Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Ycv_AygbqZAb8-uTz7hfxmfchgQ.roa
File: Ycv_AygbqZAb8-uTz7hfxmfchgQ.roa (raw, json)
Hash identifier: O0UKYM3LCJRS8i3EFjwGr4RpXuWM+DANl6udKHsho4E=
Subject key identifier: 61:CB:FF:03:28:1B:A9:90:1B:F3:EB:93:CF:B8:5F:C6:67:DC:86:04
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01937F06278496E30A6ED0C70939E50E1958
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Ycv_AygbqZAb8-uTz7hfxmfchgQ.roa
Signing time: Sat 30 Nov 2024 21:42:09 +0000
ROA not before: Sat 30 Nov 2024 21:42:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205463
IP address blocks: 2.56.108.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7f:06:27:84:96:e3:0a:6e:d0:c7:09:39:e5:0e:19:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 30 21:42:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61cbff03281ba9901bf3eb93cfb85fc667dc8604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:77:06:2f:3e:45:c7:98:b1:5f:af:92:19:
ff:b0:b4:99:85:2e:d8:12:ef:41:43:ef:9c:dc:17:
38:de:d1:3a:16:d4:40:93:de:9a:3d:ae:03:28:6a:
ea:cd:3e:4e:d3:a7:12:12:78:c3:e7:c1:9b:4b:1b:
46:b4:d4:6f:9f:5d:78:d2:4f:a5:eb:56:ca:ba:7f:
82:9a:9d:3a:e0:a5:40:a4:98:15:f0:8a:f5:32:15:
ba:13:bf:10:22:0c:be:27:8d:0e:ea:80:62:2e:19:
68:10:de:4f:16:02:ed:58:69:94:18:dc:6d:38:95:
9b:03:58:03:e1:dd:08:31:45:5d:80:bb:37:be:d2:
7f:65:01:84:c4:17:fa:47:5f:2f:f9:21:53:b0:4f:
c9:be:ba:f9:15:87:f4:68:49:18:eb:66:cb:ab:16:
4a:8f:a5:69:e6:ed:e0:94:5f:90:83:de:4e:bd:ee:
32:3d:a7:17:5a:9e:b1:b9:3b:10:9e:e7:1e:1f:be:
07:77:31:1a:09:8e:e4:59:8b:58:d3:b7:75:dd:85:
29:0c:ad:79:42:a6:6f:ec:60:79:18:46:82:c6:62:
71:64:eb:e9:39:50:7b:00:50:14:d3:cd:8b:69:c8:
89:6b:ce:bf:a5:65:dc:34:21:40:cf:71:db:d7:d2:
b6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CB:FF:03:28:1B:A9:90:1B:F3:EB:93:CF:B8:5F:C6:67:DC:86:04
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Ycv_AygbqZAb8-uTz7hfxmfchgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/23
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.94.170.0/24
45.132.181.0/24
45.151.3.0/24
85.209.120.0/24
193.57.41.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
19:cc:eb:52:8b:aa:8a:7a:76:80:70:f2:5d:50:d7:a8:84:1d:
c9:eb:8d:57:47:5a:6b:e4:d4:b2:1f:64:43:de:4e:e5:5a:d7:
77:34:07:75:b8:4e:fe:43:c8:1e:1a:12:d0:e3:f2:ab:b6:88:
58:da:07:33:c5:6c:43:86:04:7f:33:e7:fd:cf:63:e9:0e:90:
2f:3e:ee:9b:b2:0d:fb:cb:f4:de:05:ff:01:fe:d8:80:e9:7c:
3a:97:cd:60:61:4a:c2:3d:cc:d7:1f:1a:de:4a:59:51:6f:28:
57:7f:97:d5:9c:e0:2c:b2:4c:68:05:74:a6:34:b6:c2:d4:4c:
93:e2:41:d1:74:1d:86:94:3c:f5:d3:56:b2:6c:c1:a9:e7:05:
26:46:e6:96:d3:49:86:00:17:76:ac:26:ad:1e:ee:2b:45:bc:
b7:05:bd:85:c3:f4:80:14:36:e5:a1:66:03:f8:fc:24:74:a0:
59:59:ff:20:d7:2a:91:88:17:d5:09:86:ca:12:e2:a6:d3:27:
43:00:5a:f5:75:cc:db:b9:a6:ab:4f:df:04:68:3e:e9:04:30:
c5:5a:d1:9d:32:98:b6:8b:7d:bd:19:68:2a:b3:98:8d:c3:a3:
b2:4f:27:11:1e:2f:b1:af:a4:9d:56:ac:f0:30:f0:f8:8c:10:
9e:ba:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:48 2025 by rpki-client