Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/S-_cprAXydj4Uczic3T3fZWGyKw.roa
File: S-_cprAXydj4Uczic3T3fZWGyKw.roa (raw, json)
Hash identifier: 1D5R8HkwwEHrp+iBuzuzuyBOthuwObl6w7XLJsjCGJ0=
Subject key identifier: 4B:EF:DC:A6:B0:17:C9:D8:F8:51:CC:E2:73:74:F7:7D:95:86:C8:AC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01956AEF45868202FC07256965611600DA68
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/S-_cprAXydj4Uczic3T3fZWGyKw.roa
Signing time: Thu 06 Mar 2025 10:10:20 +0000
ROA not before: Thu 06 Mar 2025 10:10:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/24 maxlen: 24
45.136.137.0/24 maxlen: 24
45.136.139.0/24 maxlen: 24
185.232.117.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c1:200::/40 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 12 Mar 2025 12:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:ef:45:86:82:02:fc:07:25:69:65:61:16:00:da:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 6 10:10:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4befdca6b017c9d8f851cce27374f77d9586c8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:e3:c9:e5:3b:39:12:61:6a:b0:38:bb:19:
2a:8c:6a:d7:97:89:40:65:2d:11:ea:cf:08:67:37:
a4:51:66:df:3d:3a:5c:0c:e0:ad:fb:a2:c3:d8:76:
6a:a7:69:d5:75:8f:9d:91:5f:4c:ee:da:e5:87:27:
1d:0a:37:56:e6:02:5a:2e:9a:24:93:0c:b9:b2:32:
18:e6:f7:b0:b9:9a:2d:65:2d:a2:1c:8a:d7:74:5c:
f6:5f:9c:2e:a7:dd:cf:a0:54:82:1d:49:15:ed:9c:
19:d6:ff:ab:d0:b5:d8:3c:8d:3c:9c:2e:de:0a:e6:
90:d9:ef:27:09:31:98:d0:9d:2d:3f:fa:0e:a4:a3:
0f:5d:ca:2e:ed:d8:6e:bc:5e:c3:ca:ca:21:bf:52:
d6:93:fc:6e:9e:60:19:86:e1:94:2b:34:50:11:78:
25:ff:8e:64:6d:8d:9e:50:b6:75:0e:31:db:7c:cd:
0f:87:03:fe:68:67:4c:45:ed:30:5f:c4:eb:14:83:
f9:53:46:a6:35:2e:d8:e9:90:4a:76:24:8b:70:9a:
17:bd:d1:ff:13:f0:10:43:e3:1e:61:8e:56:22:95:
90:d9:10:c2:ae:e7:9f:39:25:25:a8:15:a2:9f:b1:
73:c5:4a:5c:12:ac:8d:e3:fa:14:4f:87:51:33:51:
c4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EF:DC:A6:B0:17:C9:D8:F8:51:CC:E2:73:74:F7:7D:95:86:C8:AC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/S-_cprAXydj4Uczic3T3fZWGyKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.136.0/23
45.136.139.0/24
185.232.117.0/24
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
53:0d:c6:87:17:bb:5c:f7:87:53:82:f3:a3:dd:70:32:5e:34:
5f:21:52:df:c0:1f:94:fd:55:59:95:88:97:d2:05:d4:4f:e8:
09:93:4b:6c:f8:a4:e3:e2:b2:95:a9:8c:a4:38:24:09:28:b1:
41:a8:cd:f2:39:d1:33:4c:04:57:56:36:17:dc:13:f7:5c:57:
d3:92:76:d2:52:e5:f4:e2:6b:c3:83:6e:b9:88:51:7e:31:5a:
27:28:c3:d2:73:21:e4:1f:0c:15:37:f9:6e:96:24:0b:02:9b:
de:c9:be:e7:0f:4b:03:9a:fa:c8:b6:53:b0:77:84:87:3c:99:
e6:f2:d8:3e:17:ae:cb:42:01:b8:c6:be:c7:d8:59:12:c9:00:
49:e9:08:30:0d:d5:ac:aa:83:fd:e8:6a:07:3f:4b:17:b0:10:
1c:94:7f:68:88:db:c2:cb:cd:8a:5f:e5:7b:6a:03:b1:5f:47:
2a:76:e7:9f:29:e9:1c:b4:93:94:75:dc:c3:dc:36:31:a5:02:
e7:c8:76:e2:d7:16:67:55:18:23:f3:6f:6f:ec:26:ed:0b:57:
e3:d1:bd:3c:9d:ec:de:6b:07:e1:8d:83:05:43:fa:f0:33:13:
3e:a7:5f:07:e0:c9:d8:0f:c3:8d:05:56:bc:16:6a:02:15:49:
87:b6:92:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:31:17 2025 by rpki-client