Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UcIs5gUozVcFVbR0d2ZuRRthCdY.roa
File: UcIs5gUozVcFVbR0d2ZuRRthCdY.roa (raw, json)
Hash identifier: 1h8eW/Vz+9pKQKoa+cqRlvKIDCQ9afN5gGDbf4KgrRk=
Subject key identifier: 51:C2:2C:E6:05:28:CD:57:05:55:B4:74:77:66:6E:45:1B:61:09:D6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01902BBD25D8AFB97000A33739335714D084
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UcIs5gUozVcFVbR0d2ZuRRthCdY.roa
Signing time: Tue 18 Jun 2024 14:25:34 +0000
ROA not before: Tue 18 Jun 2024 14:25:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.86.12.0/24 maxlen: 24
45.152.198.0/24 maxlen: 24
2a0c:7884::/32 maxlen: 32
2a0e:1a84::/32 maxlen: 32
2a0f:2d80:1292::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a0f:e847:1::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a13:18c3::/32 maxlen: 32
2a13:1940::/29 maxlen: 29
2a13:2b40::/29 maxlen: 32
2a13:4900::/29 maxlen: 29
2a13:fc00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Jun 2024 09:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2b:bd:25:d8:af:b9:70:00:a3:37:39:33:57:14:d0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 18 14:25:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51c22ce60528cd570555b47477666e451b6109d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:46:d5:3b:a0:97:36:20:a3:9a:d4:b9:2d:
19:c9:9a:cb:3a:84:f8:ec:61:b9:2b:a4:aa:01:b9:
e0:26:15:db:b1:fe:ab:ac:12:f5:f3:ce:6b:53:40:
b4:a0:c7:8f:77:7f:ea:d6:ff:6d:ad:48:34:cb:21:
43:0e:4f:18:69:d4:b8:59:bb:4a:52:35:51:0d:47:
ce:51:dc:a1:4f:42:0a:fd:8c:f2:1e:4e:db:74:b4:
b8:84:fb:11:61:5f:8d:05:67:37:d0:e0:bc:df:8b:
88:39:bc:8c:4b:89:3c:01:cc:d1:56:a0:75:9f:6d:
e9:96:0a:05:23:4a:48:13:2c:7b:9c:b7:c7:51:ef:
24:41:00:d2:fa:73:ab:c0:7a:c9:82:8e:cd:09:ba:
fa:10:9d:63:bb:17:cd:f0:92:64:d3:1a:a9:3b:87:
ca:05:8f:63:68:87:0a:d4:ed:cb:ce:30:1e:de:ed:
64:ce:1f:85:c0:3a:c0:08:8f:8a:c8:b9:01:0f:da:
a5:d3:f7:b0:bf:67:f4:41:ff:34:b9:0f:b5:8c:6b:
21:74:5f:02:5d:0e:c0:8f:d5:f2:8e:f0:09:c1:cf:
00:e2:e8:0a:f8:b9:ea:60:8a:df:47:0f:fd:69:6e:
4a:d4:fd:ed:a8:bd:83:a6:52:fd:5c:dd:9d:a0:3c:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C2:2C:E6:05:28:CD:57:05:55:B4:74:77:66:6E:45:1B:61:09:D6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UcIs5gUozVcFVbR0d2ZuRRthCdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.12.0/24
45.152.198.0/24
IPv6:
2a0c:7884::/32
2a0e:1a84::/32
2a0f:2d80:1292::/48
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a0f:e847:1::/48
2a0f:e940::/29
2a12:d6c0::/29
2a13:18c3::/32
2a13:1940::/29
2a13:2b40::/29
2a13:4900::/29
2a13:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
4b:da:47:83:ba:e9:5a:01:f8:a6:7a:a0:2a:63:14:eb:ae:aa:
ac:61:84:42:00:9c:e6:35:33:1a:1c:ca:c1:8a:a1:4d:61:c0:
c7:72:75:e2:56:69:01:47:ec:ab:f9:1d:7a:48:a8:0f:5f:e4:
79:30:8e:07:3c:01:08:fe:46:42:87:15:b5:d1:5a:8e:f1:80:
56:b4:6f:6e:ae:59:c4:76:26:48:e6:aa:a0:14:90:72:2d:cc:
9c:35:19:02:53:66:1e:5f:68:9f:8f:61:0a:1a:b5:78:42:71:
6c:31:9c:0b:9b:44:3d:b7:8a:5d:68:02:dc:da:c7:58:6c:9f:
69:7b:e0:e2:a7:a1:b5:18:f8:93:6b:cf:6b:a3:f9:7f:82:e8:
3d:b7:49:a6:d3:97:2d:5d:2c:ce:08:e7:98:d0:33:a7:99:2c:
d5:b9:6d:a6:61:cd:ab:9d:01:82:19:d7:fe:b2:d1:f1:f4:a8:
4f:e5:75:b9:14:0c:24:bf:79:7d:4e:cf:ab:6c:9c:44:a4:52:
e0:de:05:b0:77:f7:36:bd:0f:ad:c0:ba:c2:f3:58:b8:2b:0e:
21:88:69:af:4c:f8:c4:37:9f:f3:dc:9f:09:c2:da:3e:22:aa:
ab:0e:e3:14:ce:ba:cc:b3:b9:b4:f2:e5:5d:49:df:6c:c3:70:
0d:04:a6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:31:27 2025 by rpki-client