Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/a6exr1Zp4Q4sFn2J-Ip-N05GCXA.roa
File: a6exr1Zp4Q4sFn2J-Ip-N05GCXA.roa (raw, json)
Hash identifier: rkwxiP8UHNK06gnCEi5Y3FZZWsB9mScp3kPZByCrqqQ=
Subject key identifier: 6B:A7:B1:AF:56:69:E1:0E:2C:16:7D:89:F8:8A:7E:37:4E:46:09:70
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 019427B5ACD1B51CFE2AE94F81C86802BF92
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/a6exr1Zp4Q4sFn2J-Ip-N05GCXA.roa
Signing time: Thu 02 Jan 2025 15:50:05 +0000
ROA not before: Thu 02 Jan 2025 15:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29075
IP address blocks: 45.10.224.0/23 maxlen: 23
45.10.226.0/24 maxlen: 24
45.94.124.0/22 maxlen: 22
45.94.128.0/22 maxlen: 22
45.94.128.0/23 maxlen: 23
45.94.130.0/23 maxlen: 23
85.118.32.0/19 maxlen: 19
91.109.176.0/20 maxlen: 20
128.204.224.0/20 maxlen: 20
141.255.144.0/20 maxlen: 20
178.20.48.0/21 maxlen: 21
185.10.252.0/22 maxlen: 24
185.118.0.0/22 maxlen: 22
185.123.24.0/22 maxlen: 22
185.177.180.0/22 maxlen: 22
188.121.224.0/19 maxlen: 19
212.85.144.0/20 maxlen: 20
2a00:1b88::/32 maxlen: 32
2a02:2178::/29 maxlen: 29
2a02:2178::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 30 Jan 2025 21:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ac:d1:b5:1c:fe:2a:e9:4f:81:c8:68:02:bf:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Jan 2 15:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ba7b1af5669e10e2c167d89f88a7e374e460970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:72:16:b4:49:94:9f:35:fb:25:3a:2f:e5:
be:7a:97:f4:5b:33:e6:4b:2c:68:9a:62:de:e2:1f:
de:41:10:fd:96:e1:c9:e2:07:19:fd:cc:e2:8b:43:
c1:05:18:1b:0c:29:3b:b6:a7:3c:4d:9d:6f:9a:b4:
c6:94:ba:c3:f9:01:28:2b:d3:8c:2f:4a:bd:6a:32:
30:8c:f6:cf:f9:7f:3e:24:6d:d7:c9:34:15:a8:79:
e5:c3:d8:94:20:96:e5:24:a4:91:86:88:48:56:39:
4a:20:fe:b1:4d:65:13:a3:2e:8a:de:70:dd:20:7f:
8f:7b:26:32:63:45:d3:9e:fd:3c:4f:70:84:59:55:
bb:3f:ba:a8:38:86:be:a8:d0:6a:1e:24:45:bf:2d:
4e:f9:4a:cd:75:ee:e4:a6:a9:63:11:8c:fc:2a:18:
ff:f3:20:98:78:33:b6:63:f9:31:f8:a7:70:e1:69:
7f:26:ae:5c:1d:e0:43:f7:8b:24:57:c5:6b:dd:7c:
21:1e:e2:d1:5c:03:90:77:cc:ab:87:aa:16:fe:f5:
07:35:82:8b:0c:32:55:73:6a:82:d9:37:6d:41:a9:
81:eb:1e:a1:43:e3:c1:76:10:a4:97:95:69:d3:58:
fe:2d:20:d6:4b:b7:6b:81:27:5e:3a:22:01:ba:7e:
5b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A7:B1:AF:56:69:E1:0E:2C:16:7D:89:F8:8A:7E:37:4E:46:09:70
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/a6exr1Zp4Q4sFn2J-Ip-N05GCXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.224.0-45.10.226.255
45.94.124.0-45.94.131.255
85.118.32.0/19
91.109.176.0/20
128.204.224.0/20
141.255.144.0/20
178.20.48.0/21
185.10.252.0/22
185.118.0.0/22
185.123.24.0/22
185.177.180.0/22
188.121.224.0/19
212.85.144.0/20
IPv6:
2a00:1b88::/32
2a02:2178::/29
Signature Algorithm: sha256WithRSAEncryption
5c:82:3a:4f:5d:99:2f:b9:72:a6:18:bc:8b:70:96:e6:3a:c6:
e7:fd:22:0e:7f:5b:c2:04:0c:69:55:27:33:44:e2:d2:28:63:
91:c8:0c:7e:a6:32:b8:46:7d:60:fe:44:99:01:bb:c9:87:2a:
a4:93:da:e6:9a:2b:77:01:97:5f:3a:93:7c:10:a2:8f:be:0d:
2f:84:0f:8c:27:df:ff:3d:e8:91:82:47:6e:2e:1a:78:a5:1a:
50:87:ce:6c:c9:7e:66:43:d2:db:d4:2f:6e:b4:be:c6:a4:09:
bf:4a:43:f8:61:04:0e:a6:d1:d6:ab:54:45:1c:56:aa:8c:52:
9c:a1:31:a7:d0:a3:23:86:d1:3e:0c:f8:79:e5:6d:82:fa:e2:
87:61:b7:c3:c9:f9:aa:0d:bc:8d:5d:2a:f3:8c:5e:ff:6c:aa:
1c:bd:04:22:db:28:6d:9f:1d:fd:5c:9e:67:05:f5:7e:95:93:
82:fc:0b:81:ea:43:7c:1f:1c:7f:e6:6e:df:a1:e4:91:72:74:
cd:35:dd:53:e5:c4:22:67:57:02:24:5e:bd:42:40:be:8d:69:
b8:67:3e:e3:d4:07:3e:73:f2:68:8b:88:8d:20:39:5a:48:55:
ed:42:fc:0b:66:ac:c7:15:6e:f3:0b:3e:bf:19:a8:82:87:51:
55:8f:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:18 2025 by rpki-client