Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/xJ6Yj5nI3h19nW9VzEXnxlOeLoU.roa
File: xJ6Yj5nI3h19nW9VzEXnxlOeLoU.roa (raw, json)
Hash identifier: S0b4REgtjOAQye3JB2jwb6qgK3kSXomrbpdYKliH5q8=
Subject key identifier: C4:9E:98:8F:99:C8:DE:1D:7D:9D:6F:55:CC:45:E7:C6:53:9E:2E:85
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 018CF921F23451240864940031B8CA725D3F
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/xJ6Yj5nI3h19nW9VzEXnxlOeLoU.roa
Signing time: Thu 11 Jan 2024 15:26:40 +0000
ROA not before: Thu 11 Jan 2024 15:26:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61955
IP address blocks: 45.159.213.0/24 maxlen: 24
45.159.212.0/24 maxlen: 24
45.159.214.0/24 maxlen: 24
45.159.215.0/24 maxlen: 24
185.54.111.0/24 maxlen: 24
185.54.108.0/22 maxlen: 22
185.54.108.0/24 maxlen: 24
185.54.109.0/24 maxlen: 24
185.54.110.0/24 maxlen: 24
2a02:44a0:1c::/48 maxlen: 48
2a02:44a0:17::/48 maxlen: 48
2a02:44a0:12::/48 maxlen: 48
2a02:44a0:d::/48 maxlen: 48
2a02:44a0:10::/48 maxlen: 48
2a02:44a0:b::/48 maxlen: 48
2a02:44a0:6::/48 maxlen: 48
2a02:44a0:1::/48 maxlen: 48
2a02:44a0:14::/48 maxlen: 48
2a02:44a0:f::/48 maxlen: 48
2a02:44a0:a::/48 maxlen: 48
2a02:44a0::/64 maxlen: 64
2a02:44a0:5::/48 maxlen: 48
2a02:44a0:8::/48 maxlen: 48
2a02:44a0:3::/48 maxlen: 48
2a02:44a0:1e::/48 maxlen: 48
2a02:44a0:19::/48 maxlen: 48
2a02:44a0:c::/48 maxlen: 48
2a02:44a0:7::/48 maxlen: 48
2a02:44a0:2::/48 maxlen: 48
2a02:44a0:1d::/48 maxlen: 48
2a02:44a0::/48 maxlen: 48
2a02:44a0:1b::/48 maxlen: 48
2a02:44a0:16::/48 maxlen: 48
2a02:44a0:11::/48 maxlen: 48
2a02:44a0:4::/48 maxlen: 48
2a02:44a0:1f::/48 maxlen: 48
2a02:44a0:ffff::/48 maxlen: 48
2a02:44a0:1a::/48 maxlen: 48
2a02:44a0:15::/48 maxlen: 48
2a02:44a0:18::/48 maxlen: 48
2a02:44a0:13::/48 maxlen: 48
2a02:44a0:e::/48 maxlen: 48
2a02:44a0:9::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:21:f2:34:51:24:08:64:94:00:31:b8:ca:72:5d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Jan 11 15:26:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c49e988f99c8de1d7d9d6f55cc45e7c6539e2e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:80:29:e0:48:ca:55:0f:63:50:37:21:ac:
80:81:a5:1f:ec:9e:5a:63:49:0c:74:60:22:8d:7d:
dc:0b:37:a3:2c:96:76:09:a7:1e:05:c1:66:47:66:
eb:b8:cc:d9:65:04:39:74:8c:c7:e8:e0:ce:5b:38:
42:23:46:76:37:45:9b:c1:b8:35:35:94:e0:4a:aa:
23:19:a1:dc:ec:73:87:bc:42:58:3c:fd:7a:e5:1c:
83:38:31:b0:8c:db:c2:fd:0f:31:5d:7f:5a:63:40:
57:86:54:cc:98:3c:63:a2:4a:1e:fb:1d:14:87:43:
84:22:91:e5:4e:88:a5:a9:e8:c4:20:2f:84:26:4e:
8a:28:5c:ac:30:b0:c6:79:ea:b0:f3:c3:ea:09:1c:
f3:b0:45:a2:29:00:ad:16:c3:e0:10:86:af:f2:9a:
da:83:2f:c9:e1:76:2c:53:25:71:9c:00:f0:76:f2:
89:5c:f0:8b:4a:58:5a:ce:de:bb:10:8c:1d:61:a8:
be:82:50:55:07:d6:ed:0f:2f:14:39:09:86:ba:15:
b2:c0:0c:0f:81:9b:b8:b7:6e:6c:ab:60:88:06:bd:
af:22:f5:a7:5c:93:6c:40:5a:7e:34:fb:e1:8f:a4:
a6:be:1a:8a:ec:00:a2:28:3f:88:5c:2d:cf:c3:83:
8e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9E:98:8F:99:C8:DE:1D:7D:9D:6F:55:CC:45:E7:C6:53:9E:2E:85
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/xJ6Yj5nI3h19nW9VzEXnxlOeLoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.212.0/22
185.54.108.0/22
IPv6:
2a02:44a0::/43
2a02:44a0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
4a:0d:b5:5e:9c:5b:21:dd:da:45:44:c9:8b:ec:f2:3f:48:d8:
58:17:e9:ca:73:fa:95:d8:5c:72:be:4c:63:63:b9:2d:6a:e5:
62:e0:43:d1:9f:5a:db:80:80:da:69:e5:df:86:55:d6:7f:fa:
14:e1:dc:de:d9:ad:a3:fb:5e:91:f7:b9:20:b2:ee:6f:e9:1d:
42:91:da:38:6d:43:d9:1d:74:4a:34:ec:46:67:a7:75:4f:67:
44:f2:e8:01:bc:8e:bd:6a:87:01:fe:20:2c:c2:1f:93:6d:27:
1a:43:9b:e7:c5:b3:88:9f:68:04:58:88:dd:6a:fe:b7:bb:fc:
ee:3d:48:5a:49:ef:24:f8:44:4c:ee:c8:ed:68:39:a4:c9:90:
25:ce:2c:b2:14:82:11:59:8a:36:9c:9f:fb:04:e8:36:1d:e1:
b0:ad:a3:4a:8c:93:14:28:d1:a1:c2:a0:99:08:8b:95:9b:83:
56:38:04:79:0c:6c:96:b8:56:a6:b8:38:fd:b5:52:42:1d:89:
13:79:15:6d:11:0f:3f:6b:b6:a4:8c:4a:7a:16:46:a1:4b:c7:
f9:be:f9:b9:ce:a0:6a:26:d3:41:5b:f1:59:58:e5:51:2c:fb:
32:bb:14:08:c6:b7:85:c9:32:de:68:8f:65:d8:90:af:af:32:
76:eb:32:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:57 2025 by rpki-client