Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/6YV9xQXGuDSCJmqzvdxnFVsrVT0.roa
File: 6YV9xQXGuDSCJmqzvdxnFVsrVT0.roa (raw, json)
Hash identifier: CzM4IYX1eq20te8dr1+Vlj91MLdtqjFxZrgc3bvfvr0=
Subject key identifier: E9:85:7D:C5:05:C6:B8:34:82:26:6A:B3:BD:DC:67:15:5B:2B:55:3D
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0196A57156B46FF10ACD0AE9A560D3158BA0
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/6YV9xQXGuDSCJmqzvdxnFVsrVT0.roa
Signing time: Tue 06 May 2025 11:53:10 +0000
ROA not before: Tue 06 May 2025 11:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47645
IP address blocks: 45.151.96.0/24 maxlen: 24
45.151.97.0/24 maxlen: 24
45.151.98.0/24 maxlen: 24
45.151.99.0/24 maxlen: 24
94.137.64.0/21 maxlen: 21
94.137.72.0/24 maxlen: 24
94.137.73.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
94.137.75.0/24 maxlen: 24
94.137.76.0/24 maxlen: 24
94.137.77.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.80.0/22 maxlen: 22
94.137.84.0/22 maxlen: 22
94.137.88.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.92.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
94.137.95.0/24 maxlen: 24
2a05:c440::/48 maxlen: 48
2a05:c441::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 12 May 2025 12:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:71:56:b4:6f:f1:0a:cd:0a:e9:a5:60:d3:15:8b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: May 6 11:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9857dc505c6b83482266ab3bddc67155b2b553d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:df:f1:a5:5e:40:61:a8:df:b9:35:d3:1c:15:
da:df:44:11:4a:33:cf:8f:e5:8f:9c:78:c2:b4:bb:
70:9e:fd:9d:8a:27:7c:3a:b9:92:3c:d6:77:23:3b:
ff:0f:7b:ce:36:74:8b:da:0c:80:4a:28:56:7c:6e:
a1:04:b7:80:3d:6c:e1:2d:d0:4e:ec:fb:72:52:69:
b7:43:86:27:19:7e:21:cb:5e:84:47:9c:7a:2b:2c:
c3:f2:c0:11:c2:1c:db:3c:56:8d:99:32:dc:cc:56:
63:20:5f:20:49:ce:08:5a:4e:ee:f8:94:c7:47:76:
78:d5:63:4d:cf:8e:f9:28:c5:55:d4:02:ab:0f:89:
76:e3:2c:d9:fe:8b:d3:22:94:dc:21:78:16:09:0e:
4c:0b:98:9a:4c:83:a8:b1:a3:5a:5d:03:d5:1d:20:
db:23:21:a7:fb:f7:8b:43:d0:30:8b:01:56:b3:d2:
c2:0d:ef:53:b5:16:4c:96:51:7d:84:02:65:ca:b1:
23:8a:55:d9:c9:fe:3f:a8:7f:f7:84:25:cf:cd:61:
73:c2:aa:3d:24:43:20:a8:af:6b:08:76:7c:1a:27:
ad:c7:1f:3c:54:7d:cf:07:83:3e:1d:06:67:f2:6e:
f8:18:34:7d:be:ce:d4:88:7f:03:43:62:b7:ed:e7:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:85:7D:C5:05:C6:B8:34:82:26:6A:B3:BD:DC:67:15:5B:2B:55:3D
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/6YV9xQXGuDSCJmqzvdxnFVsrVT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.96.0/22
94.137.64.0-94.137.88.255
94.137.90.0-94.137.92.255
94.137.94.0/23
IPv6:
2a05:c440::/48
2a05:c441::/32
Signature Algorithm: sha256WithRSAEncryption
29:e3:da:c6:52:cb:10:10:48:be:fb:cd:ad:f5:9c:60:81:bb:
d3:0f:c2:33:ef:6b:75:b6:3f:ea:8d:1f:dc:2b:3b:98:5b:d7:
dc:6b:11:b7:95:12:85:a6:1b:18:12:e9:76:35:24:74:ba:fd:
29:48:c1:55:73:89:10:9b:8d:af:df:4b:d6:6a:ec:fe:66:94:
cb:ee:09:6f:32:00:95:e0:a8:56:42:34:d1:4d:78:03:f4:8c:
a5:43:a4:aa:62:5b:af:1c:c4:cd:c6:8f:e7:a3:23:2b:38:c0:
51:ce:bd:85:89:dd:71:64:0e:57:47:43:a9:67:a1:b4:08:68:
6e:dc:12:a1:fb:8f:25:dc:86:c9:f1:81:68:e9:13:66:f6:06:
09:b6:ed:36:d5:b0:fc:f3:a8:4c:04:3d:e9:16:62:0a:65:6d:
64:ab:b8:d5:58:3f:e3:df:0a:0d:ae:2a:70:94:0e:88:b7:fe:
72:62:e1:a6:0a:38:ca:a4:34:36:63:e4:0f:aa:ca:2c:4c:84:
eb:bf:16:54:ef:2e:e1:b6:2f:ff:85:0d:1e:ca:4f:68:37:50:
ed:e6:cb:c6:58:22:ac:2a:09:6f:68:ba:b1:44:45:73:7c:56:
f2:67:c6:8d:75:b5:84:f9:cd:45:bd:91:6d:51:c3:22:b1:67:
f8:0e:57:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:57:17 2025 by rpki-client