Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/irK7NL3JTeYEdfFZLlxk5ByXfKY.roa
File: irK7NL3JTeYEdfFZLlxk5ByXfKY.roa (raw, json)
Hash identifier: A54dEkwThFfvqIqXS47F7Qg1YGd26m2O9KkOp8W3ysg=
Subject key identifier: 8A:B2:BB:34:BD:C9:4D:E6:04:75:F1:59:2E:5C:64:E4:1C:97:7C:A6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CFC831EF5D9A268B8AAC672E251F0C41A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/irK7NL3JTeYEdfFZLlxk5ByXfKY.roa
Signing time: Fri 12 Jan 2024 07:11:40 +0000
ROA not before: Fri 12 Jan 2024 07:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.141.178.0/24 maxlen: 24
93.190.246.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 14:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fc:83:1e:f5:d9:a2:68:b8:aa:c6:72:e2:51:f0:c4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 12 07:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ab2bb34bdc94de60475f1592e5c64e41c977ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6e:2a:99:8b:93:0d:08:0e:a0:9c:ad:4f:d5:
3b:fa:95:4f:2d:7e:01:25:5a:9a:77:96:21:3b:f6:
82:1b:34:ae:93:de:78:c5:27:37:0c:11:78:c5:af:
fa:81:bb:47:3c:5e:82:4d:58:ca:bb:6a:5c:d7:2a:
84:7e:2f:bf:95:27:f3:05:66:b8:88:61:79:09:27:
83:c2:4f:8c:3a:6b:8f:62:a1:2e:01:fe:f0:40:02:
86:a5:b7:d8:1a:d1:d6:45:3a:ee:b3:d4:0a:11:1d:
4b:07:2e:40:0d:42:a0:37:71:38:9d:bc:ab:5e:bd:
a1:d3:25:8b:fc:33:aa:53:61:e3:38:85:be:4d:35:
84:72:ea:aa:17:a6:bb:1f:c2:26:7e:19:f3:da:74:
7c:ed:cb:54:44:1c:6c:68:81:b3:0e:ac:54:dc:e8:
9f:bb:9f:73:f4:0d:76:df:8f:7e:11:6c:91:23:83:
f9:bf:48:33:96:6d:63:65:d6:63:6f:c9:94:8a:5e:
d1:bc:51:9c:76:c7:c8:47:a1:d7:51:32:c8:6b:e4:
da:98:e9:55:3b:8e:1c:f1:78:be:ba:04:89:7a:22:
76:69:9f:f8:9e:e1:28:63:67:74:6c:0c:58:c0:1a:
76:69:f5:81:ca:c9:0c:62:ee:cf:34:10:95:de:b0:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B2:BB:34:BD:C9:4D:E6:04:75:F1:59:2E:5C:64:E4:1C:97:7C:A6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/irK7NL3JTeYEdfFZLlxk5ByXfKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.79.0/24
45.141.178.0/24
93.190.246.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e1:2d:aa:12:47:18:b6:b0:5e:5e:34:99:e8:49:0b:c2:e2:
eb:53:d2:12:2a:dc:45:83:e8:c5:92:77:25:23:42:13:56:f8:
9c:8e:06:8f:d9:57:7c:b5:b3:0b:4c:2e:df:bf:65:5f:53:51:
b6:3e:9d:bd:f5:cd:50:02:09:7f:48:03:7a:e6:17:2b:30:e4:
d9:ae:69:a9:12:0b:1f:dc:f1:5a:17:4b:ce:9b:85:12:89:63:
49:b3:68:d9:af:04:0a:e7:22:51:17:59:9d:b2:ab:02:8d:76:
62:3b:c4:8d:34:1c:1f:d2:95:46:98:e4:5c:5b:c2:c4:88:db:
33:04:01:7f:79:89:16:2a:0b:1a:b0:ff:9b:be:cd:1c:70:2a:
be:a1:cc:5d:6a:ab:3e:08:ad:6a:59:f4:e4:eb:5d:8b:84:9c:
d4:fb:5a:ae:e3:34:4c:7c:f7:78:58:c1:c0:5f:21:71:7e:cc:
4c:f3:e8:f3:4b:8e:11:72:2c:b2:da:19:bf:f5:06:fd:d6:e4:
3e:cf:e2:8e:f4:a3:ca:b1:46:26:4e:2a:04:9a:9b:fa:6c:4b:
11:84:b9:5b:8b:d5:60:04:3b:48:b3:22:26:4c:ce:6e:68:a3:
b4:82:d2:d7:44:be:79:51:26:e8:c7:7a:28:a2:f9:d9:4e:14:
47:0f:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:17:54 2025 by rpki-client