Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/dY8uoR4_0xvJUD2P96SR0yYaik8.roa
File: dY8uoR4_0xvJUD2P96SR0yYaik8.roa (raw, json)
Hash identifier: yT/wm6BbUmMVCzn1QKlLfdTsG2C6ix+CERMboCbdSLI=
Subject key identifier: 75:8F:2E:A1:1E:3F:D3:1B:C9:50:3D:8F:F7:A4:91:D3:26:1A:8A:4F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01969967ABFDFC865369503EFAAD99B2BD07
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/dY8uoR4_0xvJUD2P96SR0yYaik8.roa
Signing time: Sun 04 May 2025 03:47:10 +0000
ROA not before: Sun 04 May 2025 03:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.139.6.0/23 maxlen: 24
46.249.110.0/24 maxlen: 24
82.115.0.0/24 maxlen: 24
82.115.9.0/24 maxlen: 24
82.115.28.0/23 maxlen: 24
89.251.10.0/24 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
185.231.172.0/22 maxlen: 24
188.209.156.0/22 maxlen: 24
188.253.8.0/21 maxlen: 24
202.133.90.0/23 maxlen: 24
212.90.100.0/22 maxlen: 24
213.173.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 02:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:67:ab:fd:fc:86:53:69:50:3e:fa:ad:99:b2:bd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 4 03:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=758f2ea11e3fd31bc9503d8ff7a491d3261a8a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:ee:d4:c1:7a:4c:89:3d:cd:ae:db:35:22:
95:8e:58:a2:fc:47:4f:53:ba:97:44:9b:67:d8:40:
6d:5f:f0:ba:43:c0:49:3f:84:ec:09:24:22:52:1f:
ed:68:ea:59:c3:80:16:22:a6:b9:09:ca:ac:1c:fd:
09:7b:64:bd:09:46:92:2b:9a:b9:65:74:a4:c5:63:
97:37:ee:bb:5a:ed:41:18:a8:af:c6:d6:e4:78:5f:
96:ec:fd:64:63:b3:dc:9f:08:b6:6b:47:dd:bd:7a:
48:15:4a:87:8f:9a:17:ed:d9:dc:37:01:a6:4f:cb:
27:c8:e6:7a:dd:22:2b:65:f3:7f:7f:30:b4:b7:93:
a3:47:2a:a9:99:f2:93:96:d6:b2:8b:17:31:de:ac:
1d:fe:d0:42:02:41:c3:9b:34:51:20:b7:1d:d3:ea:
aa:26:bd:f9:66:20:41:e6:de:be:c4:1c:69:1d:d9:
43:45:77:79:af:aa:e3:a9:0a:49:bc:ae:a0:fc:44:
bf:e5:13:6b:2a:56:8d:be:1a:a6:b7:56:66:a0:28:
29:84:e2:65:86:d6:f8:5e:90:b1:e2:4c:a2:f2:ae:
48:e4:fa:6a:09:ce:a5:a4:53:3c:08:50:26:94:b2:
18:f6:b5:12:30:15:0c:8e:0c:15:a6:dc:c7:06:8c:
36:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8F:2E:A1:1E:3F:D3:1B:C9:50:3D:8F:F7:A4:91:D3:26:1A:8A:4F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/dY8uoR4_0xvJUD2P96SR0yYaik8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
46.249.110.0/24
82.115.0.0/24
82.115.9.0/24
82.115.28.0/23
89.251.10.0/24
159.255.32.0/21
185.231.172.0/22
188.209.156.0/22
188.253.8.0/21
202.133.90.0/23
212.90.100.0/22
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
67:76:3b:91:da:bf:ea:02:74:89:c9:92:8b:07:2e:dd:ea:31:
8b:18:f9:cc:a4:10:52:64:e4:09:be:e8:5f:f7:8e:8e:8b:ce:
b4:37:16:44:c2:b9:e1:77:cf:e4:1e:60:86:ff:c5:ee:0e:9c:
b9:72:a4:1e:14:2a:df:a8:a8:8b:ff:e3:c8:08:bd:f7:84:dc:
d3:27:30:7a:3d:ef:e4:af:63:4e:75:bb:67:26:d8:02:4b:c6:
42:42:58:0c:da:b9:ea:32:39:f7:ee:f2:14:c5:a9:0d:fe:f6:
d8:2e:ad:3b:89:9e:af:12:ba:34:fc:c2:12:90:67:86:0c:f8:
9e:5b:83:11:3e:14:1e:a9:95:4f:5e:fc:ef:c2:2a:68:21:53:
b5:58:08:63:52:61:63:b9:93:60:0a:3e:a9:c8:4f:9e:e7:63:
2e:a7:3d:13:bf:01:e0:87:cb:ac:c4:cb:28:dd:e9:ee:b3:94:
42:0d:42:d1:6c:2c:6e:c3:8b:59:85:12:0d:45:aa:a4:d2:d1:
f9:d2:6e:da:97:87:33:cf:98:3a:82:a6:fc:69:6d:15:ed:cb:
69:27:73:d6:c1:43:4b:be:6a:02:b8:05:ba:4c:34:db:e5:ec:
33:12:24:f9:1e:23:c7:66:41:fe:b5:dd:43:bb:fc:f4:94:7a:
8a:d4:be:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:30:31 2025 by rpki-client