Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SzhKxsII0IhBXGd5LudCBVsePLs.roa
File: SzhKxsII0IhBXGd5LudCBVsePLs.roa (raw, json)
Hash identifier: TlGLIkVihTRqZbqviIZ9I/S8xRWOLyoO1+LHQutRv+Y=
Subject key identifier: 4B:38:4A:C6:C2:08:D0:88:41:5C:67:79:2E:E7:42:05:5B:1E:3C:BB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019508E77C723F5139D17C0FB7CA9C83921B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SzhKxsII0IhBXGd5LudCBVsePLs.roa
Signing time: Sat 15 Feb 2025 09:19:03 +0000
ROA not before: Sat 15 Feb 2025 09:19:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/22 maxlen: 24
185.232.117.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c1:200::/40 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 17 Feb 2025 12:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:08:e7:7c:72:3f:51:39:d1:7c:0f:b7:ca:9c:83:92:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 15 09:19:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b384ac6c208d088415c67792ee742055b1e3cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:62:ce:48:cb:a9:59:67:5b:50:5b:1d:5c:
ac:cb:c5:95:00:e4:c8:a2:8e:0f:48:60:a6:fe:8b:
12:a3:b6:1f:90:05:57:ff:e8:6a:2d:6e:5a:12:73:
59:b6:9a:d4:76:a4:41:87:bc:a1:e7:f7:36:55:da:
b4:24:21:8a:14:1e:1b:f5:4e:83:5d:49:1e:25:9c:
a0:63:29:99:91:74:fd:ef:d2:8a:70:cb:31:60:26:
e3:22:88:c5:5a:d4:c9:01:b3:87:a6:16:48:dc:c8:
cf:28:08:29:ce:a0:00:7d:33:7e:3f:87:d7:08:0e:
6f:64:85:22:06:d6:bb:2d:75:40:f1:88:71:86:7e:
3a:75:f0:04:e4:8e:ab:65:30:9c:6c:22:29:32:1b:
86:6f:02:ea:ed:7d:66:97:7a:09:28:c3:f1:27:c7:
56:47:2c:75:e0:79:af:0e:35:32:6a:0b:9a:9a:b1:
87:57:e4:46:2d:30:5d:5e:b1:1d:82:f9:48:79:2f:
27:62:f1:d0:54:25:49:a8:c9:de:59:09:32:c6:95:
16:9e:e1:2d:9a:d7:b0:25:db:53:83:a6:70:75:1e:
c6:d0:db:34:9c:6e:88:92:6b:8a:a3:5e:73:82:6a:
b3:64:17:4d:95:fd:de:7c:e9:45:57:81:67:ee:0a:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:38:4A:C6:C2:08:D0:88:41:5C:67:79:2E:E7:42:05:5B:1E:3C:BB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SzhKxsII0IhBXGd5LudCBVsePLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.136.0/22
185.232.117.0/24
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
61:ea:23:0e:05:a3:67:b0:ce:53:57:58:45:dc:67:cc:67:fe:
cd:ee:2a:b2:82:22:fe:02:8a:0b:1a:3d:9c:6b:19:b1:0f:d5:
a6:4a:bd:5f:07:11:09:f2:b0:5e:86:2e:86:09:06:a0:f4:23:
7c:fe:9b:5c:5c:31:ba:28:f7:79:4f:58:2b:fe:63:f4:c7:21:
a1:2a:3c:c8:6a:d5:19:1a:1e:7d:aa:03:7e:bd:d1:7c:e6:63:
50:01:ee:53:59:dd:9b:90:57:81:28:99:0c:88:b8:f7:fd:77:
1a:53:49:c0:62:2c:99:89:de:c7:ff:f2:e9:13:33:00:84:fe:
36:8f:ad:d9:df:23:f5:d7:86:ff:db:a8:64:7e:59:c3:02:48:
c4:82:10:49:69:65:a9:ab:67:1e:da:19:5b:e1:33:bc:0d:b0:
3e:ef:c0:d8:f6:b2:63:f5:10:59:d7:90:34:bf:89:ac:fe:2f:
88:a4:32:45:b7:29:91:75:7b:21:0b:f4:b0:ec:02:52:2c:bd:
b6:e0:36:4c:92:f6:f8:1f:32:5e:4a:49:58:c9:76:c7:f8:04:
cf:81:da:58:e2:a3:24:ab:dc:99:10:64:a7:da:e5:ff:c7:d8:
bf:9b:58:b1:55:8a:4b:3a:69:df:f3:82:fb:aa:0c:a4:d5:5d:
14:31:7a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:41:37 2025 by rpki-client