:0a:d2:3a:ad:fd:fd:4b:94:1b:5e:e9:
74:15:2d:82:9f:ff:ba:2d:a8:5f:60:96:a0:aa:f4:
27:e8:f3:2b:19:ee:f6:30:8e:71:0f:d0:0a:18:eb:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BA:E9:6F:B2:C1:D5:AC:FA:88:65:2D:25:83:A9:32:82:25:A3:4A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WLrpb7LB1az6iGUtJYOpMoIlo0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.15.0/24
45.141.176.0/24
45.146.91.0/24
45.146.180.0/24
185.214.74.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e4:96:93:5f:36:51:30:9b:5f:53:4d:6f:e6:21:3a:56:45:
5d:f9:a1:16:49:e0:97:20:a1:0c:9b:4d:a5:6c:0b:fb:4d:3c:
5e:53:9f:49:5b:e4:c8:d1:46:8d:83:11:9d:11:1d:7f:47:40:
ad:47:a4:28:0a:d7:c1:d5:78:af:6b:bc:59:db:44:f8:79:54:
26:5c:b4:5e:8c:b4:39:5e:c0:b5:9c:68:8e:33:00:5b:39:71:
38:e2:a4:27:f5:e5:3b:d5:5f:34:bd:44:5f:71:11:18:54:61:
df:5b:67:a1:cb:42:6e:7e:97:84:f2:76:a3:41:f1:fe:2c:71:
fb:e2:8e:b3:f8:d3:ab:26:87:73:96:52:d8:8c:6a:53:3f:8b:
f2:70:85:06:a3:9d:91:81:64:56:50:36:57:44:01:42:97:3b:
34:51:92:2d:71:4e:3a:d6:ce:5a:ee:1b:d4:a2:64:95:ae:aa:
8c:dd:b9:70:d5:07:a3:b1:40:21:5f:92:c9:36:f2:ec:ee:f8:
5b:71:68:22:5b:b7:ee:10:c8:d5:39:41:3e:18:8a:35:ef:76:
11:1e:c5:4d:bc:55:4a:ec:2f:72:fb:86:9b:8f:d8:13:55:11:
0b:8f:5a:e5:14:a6:d7:d1:6c:bf:1b:fb:ef:1f:e4:06:ec:28:
b0:dc:59:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:54:29 2025 by rpki-client