Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/n0yUyVxvMepHQ1tgWq0zBJkUcXE.roa
File: n0yUyVxvMepHQ1tgWq0zBJkUcXE.roa (raw, json)
Hash identifier: 6OIefZ557B5ndYQkdK25LC66IS/Zbs0Qx6BM4+p67fc=
Subject key identifier: 9F:4C:94:C9:5C:6F:31:EA:47:43:5B:60:5A:AD:33:04:99:14:71:71
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 0193A4D85A45E30D799DBA3925EDF7EAD318
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/n0yUyVxvMepHQ1tgWq0zBJkUcXE.roa
Signing time: Sun 08 Dec 2024 05:57:42 +0000
ROA not before: Sun 08 Dec 2024 05:57:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132839
IP address blocks: 2.59.100.0/22 maxlen: 22
2.59.100.0/24 maxlen: 24
2.59.101.0/24 maxlen: 24
2.59.102.0/24 maxlen: 24
2.59.103.0/24 maxlen: 24
45.66.188.0/22 maxlen: 22
45.66.188.0/24 maxlen: 24
45.66.189.0/24 maxlen: 24
45.66.190.0/24 maxlen: 24
45.66.191.0/24 maxlen: 24
45.93.64.0/22 maxlen: 22
45.93.64.0/24 maxlen: 24
45.93.65.0/24 maxlen: 24
45.93.66.0/24 maxlen: 24
45.93.67.0/24 maxlen: 24
45.156.168.0/22 maxlen: 22
45.156.169.0/24 maxlen: 24
45.156.171.0/24 maxlen: 24
62.192.188.0/22 maxlen: 22
62.192.188.0/24 maxlen: 24
62.192.189.0/24 maxlen: 24
62.192.190.0/24 maxlen: 24
62.192.191.0/24 maxlen: 24
83.150.224.0/22 maxlen: 22
83.150.224.0/24 maxlen: 24
83.150.225.0/24 maxlen: 24
193.42.132.0/24 maxlen: 24
193.42.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Dec 2024 14:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a4:d8:5a:45:e3:0d:79:9d:ba:39:25:ed:f7:ea:d3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Dec 8 05:57:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f4c94c95c6f31ea47435b605aad330499147171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:30:f1:65:15:fd:90:85:8b:9e:ac:88:05:
08:a1:9d:93:a5:92:fa:bf:29:39:d3:c3:e5:75:15:
7f:f4:c8:de:bc:5c:47:4e:3c:f7:3b:79:db:0d:19:
fe:37:41:1c:3b:4c:6c:e0:c9:06:32:35:d2:52:75:
6b:77:a9:50:74:66:ff:4c:b1:9c:d8:d6:fd:86:0e:
ed:98:93:2e:1a:8a:64:39:d9:31:62:be:9c:6f:c9:
2f:a8:8f:db:83:f5:bc:0b:83:8b:b5:1c:5d:fd:b8:
9f:04:73:72:52:da:34:12:be:a5:f7:d1:09:31:c6:
f7:90:68:5f:94:1a:3a:78:0d:93:6e:80:98:3c:3a:
f9:de:da:93:61:43:b7:f6:69:e4:c1:5e:70:3b:e3:
e9:19:47:e7:50:30:4c:de:84:73:57:2c:67:61:60:
2d:d8:18:72:9f:19:0d:fa:b7:d4:3c:83:53:61:22:
b5:b8:6f:38:08:39:b0:3d:4a:4c:02:9e:4a:6f:a6:
d4:02:10:22:20:b2:50:df:70:3a:ec:42:e4:7c:67:
9b:23:00:28:cd:9b:7a:d4:ae:ac:5b:1c:30:64:13:
af:24:42:75:87:af:cd:6f:39:0d:f9:0b:e3:2b:97:
7c:5a:73:20:67:e9:ce:02:a2:4e:6f:c2:9d:bf:ce:
66:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4C:94:C9:5C:6F:31:EA:47:43:5B:60:5A:AD:33:04:99:14:71:71
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/n0yUyVxvMepHQ1tgWq0zBJkUcXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.100.0/22
45.66.188.0/22
45.93.64.0/22
45.156.168.0/22
62.192.188.0/22
83.150.224.0/22
193.42.132.0/24
193.42.149.0/24
Signature Algorithm: sha256WithRSAEncryption
12:37:0c:3a:6d:33:22:dc:74:5b:e9:20:f4:b5:4e:9f:ad:94:
6c:03:30:62:da:aa:37:e1:7e:dc:61:78:a7:61:b7:2f:6e:4d:
d2:d2:e9:07:c0:4a:2b:c1:b0:28:26:f8:81:4d:2d:eb:1e:4c:
36:97:0c:d7:46:d0:41:59:57:c6:c5:5d:ac:c0:79:71:49:22:
58:45:d2:8c:5d:f2:d3:eb:59:62:fa:09:4e:ce:57:c0:82:cc:
ff:0a:70:f7:b7:ec:af:73:dd:c9:84:03:f9:2f:61:4d:fd:c9:
c9:b8:87:75:17:d9:e0:9b:f3:04:00:fe:83:23:66:d0:ab:41:
b8:04:3d:7d:38:be:13:9b:9f:68:e5:1c:48:e1:7c:10:d3:b7:
0a:f9:b6:33:58:cb:55:99:42:22:6d:94:0a:79:bd:9d:00:fe:
1c:03:5a:fe:24:be:6e:f1:df:28:aa:e7:6f:e7:a8:5c:d4:1a:
47:2b:b6:e0:17:7c:a5:cd:61:d9:2f:b6:06:bc:3e:75:e9:5a:
2d:7c:82:2c:78:77:0b:42:b7:e6:55:42:f6:6b:6a:50:bf:95:
44:bc:25:c1:a7:fc:fa:bf:58:1a:0c:f5:7a:b3:7b:68:d9:1c:
5d:6a:36:ae:6b:2c:8a:8e:7d:45:3f:68:c6:9e:d7:77:07:0f:
dd:55:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:58 2025 by rpki-client