Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/IC6-abT64U4b3oDe-rJaW6QZ7TE.roa
File: IC6-abT64U4b3oDe-rJaW6QZ7TE.roa (raw, json)
Hash identifier: nHWpmc6PoqqRoZjVYoXs8JprNhxgz/7FCaiVkfskF6U=
Subject key identifier: 20:2E:BE:69:B4:FA:E1:4E:1B:DE:80:DE:FA:B2:5A:5B:A4:19:ED:31
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01954784CC3955FE61FE05A2786FAEE6EB2C
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/IC6-abT64U4b3oDe-rJaW6QZ7TE.roa
Signing time: Thu 27 Feb 2025 13:07:20 +0000
ROA not before: Thu 27 Feb 2025 13:07:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 45.43.147.0/24 maxlen: 24
45.43.152.0/24 maxlen: 24
64.137.111.0/24 maxlen: 24
104.222.160.0/24 maxlen: 24
104.222.163.0/24 maxlen: 24
104.222.164.0/24 maxlen: 24
104.222.165.0/24 maxlen: 24
104.222.166.0/24 maxlen: 24
104.222.191.0/24 maxlen: 24
104.233.56.0/24 maxlen: 24
104.233.58.0/24 maxlen: 24
104.238.24.0/24 maxlen: 24
104.238.28.0/24 maxlen: 24
104.239.47.0/24 maxlen: 24
104.239.66.0/24 maxlen: 24
104.239.74.0/24 maxlen: 24
104.239.79.0/24 maxlen: 24
104.239.83.0/24 maxlen: 24
104.239.89.0/24 maxlen: 24
104.239.100.0/24 maxlen: 24
104.239.102.0/24 maxlen: 24
104.239.109.0/24 maxlen: 24
104.239.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 17:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:84:cc:39:55:fe:61:fe:05:a2:78:6f:ae:e6:eb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Feb 27 13:07:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=202ebe69b4fae14e1bde80defab25a5ba419ed31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:2d:14:3c:b5:32:b8:c4:3f:7c:70:f8:c1:
98:17:23:e5:de:b4:b2:35:64:0e:df:47:49:47:bc:
d4:50:d4:85:61:27:3b:d5:eb:22:73:29:46:73:4a:
82:8a:f0:07:57:94:f2:05:80:94:78:f3:14:43:c6:
f3:cd:0b:58:c9:6e:2e:45:59:7b:85:2f:7a:29:8f:
69:79:ee:de:05:a1:97:76:8a:39:5e:5a:1f:e3:fe:
cf:d0:28:aa:d6:70:ee:a3:0b:f7:dc:0a:a5:a3:a5:
0b:2e:df:14:0b:cf:4a:f6:26:39:42:51:0b:f4:ca:
cf:e8:37:84:10:51:36:e5:47:f2:4d:9c:85:14:32:
79:47:9a:d0:85:97:0e:33:80:aa:86:6b:be:cd:5a:
ac:01:d8:02:6e:1f:ea:57:e8:d0:eb:5b:b7:2f:55:
28:8c:3d:93:f0:26:b7:49:31:ea:6f:61:18:ff:1b:
37:02:89:ed:fd:e6:65:f4:90:87:b9:82:d9:19:28:
37:73:a5:fc:ba:03:fc:53:6a:bc:99:0e:46:72:53:
64:0c:fb:1f:ea:50:78:86:07:f2:94:65:a8:d9:c6:
45:48:65:50:54:e0:63:56:b2:99:c4:6f:fc:da:72:
d3:6d:6d:0c:d9:65:e1:34:c9:d3:6e:30:37:05:cf:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2E:BE:69:B4:FA:E1:4E:1B:DE:80:DE:FA:B2:5A:5B:A4:19:ED:31
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/IC6-abT64U4b3oDe-rJaW6QZ7TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.147.0/24
45.43.152.0/24
64.137.111.0/24
104.222.160.0/24
104.222.163.0-104.222.166.255
104.222.191.0/24
104.233.56.0/24
104.233.58.0/24
104.238.24.0/24
104.238.28.0/24
104.239.47.0/24
104.239.66.0/24
104.239.74.0/24
104.239.79.0/24
104.239.83.0/24
104.239.89.0/24
104.239.100.0/24
104.239.102.0/24
104.239.109.0/24
104.239.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f4:91:82:bc:14:d5:1b:ee:a0:9f:6c:c4:35:64:af:8e:4b:
e3:30:93:b0:91:3a:68:99:d0:31:64:bf:06:c8:58:13:07:60:
e2:48:0d:05:51:61:f4:b3:5f:82:6a:0f:9b:ee:b7:8b:c5:7d:
59:da:7c:e9:60:c4:75:13:d1:60:4f:79:38:6c:d1:a8:5b:d7:
6a:d7:9c:67:74:96:72:a8:6c:19:82:c9:e3:85:60:27:90:c5:
4a:b8:80:6e:7f:b5:1d:73:5a:db:99:4e:e9:b5:f5:61:45:8f:
b4:97:01:be:b6:1d:9f:d9:f5:3b:75:09:e0:39:29:2f:23:fe:
d1:16:16:f5:d2:92:ec:68:98:d6:ff:62:fb:6e:d8:c0:22:d9:
a8:cf:3e:09:7b:3e:ce:8f:63:00:d2:17:72:e4:30:ff:0a:ec:
a1:bd:a5:50:1f:7c:dc:80:9b:a8:f6:fa:81:39:96:ac:ba:6a:
7f:e8:8b:72:0f:5b:69:5c:25:1f:4e:6f:1a:67:5c:58:f0:40:
56:52:49:dd:25:68:67:c0:77:aa:d3:71:53:9f:5a:e4:fc:fe:
cb:69:90:b0:bf:1c:43:3c:9d:33:ab:eb:0e:2f:c1:fd:24:2a:
c0:af:df:f2:66:f2:fa:dd:19:39:d5:12:df:6a:bc:61:7e:4a:
58:c6:7d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:42 2025 by rpki-client