Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4cBuKZyjL_9ferWAIqtF4wc4M3k.roa
File: 4cBuKZyjL_9ferWAIqtF4wc4M3k.roa (raw, json)
Hash identifier: VvxjpdHdQzQD2wXMnq7Y/kF+Zc+MmSFIKeaZW4tDXSM=
Subject key identifier: E1:C0:6E:29:9C:A3:2F:FF:5F:7A:B5:80:22:AB:45:E3:07:38:33:79
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019730F257688C998363D3F0E022BDBA9AE5
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4cBuKZyjL_9ferWAIqtF4wc4M3k.roa
Signing time: Mon 02 Jun 2025 14:01:17 +0000
ROA not before: Mon 02 Jun 2025 14:01:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49791
IP address blocks: 45.43.137.0/24 maxlen: 24
45.43.159.0/24 maxlen: 24
64.137.9.0/24 maxlen: 24
104.222.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 10:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:f2:57:68:8c:99:83:63:d3:f0:e0:22:bd:ba:9a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jun 2 14:01:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1c06e299ca32fff5f7ab58022ab45e307383379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:21:f2:9b:dc:ea:9c:76:07:91:86:27:c7:
8f:f0:97:61:80:ed:53:c2:2a:db:79:94:82:b5:ba:
81:1b:37:73:5f:be:0d:f8:1c:94:5f:9b:4e:95:27:
7a:8b:0f:7a:a4:1a:4e:1a:2f:c0:7c:cb:ca:5e:26:
54:63:28:b7:b1:a3:b9:09:fb:35:d9:f2:c0:d7:e7:
65:22:ad:b8:2f:c8:f3:2a:c5:de:c0:6e:c2:25:a9:
36:cd:36:4a:02:31:cd:96:c4:0f:12:e2:2a:a8:5d:
0e:9c:c8:d3:1e:e1:c3:31:a9:7e:0c:06:6c:d9:63:
0c:7b:73:b0:73:0a:cf:92:41:6c:f1:9c:74:46:32:
b7:fe:7a:95:dc:5f:de:a3:69:f7:d9:6c:46:e7:dd:
95:a3:67:72:bf:62:a6:7d:88:72:f8:89:83:c4:ff:
9c:e2:8b:12:23:b0:56:d2:0e:f5:f6:cd:ae:ed:22:
42:94:4b:a4:6c:4c:93:af:21:f3:80:94:6e:dd:4a:
25:e0:37:0c:b8:12:eb:b9:4c:b6:ad:68:3b:86:d7:
89:e7:f8:75:af:46:59:fc:1d:cc:a6:9b:6e:f3:c1:
f5:69:24:89:c1:c2:f9:a9:bc:be:b0:eb:35:fd:e2:
18:65:a7:1c:e4:a9:88:9c:a8:51:98:fb:b9:08:49:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C0:6E:29:9C:A3:2F:FF:5F:7A:B5:80:22:AB:45:E3:07:38:33:79
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4cBuKZyjL_9ferWAIqtF4wc4M3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.137.0/24
45.43.159.0/24
64.137.9.0/24
104.222.177.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:57:8f:77:f1:27:bb:95:b0:36:c9:1e:c3:11:cb:f0:2a:1e:
9c:69:88:e7:88:99:3c:d6:7b:3a:52:8c:f6:b2:12:f1:60:98:
fb:86:5d:e8:da:24:bb:27:56:65:80:eb:6c:c0:cc:18:77:ae:
b1:d4:21:88:62:0e:19:a4:cb:46:6c:91:1a:bf:c7:63:73:87:
96:81:ce:d8:cd:e8:5f:66:53:18:fc:fb:9c:27:5f:95:93:8c:
d4:e9:0d:89:ef:51:92:91:bd:f9:f3:30:8a:c5:b5:34:78:60:
72:48:5f:cc:5b:6f:58:a9:a3:e8:9f:c2:b2:d5:33:b3:54:b8:
8d:98:1c:34:74:65:0b:29:ce:b0:3a:6f:fb:21:45:1e:e1:4c:
7e:f5:79:ed:72:15:3a:17:e2:9d:bc:2b:22:03:a8:c5:b6:94:
92:92:6b:ff:e6:fd:d6:09:de:07:9c:67:b2:d2:8d:a2:ea:76:
96:b7:0c:eb:a8:1e:12:c4:87:10:28:5e:4f:da:ac:fa:5d:e2:
57:de:45:25:37:3b:2c:77:22:45:37:41:cd:20:51:07:a4:e3:
db:03:9b:e3:c1:cd:2d:c8:da:d9:36:ff:59:67:8d:78:76:99:
21:79:aa:3e:4b:6c:e7:6a:10:e6:7b:4a:fb:24:f1:a7:ee:68:
ac:73:98:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:33:48 2025 by rpki-client