Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Q6H2MAOS3InuXI1iC2grDZ_3SPM.roa
File: Q6H2MAOS3InuXI1iC2grDZ_3SPM.roa (raw, json)
Hash identifier: Bx1sTZlQfU8n7jtVE3ddHqHN4RdtaUlhTwtgoF5fU8s=
Subject key identifier: 43:A1:F6:30:03:92:DC:89:EE:5C:8D:62:0B:68:2B:0D:9F:F7:48:F3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019169420F927432DA1AC5CE331820B01A91
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Q6H2MAOS3InuXI1iC2grDZ_3SPM.roa
Signing time: Mon 19 Aug 2024 06:10:22 +0000
ROA not before: Mon 19 Aug 2024 06:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.86.12.0/24 maxlen: 24
45.152.198.0/24 maxlen: 24
2a0e:1a84::/32 maxlen: 32
2a0e:f600:5f::/48 maxlen: 48
2a0f:3d80:bac::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a12:ecc2::/32 maxlen: 48
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 19 Aug 2024 12:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:42:0f:92:74:32:da:1a:c5:ce:33:18:20:b0:1a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 19 06:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43a1f6300392dc89ee5c8d620b682b0d9ff748f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6d:86:f5:3f:7d:05:7b:54:8a:f6:63:54:9e:
dc:21:66:d3:56:36:34:c2:44:9f:4e:56:9e:7f:d8:
1b:cc:ec:24:f2:59:8c:d8:58:0e:7c:9b:7b:14:85:
37:a1:d8:8d:db:91:23:db:21:84:7d:e3:cb:a1:a7:
95:29:41:8c:8f:8f:ab:c2:5b:90:2e:38:57:b2:6d:
5b:b8:58:5b:34:3c:77:57:61:71:c7:c1:02:f6:a7:
a7:b3:4d:11:57:9b:b6:e1:cf:cf:31:96:fb:a6:ca:
48:19:b0:0d:af:2a:94:fe:82:81:9e:1d:9e:80:28:
41:69:73:c2:bc:8b:82:b0:63:c5:ba:8f:9a:07:c0:
a8:14:6a:42:29:89:ab:ae:29:f1:09:25:59:84:47:
73:ae:1d:1b:08:7b:4a:ff:61:54:42:72:db:09:97:
b0:ab:d8:7c:7d:32:54:1e:77:bb:28:79:2f:84:96:
86:88:e4:ba:b6:68:04:d2:13:56:15:a7:f2:10:31:
fe:f3:94:fd:4e:e7:39:3b:9b:49:41:88:fd:2c:64:
73:c3:15:a6:15:39:22:08:b8:8c:bb:52:4b:1b:d5:
6f:3e:ed:e0:53:a9:55:db:30:4e:6c:c5:ac:e8:8b:
be:e4:8f:d8:3a:15:8b:ec:05:dc:93:47:96:5d:bc:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A1:F6:30:03:92:DC:89:EE:5C:8D:62:0B:68:2B:0D:9F:F7:48:F3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Q6H2MAOS3InuXI1iC2grDZ_3SPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.12.0/24
45.152.198.0/24
IPv6:
2a0e:1a84::/32
2a0e:f600:5f::/48
2a0f:3d80:bac::/48
2a0f:3d82::/32
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a12:ecc2::/32
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
05:fa:6d:1e:dd:61:6b:da:b7:fc:ae:bb:fc:1a:92:ee:01:20:
b6:d6:ff:13:55:f5:f0:3c:f4:65:ab:cf:4b:de:46:30:ef:0e:
ec:de:91:fe:c6:8c:8e:84:c9:7b:96:08:52:2c:a7:e0:4e:f1:
7f:20:b9:61:3b:42:6f:0e:cb:6f:b2:cd:7f:88:81:06:d2:f0:
15:aa:95:04:b8:d5:e4:e6:81:a9:d6:e6:c6:22:9d:4e:45:62:
8a:bc:44:68:3d:45:41:e9:75:63:43:67:f9:8b:47:47:44:ee:
c3:52:98:57:3a:d3:c8:4d:3f:3b:3e:6d:a8:6e:02:25:59:b2:
cf:75:31:8a:80:82:61:64:19:b5:71:56:06:8b:e4:c8:c5:91:
98:29:57:41:20:00:22:ab:7e:83:2f:ff:86:b7:52:a5:43:a2:
7b:69:42:35:1f:24:e7:07:00:0c:17:bc:ef:da:39:bb:08:b0:
e3:3e:f9:64:ec:83:95:69:94:fd:e5:3f:b9:8a:3c:6b:40:89:
c6:09:60:c4:56:cb:3e:d4:ff:33:d1:1d:f5:c1:82:d5:36:10:
f4:6a:11:f5:f9:c2:a1:64:54:35:d2:a6:33:70:c0:9d:d6:2c:
a1:a8:c3:f5:e4:17:15:f6:33:9d:d6:97:e8:f4:8c:48:93:b6:
d1:1d:10:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:32:12 2025 by rpki-client