Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/Uu4heq_Rud2LZ0-X-corqp9sraQ.roa
File: Uu4heq_Rud2LZ0-X-corqp9sraQ.roa (raw, json)
Hash identifier: yFo9cIm2hHlxxeO7scYq4S3RfcIPRZ3YdVSfaPCIEWk=
Subject key identifier: 52:EE:21:7A:AF:D1:B9:DD:8B:67:4F:97:F9:CA:2B:AA:9F:6C:AD:A4
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 0193DDA7D502A4D336539A385B63AAAA13D4
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/Uu4heq_Rud2LZ0-X-corqp9sraQ.roa
Signing time: Thu 19 Dec 2024 06:43:03 +0000
ROA not before: Thu 19 Dec 2024 06:43:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60631
IP address blocks: 45.149.76.0/24 maxlen: 24
45.149.77.0/24 maxlen: 24
45.149.78.0/24 maxlen: 24
45.149.79.0/24 maxlen: 24
158.255.74.0/24 maxlen: 24
171.22.24.0/24 maxlen: 24
171.22.25.0/24 maxlen: 24
171.22.26.0/24 maxlen: 24
171.22.27.0/24 maxlen: 24
176.97.218.0/24 maxlen: 24
178.211.145.0/24 maxlen: 24
193.105.234.0/24 maxlen: 24
212.23.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Dec 2024 09:42:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:dd:a7:d5:02:a4:d3:36:53:9a:38:5b:63:aa:aa:13:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Dec 19 06:43:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52ee217aafd1b9dd8b674f97f9ca2baa9f6cada4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:46:d5:3f:d6:f2:06:66:1b:c9:f0:67:ca:
71:c0:9c:69:32:80:0b:56:19:79:f4:b1:45:00:08:
76:b3:94:80:c3:cd:b6:8b:78:7c:3b:d3:7e:d3:3b:
15:06:4c:d6:01:3b:23:b3:19:7c:11:ac:ba:43:d3:
c4:f5:37:2a:4b:6a:b3:fe:27:7e:35:cf:c0:22:ac:
1a:3e:37:69:17:ee:00:b9:11:a7:35:bd:6c:bd:10:
48:96:ba:3b:8b:31:af:40:2e:5a:e7:db:bc:cd:9e:
b5:e4:99:31:53:e5:4a:94:34:4e:a5:41:36:6d:40:
28:8d:8f:2a:c9:95:c3:31:e1:a3:d1:1e:af:07:eb:
a6:2d:30:5b:92:53:cf:77:26:e1:ce:32:0c:cb:d7:
db:0a:0c:5d:3b:74:bf:85:e1:6a:a8:b6:d2:b7:2f:
25:45:9b:d1:06:d9:2e:2e:0a:45:d1:87:4d:bc:97:
7f:09:f7:13:82:8d:23:fa:8b:bc:54:20:05:63:8f:
0d:5d:41:00:2e:b7:44:49:a0:47:2c:09:98:60:c8:
e7:29:77:4c:7c:5a:a3:f0:f7:70:94:a6:6b:a3:d0:
a6:8b:a2:ed:46:12:74:6c:c8:d0:f5:4d:e9:19:cb:
60:b9:97:aa:f3:11:cb:e3:9a:58:a5:e5:74:b8:78:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EE:21:7A:AF:D1:B9:DD:8B:67:4F:97:F9:CA:2B:AA:9F:6C:AD:A4
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/Uu4heq_Rud2LZ0-X-corqp9sraQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.76.0/22
158.255.74.0/24
171.22.24.0/22
176.97.218.0/24
178.211.145.0/24
193.105.234.0/24
212.23.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ce:2a:64:0d:7a:48:a0:26:1d:19:6d:26:3a:2b:8a:05:fa:
bc:d4:65:fe:28:72:e0:ce:2b:dc:9e:cc:0b:11:e5:5e:0e:10:
46:f6:42:e5:a1:f6:03:82:bb:47:a0:e2:2d:71:9f:dc:21:7a:
eb:06:f9:bc:8a:34:a5:dd:2e:fd:cf:18:a4:5f:cb:71:f3:74:
3c:2c:85:23:9f:72:44:44:a3:11:4b:06:08:ee:af:e7:04:05:
80:ed:f1:6a:6b:bd:3b:52:6d:db:92:ce:dc:c2:5e:3a:3d:88:
a6:64:28:f9:44:66:9a:b1:ac:ca:bf:1e:05:d8:66:8c:e4:c2:
ab:8c:4a:ae:f6:58:9f:d1:39:56:83:99:4d:e0:7f:a8:2f:b3:
5e:b4:4f:d3:64:ea:ed:1e:b6:0e:f1:48:51:97:e6:03:62:eb:
73:72:e0:c2:d0:c6:84:b4:09:cc:15:2b:69:f5:86:0e:01:0d:
e6:c5:76:76:8b:86:e9:00:48:6b:44:30:59:f8:f2:c6:a2:5e:
81:98:6e:6f:20:35:16:bb:92:f7:83:ba:81:5e:9e:c6:0e:c0:
fd:d2:6a:c5:21:68:88:52:85:3c:ae:83:93:b4:4b:8d:c0:65:
55:98:41:77:d9:1f:9d:51:ec:23:3c:26:26:8a:c2:2a:20:95:
03:1d:19:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:31:51 2025 by rpki-client