Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/buA2BxmVDbkLsgtbVW1uFBNxsjI.roa
File: buA2BxmVDbkLsgtbVW1uFBNxsjI.roa (raw, json)
Hash identifier: oN41n5HSK16QMroCMzmVlOYYBQDmhT0pIOZ42qbfMQg=
Subject key identifier: 6E:E0:36:07:19:95:0D:B9:0B:B2:0B:5B:55:6D:6E:14:13:71:B2:32
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01969EDEDB7545900228B5EFECA865DBAC96
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/buA2BxmVDbkLsgtbVW1uFBNxsjI.roa
Signing time: Mon 05 May 2025 05:15:27 +0000
ROA not before: Mon 05 May 2025 05:15:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58057
IP address blocks: 45.131.186.0/24 maxlen: 24
45.136.136.0/24 maxlen: 24
45.136.137.0/24 maxlen: 24
45.136.139.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
185.102.84.0/24 maxlen: 24
185.232.117.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c1:200::/40 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 05 May 2025 06:29:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:de:db:75:45:90:02:28:b5:ef:ec:a8:65:db:ac:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 5 05:15:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ee0360719950db90bb20b5b556d6e141371b232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:dd:03:2a:ec:29:e1:58:07:96:a9:40:69:
7c:50:07:c0:db:33:57:7d:32:40:0f:20:e6:97:85:
6e:d1:33:79:b8:4b:f7:ef:bd:26:eb:7d:b0:9a:67:
21:a3:24:ca:4c:44:06:b4:0e:b3:4d:e8:c5:4e:0b:
0d:be:f8:53:6c:65:a7:7c:ab:93:9a:09:21:3e:ce:
28:ef:1f:aa:73:34:2d:a4:04:39:87:06:fb:c1:79:
57:d8:8c:8d:7d:ff:4a:2e:f6:c5:fb:ee:f2:08:5c:
38:0b:a7:53:91:46:ff:0f:e0:15:87:63:6c:30:44:
d6:65:60:3d:34:83:7a:46:ae:d7:0c:02:07:65:cb:
6a:ec:9e:67:87:04:ae:c2:c0:86:04:10:de:23:67:
55:fe:0d:e9:d7:32:ea:3a:ed:7b:ca:04:89:02:dc:
b0:0e:8a:81:72:3e:b1:d5:fa:e4:98:79:d5:c7:28:
5f:d7:6e:21:83:7d:21:03:e9:2f:c6:ce:b3:fe:66:
41:ba:fd:7d:35:a2:fe:80:17:78:40:06:28:8c:71:
f3:b8:92:39:f2:0c:03:79:0f:fb:82:3f:b6:f9:ea:
32:f8:19:a9:09:4c:fd:4c:8c:4b:95:7f:2e:6a:68:
f4:00:04:46:e3:ce:17:5d:d6:82:81:ba:32:d3:60:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E0:36:07:19:95:0D:B9:0B:B2:0B:5B:55:6D:6E:14:13:71:B2:32
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/buA2BxmVDbkLsgtbVW1uFBNxsjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.186.0/24
45.136.136.0/23
45.136.139.0/24
85.202.203.0/24
185.102.84.0/24
185.232.117.0/24
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
6e:33:d2:23:b3:92:96:5e:cb:8f:20:96:18:a9:14:50:93:68:
d5:ee:f1:98:95:46:c4:99:92:50:c7:76:f5:8f:40:12:09:40:
c0:34:00:ce:f6:7d:9c:04:ab:3f:2a:42:89:a5:8d:01:f2:10:
71:73:b3:66:88:15:b5:fe:2d:ef:cf:33:fd:f0:29:58:7c:f9:
32:81:17:1e:97:86:dc:39:89:b3:35:a0:4b:ae:b2:3f:e4:86:
0b:fe:1f:00:e0:65:5f:a2:21:a2:6c:16:91:cd:16:57:69:80:
10:b2:bc:07:6b:0f:f7:8b:f0:ba:95:2a:1b:2d:1f:89:81:ce:
26:ea:62:11:ae:3b:30:b5:92:41:40:e3:97:db:36:aa:0a:18:
5f:8f:26:49:58:79:0c:3d:dc:0b:a2:b1:0c:4f:61:e9:ba:22:
be:9b:13:5e:21:73:e4:4c:2c:41:bc:a3:01:fc:2e:df:2d:5b:
8c:c1:eb:69:c1:40:35:c5:2d:4e:da:f9:4f:df:b0:ef:73:b2:
fc:2a:cc:0c:61:ea:36:17:37:9d:3e:1a:db:ca:e0:15:2c:9b:
3c:fd:4d:48:ba:e9:a4:44:de:4f:5a:0a:0e:fe:b4:c6:fc:fd:
05:05:c3:76:8d:31:ea:f1:76:5e:5a:cb:c6:7b:1a:b5:f3:fa:
30:15:58:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 05:38:31 2025 by rpki-client