Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/yELe1BGM4PLvIkWOf4vOHQHKujU.roa
File: yELe1BGM4PLvIkWOf4vOHQHKujU.roa (raw, json)
Hash identifier: ZdgWv9rkYFZ+oeqxG6QkCaSBK4pLBUdMlXYtQ6Y4YW4=
Subject key identifier: C8:42:DE:D4:11:8C:E0:F2:EF:22:45:8E:7F:8B:CE:1D:01:CA:BA:35
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 01942825F9015FBED5A0C10F6046A4905CF1
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/yELe1BGM4PLvIkWOf4vOHQHKujU.roa
Signing time: Thu 02 Jan 2025 17:52:44 +0000
ROA not before: Thu 02 Jan 2025 17:52:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44901
IP address blocks: 46.253.0.0/24 maxlen: 24
46.253.1.0/24 maxlen: 24
46.253.4.0/24 maxlen: 24
91.132.60.0/24 maxlen: 24
91.132.62.0/24 maxlen: 24
91.132.63.0/24 maxlen: 24
93.94.140.0/24 maxlen: 24
93.94.142.0/24 maxlen: 24
95.169.202.0/24 maxlen: 24
185.1.156.0/24 maxlen: 24
185.243.213.0/24 maxlen: 24
2a09:be80::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 09 Jan 2025 12:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:f9:01:5f:be:d5:a0:c1:0f:60:46:a4:90:5c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jan 2 17:52:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c842ded4118ce0f2ef22458e7f8bce1d01caba35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:cf:e4:b2:da:f3:c9:d6:e5:eb:d2:ee:f4:
8f:ad:f5:cf:b3:be:31:f4:70:a0:1b:0d:36:75:54:
2f:0c:0c:a4:99:75:de:3f:3e:ee:0f:1a:4c:04:9c:
56:66:83:29:de:88:fa:16:94:3b:32:e1:c8:e6:20:
d9:85:8e:d1:2b:3d:4f:39:6f:06:98:77:3b:5a:6e:
db:43:6b:1b:14:84:45:35:21:90:4b:74:11:0a:0c:
13:9a:39:4b:cf:0d:b8:5d:d7:e9:fd:6e:4b:a0:af:
91:e8:f9:ea:20:b2:53:11:93:c8:69:c2:72:15:6a:
79:6a:be:a3:96:84:a0:70:2b:15:ef:e9:6c:28:92:
8f:94:44:dd:f1:a2:b5:6f:ba:52:e5:ce:99:29:c5:
20:c6:2e:01:1b:28:fa:e2:42:87:16:71:e7:3c:24:
62:a6:8a:80:d2:71:38:8c:4d:aa:2a:ea:85:eb:ea:
03:9a:d2:0d:33:f2:88:ab:a7:4b:28:a7:47:0c:70:
d9:6e:47:49:8d:81:3d:1b:5b:1d:ca:39:5d:75:f0:
ef:30:d3:aa:14:96:4b:03:f1:ed:61:be:9d:01:40:
75:23:3f:8f:c6:04:ad:a8:c1:7a:4e:86:28:56:cd:
16:67:74:5a:eb:93:46:bd:57:a3:c0:84:09:ac:3b:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:42:DE:D4:11:8C:E0:F2:EF:22:45:8E:7F:8B:CE:1D:01:CA:BA:35
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/yELe1BGM4PLvIkWOf4vOHQHKujU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.0.0/23
46.253.4.0/24
91.132.60.0/24
91.132.62.0/23
93.94.140.0/24
93.94.142.0/24
95.169.202.0/24
185.1.156.0/24
185.243.213.0/24
IPv6:
2a09:be80::/32
Signature Algorithm: sha256WithRSAEncryption
1b:90:0e:11:68:ab:ec:13:ea:f1:5c:b7:a1:10:97:cd:30:21:
03:fa:96:f0:8c:14:97:91:1b:9e:2b:aa:02:37:67:4a:da:59:
e1:eb:9b:19:57:45:55:48:17:fe:04:27:0b:5f:a0:93:3c:11:
17:4d:d6:dd:52:b1:bc:e7:28:08:91:34:64:62:0d:50:6e:78:
f6:d7:70:0d:11:7c:eb:c5:1b:53:bf:b3:9d:66:42:58:e2:59:
c5:81:cd:82:42:b9:9f:fd:e6:79:49:21:38:a4:ba:a4:64:ed:
91:9c:be:a4:c2:3c:5b:13:3b:93:ef:b7:f2:29:ed:9e:2e:56:
64:47:34:2e:b0:fd:45:72:43:26:85:5f:87:b4:17:d4:dc:42:
de:a0:52:65:33:a0:54:66:b6:f3:40:32:76:97:5e:eb:1d:07:
70:68:9d:6a:9d:98:6a:3a:04:e1:9e:43:54:f8:8e:05:cc:03:
64:98:1c:66:a9:fe:3b:8b:43:18:05:1b:be:4e:e6:ba:92:5c:
c1:eb:88:a2:28:12:20:12:d6:14:2a:00:65:62:86:ae:1b:df:
73:75:bc:d1:53:da:fb:c3:99:1f:70:60:d9:00:4a:0f:51:c6:
dd:f6:f1:c8:3d:fc:99:55:64:d4:43:49:ba:45:c5:b3:a4:71:
88:00:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:57:34 2025 by rpki-client