Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9grDHiyytmzrnqtBe5APsJgUrCk.roa
File: 9grDHiyytmzrnqtBe5APsJgUrCk.roa (raw, json)
Hash identifier: NdQCZz3g6IY4slPko/UsM4HT0L9t7ne8HUN84KVgCRI=
Subject key identifier: F6:0A:C3:1E:2C:B2:B6:6C:EB:9E:AB:41:7B:90:0F:B0:98:14:AC:29
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019199CD6F083B39915C39C06FE981336F5A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9grDHiyytmzrnqtBe5APsJgUrCk.roa
Signing time: Wed 28 Aug 2024 16:24:22 +0000
ROA not before: Wed 28 Aug 2024 16:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.86.12.0/24 maxlen: 24
45.152.198.0/24 maxlen: 24
103.114.40.0/24 maxlen: 24
2a0e:1a84::/32 maxlen: 32
2a0f:3d80:bac::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a0f:e6c6:5532::/48 maxlen: 48
2a12:ecc2::/32 maxlen: 32
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Sun 01 Sep 2024 18:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:99:cd:6f:08:3b:39:91:5c:39:c0:6f:e9:81:33:6f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 28 16:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f60ac31e2cb2b66ceb9eab417b900fb09814ac29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:a5:80:7a:62:ff:4a:49:72:b2:30:e3:47:
07:b7:45:9d:16:a6:ea:29:0c:d9:5b:38:41:01:1a:
ad:64:99:31:d2:8e:c6:cc:e9:3e:45:ba:24:98:7d:
51:d9:22:db:53:e1:a7:6d:f8:e0:8b:da:c1:64:04:
4c:11:6c:5d:25:71:d7:23:7d:15:95:8f:6d:ba:b2:
59:32:6a:5e:b5:06:92:ba:ba:b0:32:79:1b:bf:2a:
e2:70:5e:1e:70:bf:fe:c2:7f:3b:d1:22:1a:c1:99:
03:b1:96:1f:08:71:a0:86:eb:3a:bf:89:dd:f2:38:
9d:be:75:a4:79:12:8b:62:98:99:c9:b8:ad:f6:fe:
d9:c3:05:da:fe:96:9a:e0:af:d4:25:e8:ae:34:36:
52:35:46:15:04:e8:cb:1c:b5:42:ff:ff:2b:52:6e:
83:ad:58:31:48:e3:44:b6:8f:d4:ac:72:b5:62:80:
d6:5b:79:81:e9:d7:44:15:18:37:42:3a:33:bc:a0:
18:07:c0:f8:6a:16:f5:9b:9b:86:99:07:bd:ec:31:
c3:78:d9:ac:cc:9e:06:4c:ca:58:22:d0:50:ee:4c:
08:41:e3:7e:3c:67:54:29:e6:ef:0b:b9:cb:4c:a9:
16:74:a0:54:4c:02:6f:fc:da:c9:7b:a8:e5:80:77:
15:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0A:C3:1E:2C:B2:B6:6C:EB:9E:AB:41:7B:90:0F:B0:98:14:AC:29
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9grDHiyytmzrnqtBe5APsJgUrCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.12.0/24
45.152.198.0/24
103.114.40.0/24
IPv6:
2a0e:1a84::/32
2a0f:3d80:bac::/48
2a0f:3d82::/32
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a0f:e6c6:5532::/48
2a12:ecc2::/32
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
85:79:bd:60:f1:a4:1e:19:0e:63:a5:23:24:19:cf:5c:12:1b:
c9:4d:4d:c9:3b:0c:b2:10:6d:be:80:f2:71:c5:d8:c8:82:70:
72:eb:f3:eb:7b:e7:e7:15:64:81:0f:47:56:a6:d1:6c:c8:ba:
58:86:0e:1f:87:ce:3f:3b:1e:ec:9a:7c:c0:f8:1e:a9:ce:f0:
f9:da:1c:cd:a9:5c:37:a2:1d:81:5b:2a:ec:70:32:b2:21:b5:
81:49:9c:dd:1a:88:1b:30:7e:5a:03:99:39:a7:b8:80:21:bf:
99:46:f5:0c:db:69:7f:da:c0:69:c5:37:bf:b9:f5:a3:0b:c4:
85:06:6c:15:e2:05:5f:d9:5f:b2:7a:09:98:07:e5:bb:4c:37:
58:d9:46:d9:bd:9e:73:59:95:cc:39:7d:b3:1a:e7:89:3a:ee:
5a:10:c2:5e:d9:c8:33:fb:79:62:d5:14:da:da:7e:15:85:8d:
33:f6:84:d8:de:e7:e8:46:69:8b:14:a6:25:13:7e:68:a0:d3:
40:5b:b2:73:c2:fe:f0:49:33:3e:7c:6d:80:95:f4:c3:6d:e6:
3a:93:aa:fa:6a:2a:6c:5e:a3:45:63:e9:01:c2:e4:f0:27:ff:
7c:f8:cd:b7:f6:98:bf:fd:fa:2f:08:55:81:41:39:9b:37:2e:
55:17:aa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:02:55 2025 by rpki-client