Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YIfFGMMeRiGjMZwGAHeoeWhgX-4.roa
File: YIfFGMMeRiGjMZwGAHeoeWhgX-4.roa (raw, json)
Hash identifier: g7dwKnPaYoIuJUmcoNAb+c0RLDilk/yXogdkmIQh4uM=
Subject key identifier: 60:87:C5:18:C3:1E:46:21:A3:31:9C:06:00:77:A8:79:68:60:5F:EE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194404D0F03C4F45E5C83A31391FEF50E64
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YIfFGMMeRiGjMZwGAHeoeWhgX-4.roa
Signing time: Tue 07 Jan 2025 10:26:19 +0000
ROA not before: Tue 07 Jan 2025 10:26:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203380
IP address blocks: 45.148.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 06:55:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:4d:0f:03:c4:f4:5e:5c:83:a3:13:91:fe:f5:0e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 7 10:26:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6087c518c31e4621a3319c060077a87968605fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:2f:06:11:a2:10:5d:3c:e1:4a:3e:32:19:
13:8a:18:99:46:d2:f9:e9:2b:13:7f:08:07:a0:41:
51:3d:a2:48:73:67:08:d1:32:61:99:aa:6b:a4:e3:
34:28:f2:c5:34:db:90:2a:9b:ca:ea:b4:30:c0:fa:
f9:c8:71:d9:6b:4f:96:09:00:3c:8b:89:ef:ed:62:
6c:e3:d5:91:52:13:5a:a5:33:82:f8:5b:c2:64:53:
ca:b9:45:1b:28:33:69:3e:63:73:4e:30:ac:e7:53:
4a:8a:b3:04:01:e1:c1:bb:78:66:71:37:3b:d9:8e:
93:74:69:32:dd:1a:3b:3a:cf:94:b2:e9:94:04:3a:
24:a9:ab:8f:8a:0b:b2:32:f3:ef:1a:f3:ec:1d:30:
c5:f7:23:97:04:77:23:48:ed:fd:93:5b:fd:ad:a9:
7c:aa:7d:71:8d:f0:a5:f5:71:12:25:de:e4:24:e7:
a2:08:ae:16:5f:b7:9d:ec:a0:9e:c7:46:a2:75:61:
bd:98:39:fb:83:6f:29:75:a0:4c:3b:6c:b5:14:02:
a0:1b:58:78:8d:65:de:0f:15:74:26:6f:6c:06:e8:
cd:73:8a:fc:2a:74:ea:1b:e6:69:b1:5b:de:6c:42:
49:bc:70:b8:5c:bd:a5:81:07:ff:89:f8:60:03:3e:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:87:C5:18:C3:1E:46:21:A3:31:9C:06:00:77:A8:79:68:60:5F:EE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YIfFGMMeRiGjMZwGAHeoeWhgX-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.117.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2d:13:ad:5c:63:41:84:54:ec:70:9c:17:b1:e4:3f:1b:e7:
a3:32:3b:17:53:66:47:64:52:e4:11:40:b4:1a:cb:f7:98:98:
b8:4c:ed:86:f5:dd:32:9c:a7:b8:a1:79:9e:d0:73:7f:24:61:
6f:7d:b3:03:50:da:27:92:65:9a:6a:26:d2:3b:ac:e0:86:ec:
37:a9:5d:08:ea:fb:cc:07:9c:88:64:37:87:1c:bf:c6:64:b9:
8b:3d:31:c9:e5:11:ea:24:77:d7:fc:d6:42:8f:69:4c:8f:ba:
ca:5b:b5:36:1a:cb:a3:cc:20:6b:50:a8:99:b0:e8:47:89:69:
f2:4f:2c:43:e9:39:86:e0:b8:08:f4:f1:c9:5a:8d:7c:ea:7b:
22:a1:78:9d:11:dc:cf:20:09:6a:bc:b0:a4:57:56:c5:52:0d:
56:37:84:05:6a:b7:ba:fc:85:7f:6a:9d:93:4b:ca:8d:37:25:
3a:a2:5b:29:ae:66:cd:68:45:53:d2:bc:d7:13:f8:58:78:03:
bd:d8:8e:2d:a5:84:4b:bb:6d:a5:85:65:fb:da:c1:8b:d1:d4:
51:60:bb:01:f4:76:48:e0:0a:2f:90:77:ed:e4:d7:61:d6:6b:
2c:28:db:80:2e:5c:0f:0c:a9:d2:55:49:45:26:ce:a5:6f:0f:
fa:e4:1c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:45:18 2025 by rpki-client