Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/YrHAcCu2EUajE3R6khOd1liFyYk.roa
File: YrHAcCu2EUajE3R6khOd1liFyYk.roa (raw, json)
Hash identifier: jmn+uxS+nhYVGam2BrfvJI8rqw5c+gcqGX8YbSKaEKc=
Subject key identifier: 62:B1:C0:70:2B:B6:11:46:A3:13:74:7A:92:13:9D:D6:58:85:C9:89
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 019463A084C69AE90FD9625AE9B1AA8B04D9
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/YrHAcCu2EUajE3R6khOd1liFyYk.roa
Signing time: Tue 14 Jan 2025 07:04:11 +0000
ROA not before: Tue 14 Jan 2025 07:04:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2.57.180.0/22 maxlen: 24
2.59.116.0/24 maxlen: 24
45.12.44.0/22 maxlen: 24
45.15.52.0/22 maxlen: 22
45.67.44.0/22 maxlen: 22
45.86.192.0/22 maxlen: 22
45.95.140.0/22 maxlen: 24
45.130.204.0/22 maxlen: 24
45.136.60.0/22 maxlen: 24
45.145.192.0/22 maxlen: 24
45.151.204.0/22 maxlen: 24
91.225.0.0/24 maxlen: 24
91.227.240.0/23 maxlen: 23
91.239.37.0/24 maxlen: 24
94.142.164.0/22 maxlen: 22
103.82.160.0/22 maxlen: 22
185.39.11.0/24 maxlen: 24
185.57.176.0/22 maxlen: 22
185.157.123.0/24 maxlen: 24
185.232.89.0/24 maxlen: 24
193.3.158.0/24 maxlen: 24
194.99.66.0/23 maxlen: 23
195.64.96.0/24 maxlen: 24
195.244.14.0/23 maxlen: 23
212.52.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 11:32:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:63:a0:84:c6:9a:e9:0f:d9:62:5a:e9:b1:aa:8b:04:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jan 14 07:04:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62b1c0702bb61146a313747a92139dd65885c989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:40:8b:e9:d8:da:59:13:96:41:b4:a2:10:
ca:a9:e2:1f:c1:11:92:b2:9e:45:58:64:f1:51:bd:
89:d5:a5:04:80:50:cf:39:2c:72:b9:a4:28:cd:51:
fa:ba:2f:10:c3:cd:eb:f6:bf:7d:6d:bd:af:01:14:
cb:0c:08:d3:f5:28:a7:96:2d:e6:15:85:38:7b:d3:
d6:d0:d0:38:d0:fd:1f:42:b7:34:86:2a:2c:89:15:
57:e2:50:93:ff:3a:65:f4:33:f0:a8:9b:30:7c:e0:
c7:20:2b:4a:be:19:c0:23:76:bb:1e:53:3c:c8:70:
42:73:72:9e:38:3c:fa:b8:3b:b7:a0:53:cb:7b:7a:
85:ce:8a:62:ba:85:e5:15:40:55:42:0c:9a:32:70:
a7:22:19:61:8e:af:99:5a:54:d8:9d:b9:14:0c:1d:
25:58:79:53:1b:3f:48:2b:bd:d3:68:b3:38:30:ce:
17:3e:77:1b:bc:a4:ed:e2:fc:6a:df:ea:5c:b0:74:
11:95:31:3b:84:df:a3:72:b6:3f:bd:3a:33:a1:eb:
d4:03:9e:00:91:e5:d2:e1:46:68:ef:bf:98:3b:7a:
fa:05:68:20:95:21:d2:68:66:0b:4a:04:94:34:ec:
fa:7e:3a:16:27:06:b9:98:d0:51:95:20:52:ce:05:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B1:C0:70:2B:B6:11:46:A3:13:74:7A:92:13:9D:D6:58:85:C9:89
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/YrHAcCu2EUajE3R6khOd1liFyYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.180.0/22
2.59.116.0/24
45.12.44.0/22
45.15.52.0/22
45.67.44.0/22
45.86.192.0/22
45.95.140.0/22
45.130.204.0/22
45.136.60.0/22
45.145.192.0/22
45.151.204.0/22
91.225.0.0/24
91.227.240.0/23
91.239.37.0/24
94.142.164.0/22
103.82.160.0/22
185.39.11.0/24
185.57.176.0/22
185.157.123.0/24
185.232.89.0/24
193.3.158.0/24
194.99.66.0/23
195.64.96.0/24
195.244.14.0/23
212.52.3.0/24
Signature Algorithm: sha256WithRSAEncryption
51:87:3f:4a:4f:11:cc:bf:ee:ea:f1:ed:cb:94:1f:1c:c8:3e:
1d:c0:f8:fe:e0:82:da:63:20:32:d1:2c:fa:b4:ee:3f:dd:3b:
14:83:69:4c:af:f7:51:00:a5:b6:62:2f:c3:63:6e:5e:ec:f6:
c0:33:e0:e8:4d:60:f8:80:61:e0:af:53:e2:24:36:30:0b:e7:
f1:ac:27:7e:64:cd:db:5f:d4:ec:8b:b8:76:29:81:13:55:60:
74:ef:f2:e4:fd:3a:71:76:5f:64:5e:fa:ac:34:a1:4e:a7:5a:
16:5e:a7:d9:4e:08:a4:8f:c0:d2:67:87:a8:31:d3:3d:70:86:
1b:ae:84:34:cf:e0:94:ac:8e:c3:48:1c:78:9a:a5:4d:36:fe:
8d:17:5b:38:76:35:11:f1:1f:ff:4d:75:6e:0a:0f:bd:3b:6b:
6f:93:a1:2d:f5:d7:fb:a5:94:bf:ea:97:b7:d4:1e:a5:22:90:
26:0e:5b:fc:7c:b4:2b:f4:c7:00:3c:2c:97:04:26:99:f2:77:
03:a9:10:4f:bb:3a:1c:d2:79:31:80:1b:ee:bc:b2:1a:5c:bc:
0f:d6:e9:03:62:d7:26:ea:6f:52:72:03:f3:90:44:1c:b2:5b:
e7:08:f5:45:fa:f2:38:ff:34:4a:76:60:17:4c:96:46:3a:ab:
40:cf:13:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:17:44 2025 by rpki-client