Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y6hse4zMBSEHkZtme9UWUpuqzL0.roa
File: Y6hse4zMBSEHkZtme9UWUpuqzL0.roa (raw, json)
Hash identifier: pAPCTdYbxhS1qdyp9DMgsS8x/qLV58UgTZZdgjdft7s=
Subject key identifier: 63:A8:6C:7B:8C:CC:05:21:07:91:9B:66:7B:D5:16:52:9B:AA:CC:BD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824D7036C7CED3A88E538468BF629F2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y6hse4zMBSEHkZtme9UWUpuqzL0.roa
Signing time: Thu 02 Jan 2025 17:51:30 +0000
ROA not before: Thu 02 Jan 2025 17:51:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394711
IP address blocks: 45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 10:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:d7:03:6c:7c:ed:3a:88:e5:38:46:8b:f6:29:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63a86c7b8ccc052107919b667bd516529baaccbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:44:15:f5:1b:13:f7:d0:0e:68:eb:fc:20:
93:29:17:f4:96:da:65:44:09:17:62:31:78:26:bc:
9b:7a:72:14:a6:c5:8f:27:25:1d:df:0c:86:44:83:
da:f2:5e:9f:8d:e3:ad:5b:1c:95:ec:88:09:a6:31:
6c:ec:7c:87:1b:30:12:02:17:47:07:7f:56:de:06:
c6:f9:92:73:a8:fe:3e:10:a5:e6:dc:ba:5d:06:89:
a7:29:a5:95:02:50:19:b7:80:5d:d1:41:07:07:86:
a2:81:b4:b7:01:e3:e5:6a:5f:9e:99:50:91:e3:dc:
e6:26:d7:c6:3a:f0:96:ae:29:83:5c:b1:24:94:3c:
60:7d:4a:38:bb:38:d2:a7:28:87:c4:38:b3:ca:ee:
1d:21:02:19:42:f3:b9:6f:da:9e:6d:02:e5:88:64:
2e:66:94:df:a3:13:04:fa:18:ed:be:b6:f6:f4:12:
f6:82:48:ca:8b:71:f9:38:15:41:93:57:1c:b1:08:
8d:4e:5e:23:8e:92:60:6b:fe:0d:e7:af:1e:f3:d5:
5f:c2:23:b3:94:42:a6:d7:2b:86:b0:39:c0:79:04:
34:8c:a1:ba:69:30:08:a4:df:8d:28:59:5c:39:14:
28:58:0f:96:91:0e:13:66:b5:bf:3c:c7:a2:47:58:
7f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A8:6C:7B:8C:CC:05:21:07:91:9B:66:7B:D5:16:52:9B:AA:CC:BD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y6hse4zMBSEHkZtme9UWUpuqzL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.231.0/24
45.89.247.0/24
Signature Algorithm: sha256WithRSAEncryption
01:68:c0:63:f2:37:55:39:a2:83:ff:55:3c:b1:11:ad:ae:ac:
4f:ea:27:9d:a7:1e:b8:cf:95:0a:c9:e1:d4:b0:1c:2d:a7:14:
03:a6:61:99:e7:a5:ab:b9:68:1b:a6:10:de:7c:bb:b5:28:6d:
2a:4b:66:dd:dc:fe:67:18:0c:7a:6f:a7:1a:c9:d6:4f:13:81:
3c:90:ea:71:ac:6d:34:ba:3d:78:5c:db:c1:02:9e:29:45:b6:
56:71:d1:ac:45:51:9d:66:bd:8b:d6:48:27:ce:fd:71:ce:f3:
9e:1a:f7:b0:f2:4f:49:1f:df:da:a9:48:80:55:6a:82:18:d4:
52:5e:8a:51:e7:08:c6:c9:83:cc:d3:50:47:3f:5c:dc:f5:ed:
c1:8e:8c:0d:07:aa:69:ac:7d:f7:31:e9:ed:26:02:f2:c0:c2:
28:e4:8f:2a:7e:12:39:42:13:59:db:46:e2:a6:73:6d:3e:b9:
b9:a9:00:c9:0c:21:b6:54:10:21:c8:46:2d:d7:9e:ce:0e:9e:
56:d8:87:32:73:7c:d5:6f:37:19:64:25:f5:a2:6c:1b:ee:c9:
d6:c6:f1:7f:ab:60:75:75:5b:92:7f:ab:4c:74:39:2a:0e:27:
4d:11:52:2e:7e:e2:53:c1:e5:5d:8c:42:e6:9c:1c:b7:08:58:
e1:66:65:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:26:31 2025 by rpki-client