Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YGlHA1qq7Oq1p6ZzOvoA_htuFDw.roa
File: YGlHA1qq7Oq1p6ZzOvoA_htuFDw.roa (raw, json)
Hash identifier: qKh6bGsklPdNNa4NkquoqxjiWBMaAlJmybf4rlgbMhk=
Subject key identifier: 60:69:47:03:5A:AA:EC:EA:B5:A7:A6:73:3A:FA:00:FE:1B:6E:14:3C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01942CE47D35B2632BB1065D8FE2CC84172F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YGlHA1qq7Oq1p6ZzOvoA_htuFDw.roa
Signing time: Fri 03 Jan 2025 15:59:19 +0000
ROA not before: Fri 03 Jan 2025 15:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214927
IP address blocks: 45.9.117.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 09:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:e4:7d:35:b2:63:2b:b1:06:5d:8f:e2:cc:84:17:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 3 15:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=606947035aaaeceab5a7a6733afa00fe1b6e143c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:b5:13:05:1a:b8:ac:2d:ac:c1:12:ec:4b:
04:06:23:e8:fc:ba:be:f4:87:ce:53:46:32:a8:60:
78:5d:a3:21:ab:55:73:d6:6e:ea:74:c8:5c:2e:38:
7f:0a:ec:f4:18:51:54:c0:8e:cd:29:6b:0a:02:97:
ce:12:94:c0:60:76:a8:1e:86:e7:03:0c:2e:55:61:
a7:3b:55:2c:03:0a:b6:04:46:70:77:d3:78:7b:c8:
6a:79:99:83:3c:11:0f:4a:7c:22:45:59:bb:d4:82:
b4:a3:21:29:24:d3:bb:1c:c2:13:ce:71:52:6b:ae:
d1:b2:bd:d2:ec:ba:53:67:0b:43:b8:22:32:08:13:
c9:b0:82:64:c2:c2:71:cc:0f:54:4c:48:66:16:5d:
32:2c:83:20:0a:c6:02:e5:e1:36:4d:3a:ce:96:02:
e2:8a:09:dc:41:29:e1:05:94:4f:02:aa:33:f7:e2:
5f:73:cb:14:8f:9b:4d:54:73:35:7a:af:22:0a:a9:
68:bb:d2:33:06:17:b2:3f:1f:24:fc:29:6f:bb:5a:
b4:20:03:bb:4d:6c:90:a8:95:51:95:66:52:b4:1c:
d7:ca:67:a4:93:b1:28:f8:af:0f:a6:41:fd:8e:98:
76:17:9e:31:06:de:21:e5:78:54:7f:4b:56:04:8d:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:69:47:03:5A:AA:EC:EA:B5:A7:A6:73:3A:FA:00:FE:1B:6E:14:3C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YGlHA1qq7Oq1p6ZzOvoA_htuFDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.118.248.0/24
45.131.215.0/24
45.137.81.0/24
45.141.177.0/24
85.209.128.0/24
103.114.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b7:0e:66:44:2e:06:01:63:d4:7c:d8:a7:dc:4d:ad:68:6a:
5d:20:15:88:69:3d:7c:47:98:7e:15:d6:1b:e1:67:22:60:62:
d4:93:65:0e:e0:5d:c9:99:33:7f:ba:b7:e4:2f:5b:70:ec:da:
65:eb:5a:71:46:bb:99:b9:56:20:cd:4b:73:f3:f3:78:89:ed:
44:74:9f:43:08:d6:75:4e:3f:a4:2e:66:7a:05:a2:6f:7f:1b:
d9:e9:ba:a3:1a:b0:89:04:f9:f4:8e:7d:bc:5d:fd:8e:51:3e:
44:53:66:1d:65:b5:6e:1d:2c:4e:7c:3b:8f:ae:24:b4:40:3d:
4c:c4:95:7b:98:3f:d2:fc:cf:36:ca:1c:e6:4d:bc:4c:bb:e7:
15:a7:38:58:28:a5:dc:f5:cc:26:bf:5c:c0:de:96:4c:97:cc:
eb:ac:35:af:c5:1f:11:ce:8f:6a:74:d4:74:69:3d:c2:6e:dd:
27:0d:2b:96:4b:85:39:6a:54:e6:e0:3b:54:91:14:49:e6:b1:
b7:cb:1f:6f:72:6d:e3:45:e5:b7:68:cd:b0:f5:a8:9f:d0:6a:
b9:18:37:6c:01:b9:c4:32:48:22:46:c6:02:b8:71:84:19:e9:
ce:2a:00:c0:28:c1:65:99:b7:b2:0a:66:2d:85:2a:e3:43:e6:
d0:a2:9d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:13:12 2025 by rpki-client