Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/Cy0g91pwXG3cE9xUNtHzBS1rDTI.roa
File: Cy0g91pwXG3cE9xUNtHzBS1rDTI.roa (raw, json)
Hash identifier: yopyVlYjBpzZRR34pDtWN3PUTze/Q28UMHV+CelpsKc=
Subject key identifier: 0B:2D:20:F7:5A:70:5C:6D:DC:13:DC:54:36:D1:F3:05:2D:6B:0D:32
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 01916BEA4D45AE759E6763F7A765FCB17694
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/Cy0g91pwXG3cE9xUNtHzBS1rDTI.roa
Signing time: Mon 19 Aug 2024 18:33:22 +0000
ROA not before: Mon 19 Aug 2024 18:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 5.181.13.0/24 maxlen: 24
5.181.14.0/24 maxlen: 24
5.181.15.0/24 maxlen: 24
45.150.48.0/24 maxlen: 24
45.150.49.0/24 maxlen: 24
45.150.50.0/24 maxlen: 24
45.150.51.0/24 maxlen: 24
45.159.180.0/24 maxlen: 24
45.159.182.0/24 maxlen: 24
45.159.183.0/24 maxlen: 24
94.199.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:ea:4d:45:ae:75:9e:67:63:f7:a7:65:fc:b1:76:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Aug 19 18:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b2d20f75a705c6ddc13dc5436d1f3052d6b0d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b9:6d:d5:ec:23:61:c9:d3:19:a4:38:b4:99:
2f:1c:c5:72:69:34:e2:09:48:8e:be:a7:d1:fd:62:
08:32:d5:4e:cf:de:e5:63:88:5c:92:48:f6:76:33:
fa:6d:ed:63:9f:df:8c:66:7c:84:02:45:28:a9:d6:
d1:f8:14:d5:65:e2:c5:8b:75:ed:fc:85:8f:d0:d4:
bf:3c:df:2c:d3:28:e5:47:31:42:e7:58:09:8d:14:
9b:d0:16:22:94:86:2f:9d:43:d4:85:b2:42:63:8a:
ef:cd:85:60:db:d7:f5:2a:f1:88:e0:ac:77:78:5a:
7a:cc:f0:d4:1b:bb:ba:d3:63:1a:5d:b0:57:20:db:
6c:f2:53:70:4d:36:4e:c2:6a:db:e6:d6:74:f3:81:
7a:48:2a:a3:bb:64:48:f2:67:33:f8:f9:57:f7:41:
99:62:6f:b1:56:80:f1:21:32:27:e7:4c:d0:45:de:
d6:04:b4:9a:d3:04:a2:3e:a8:99:d0:b7:08:27:40:
93:e6:f0:a1:cc:e3:91:29:58:80:85:06:a3:f5:58:
b5:c4:31:38:6a:10:dc:09:d6:c7:ac:96:ca:61:fe:
5d:f2:1f:df:51:bc:83:56:c2:ce:f3:26:00:cf:e7:
44:69:44:c1:74:c3:15:ea:d4:1d:2d:a9:ef:21:f8:
9a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2D:20:F7:5A:70:5C:6D:DC:13:DC:54:36:D1:F3:05:2D:6B:0D:32
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/Cy0g91pwXG3cE9xUNtHzBS1rDTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.13.0-5.181.15.255
45.150.48.0/22
45.159.180.0/24
45.159.182.0/23
94.199.7.0/24
Signature Algorithm: sha256WithRSAEncryption
92:98:44:02:ea:8c:c3:f4:ac:a4:23:db:3a:e7:31:80:fa:3f:
d4:f0:6b:5b:c3:cc:de:15:31:c3:67:d9:57:f0:d8:1d:f4:fa:
be:84:f7:62:9f:3c:46:e0:4a:2a:e8:b2:e3:b3:d8:54:6b:0b:
5b:19:27:aa:9f:04:5c:ad:ce:a3:50:cf:78:c4:9b:06:af:fd:
1c:6f:2b:00:4c:09:f1:1e:38:ba:99:a0:dc:a2:0f:db:70:a8:
79:7c:29:2a:71:c4:7e:1a:ad:f8:ff:75:bd:8b:e6:c5:29:9d:
11:b6:c5:96:9b:4b:3a:f1:af:55:a8:fd:a6:b9:67:41:70:be:
8f:df:68:43:e6:4f:2c:be:32:af:c5:d3:7a:7a:6f:82:9b:99:
9b:00:79:7d:f9:57:da:3f:0c:f9:b1:40:2b:c0:93:9e:7b:2e:
83:47:34:a1:79:3e:09:fe:56:ed:42:d7:0e:58:5a:d0:5f:c9:
d6:96:46:1f:9f:db:95:fc:43:73:be:28:a6:9c:b2:21:1e:ee:
ab:e5:77:61:9a:fc:6b:77:6f:fe:9b:9d:ad:c7:6c:fa:b9:60:
f1:28:7b:1a:fe:0c:a6:73:a9:0c:7c:6a:01:39:2d:66:74:32:
bc:d0:b8:b2:01:cb:51:c7:a6:d1:a7:b0:72:1c:ce:2c:cb:0f:
af:8d:a3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:25:49 2025 by rpki-client