Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/YL46L63mhc1aVjBT_-3zlHdFPAU.roa
File: YL46L63mhc1aVjBT_-3zlHdFPAU.roa (raw, json)
Hash identifier: JRoLzUT5qyLvH5715h+7hIhjULRdNrLUmnuPE75Cc1E=
Subject key identifier: 60:BE:3A:2F:AD:E6:85:CD:5A:56:30:53:FF:ED:F3:94:77:45:3C:05
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 019428254F5342CC1B1F991126B3CC77D35D
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/YL46L63mhc1aVjBT_-3zlHdFPAU.roa
Signing time: Thu 02 Jan 2025 17:52:01 +0000
ROA not before: Thu 02 Jan 2025 17:52:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24875
IP address blocks: 45.142.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 03:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:4f:53:42:cc:1b:1f:99:11:26:b3:cc:77:d3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Jan 2 17:52:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60be3a2fade685cd5a563053ffedf39477453c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:c0:5d:5a:82:75:f1:b6:0d:0a:31:b4:07:
56:60:60:18:08:fa:e9:3d:86:98:50:e8:c4:0b:49:
90:73:f5:e0:24:7a:09:6b:c1:b0:ec:42:d4:8e:6e:
13:cb:49:07:b7:3f:74:f0:0f:c7:a2:f4:60:64:33:
08:57:9a:0b:9e:84:df:74:12:2c:b7:25:8d:66:8a:
ab:15:1c:1e:27:cf:a1:7c:e3:67:3d:f7:64:f2:51:
68:5e:71:65:87:fc:fb:23:78:ab:28:b7:74:07:60:
42:5c:72:49:49:73:44:d1:83:9b:e6:cd:58:86:59:
2b:46:c4:53:1f:ce:06:59:d5:99:4e:ab:46:1d:f8:
b1:ad:f3:9e:52:7c:46:99:8b:16:bc:f0:0a:a6:a1:
08:1e:7b:4e:02:41:da:d9:22:63:1f:92:9a:4a:22:
61:e7:6d:c3:45:ea:21:c0:5d:0c:1a:90:ea:eb:e6:
b4:8f:8e:bc:ed:e5:82:f6:47:5e:b1:d8:3a:66:9c:
be:62:b0:68:4c:71:a0:02:5f:1e:35:e5:76:39:76:
45:ad:bb:f7:57:24:9c:ef:d1:73:a7:a2:8c:cd:e3:
e4:d4:d5:56:24:13:0a:e5:44:b3:bd:7f:2b:b6:80:
d0:cd:42:8a:9b:1e:86:0c:3a:c9:8f:89:4d:62:81:
a9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BE:3A:2F:AD:E6:85:CD:5A:56:30:53:FF:ED:F3:94:77:45:3C:05
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/YL46L63mhc1aVjBT_-3zlHdFPAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.154.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ec:27:44:d0:32:c7:d9:2a:56:fa:08:6c:76:ce:be:1d:e3:
28:ff:24:26:95:ec:b7:c3:9b:40:c4:87:a7:ad:e6:0e:1b:de:
31:6e:64:63:3c:87:4f:ac:cb:8c:f6:88:e8:a0:e9:f3:b0:6a:
74:85:80:ba:d9:5d:f4:1e:b7:17:d5:74:f6:da:be:ed:5c:b1:
a5:84:ff:60:cb:6c:13:54:03:fc:2f:78:8a:10:cc:07:36:6b:
38:4f:01:b3:f0:a1:fb:58:b4:56:3c:bc:3c:f3:8f:3d:3d:5e:
5f:a1:57:1c:9f:52:41:3e:c3:2b:df:bd:64:c7:a7:74:ab:c0:
4e:7f:b8:e8:e1:03:75:fa:06:9a:62:7c:d6:9f:29:a3:27:10:
cf:51:35:0b:98:d9:e8:ec:d0:ca:98:e3:c5:67:4b:da:e4:92:
01:6c:f3:b4:7f:7d:0d:cc:8e:86:0a:3c:cd:a3:9f:47:23:1c:
02:e7:9f:1f:ca:d7:d7:dd:19:03:e2:d0:7f:1b:9a:40:12:1f:
53:ca:81:46:9f:26:b1:01:13:ac:11:02:bb:27:1d:00:37:2e:
e9:50:a1:21:fc:73:f8:ff:f2:f9:04:e2:df:0a:e0:c7:22:a7:
8b:c9:77:3c:de:7b:49:86:36:49:c2:e7:96:bb:46:77:d8:33:
3a:10:35:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJU9TQswbH5kRJrPMd9NdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx
NjM2Y2QwHhcNMjUwMTAyMTc1MjAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGJlM2EyZmFkZTY4NWNkNWE1NjMwNTNmZmVkZjM5NDc3NDUzYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd3AXVqCdfG2DQoxtAdWYGAYCPrp
PYaYUOjEC0mQc/XgJHoJa8Gw7ELUjm4Ty0kHtz908A/HovRgZDMIV5oLnoTfdBIs
tyWNZoqrFRweJ8+hfONnPfdk8lFoXnFlh/z7I3irKLd0B2BCXHJJSXNE0YOb5s1Y
hlkrRsRTH84GWdWZTqtGHfixrfOeUnxGmYsWvPAKpqEIHntOAkHa2SJjH5KaSiJh
523DReohwF0MGpDq6+a0j4687eWC9kdesdg6Zpy+YrBoTHGgAl8eNeV2OXZFrbv3
VySc79Fzp6KMzePk1NVWJBMK5USzvX8rtoDQzUKKmx6GDDrJj4lNYoGphwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGC+Oi+t5oXNWlYwU//t85R3RTwFMB8GA1UdIwQY
MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt
YWU1MDI3MzY4MWE3LzEvWUw0Nkw2M21oYzFhVmpCVF8tM3psSGRGUEFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3
LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY6aMA0G
CSqGSIb3DQEBCwUAA4IBAQAX7CdE0DLH2SpW+ghsds6+HeMo/yQmley3w5tAxIen
reYOG94xbmRjPIdPrMuM9ojooOnzsGp0hYC62V30HrcX1XT22r7tXLGlhP9gy2wT
VAP8L3iKEMwHNms4TwGz8KH7WLRWPLw88489PV5foVccn1JBPsMr371kx6d0q8BO
f7jo4QN1+gaaYnzWnymjJxDPUTULmNno7NDKmOPFZ0va5JIBbPO0f30NzI6GCjzN
o59HIxwC558fytfX3RkD4tB/G5pAEh9TyoFGnyaxAROsEQK7Jx0ANy7pUKEh/HP4
//L5BOLfCuDHIqeLyXc83ntJhjZJwueWu0Z32DM6EDX4
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:20:36 2025 by rpki-client