Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/CYRiwsvlGigoQBsXKYZFSvjCFZ4.roa
File: CYRiwsvlGigoQBsXKYZFSvjCFZ4.roa (raw, json)
Hash identifier: 1euU+VHnS5Oa5hqA8L1mrnNan71ITE/IgrolWt9qYq0=
Subject key identifier: 09:84:62:C2:CB:E5:1A:28:28:40:1B:17:29:86:45:4A:F8:C2:15:9E
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 019609C7C839B19CE9778BA38EDEED966BD7
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/CYRiwsvlGigoQBsXKYZFSvjCFZ4.roa
Signing time: Sun 06 Apr 2025 06:26:49 +0000
ROA not before: Sun 06 Apr 2025 06:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59588
IP address blocks: 45.153.116.0/23 maxlen: 23
45.153.116.0/24 maxlen: 24
45.153.117.0/24 maxlen: 24
45.153.118.0/23 maxlen: 23
45.153.118.0/24 maxlen: 24
45.153.119.0/24 maxlen: 24
151.236.160.0/23 maxlen: 23
151.236.160.0/24 maxlen: 24
151.236.161.0/24 maxlen: 24
151.236.162.0/23 maxlen: 23
151.236.162.0/24 maxlen: 24
151.236.163.0/24 maxlen: 24
151.236.164.0/23 maxlen: 23
151.236.164.0/24 maxlen: 24
151.236.165.0/24 maxlen: 24
151.236.166.0/23 maxlen: 23
151.236.166.0/24 maxlen: 24
151.236.167.0/24 maxlen: 24
151.236.168.0/23 maxlen: 23
151.236.168.0/24 maxlen: 24
151.236.169.0/24 maxlen: 24
151.236.170.0/23 maxlen: 23
151.236.170.0/24 maxlen: 24
151.236.171.0/24 maxlen: 24
151.236.172.0/23 maxlen: 23
151.236.172.0/24 maxlen: 24
151.236.173.0/24 maxlen: 24
151.236.174.0/23 maxlen: 23
151.236.174.0/24 maxlen: 24
151.236.175.0/24 maxlen: 24
151.236.176.0/23 maxlen: 23
151.236.176.0/24 maxlen: 24
151.236.177.0/24 maxlen: 24
151.236.178.0/23 maxlen: 23
151.236.178.0/24 maxlen: 24
151.236.179.0/24 maxlen: 24
151.236.180.0/23 maxlen: 23
151.236.180.0/24 maxlen: 24
151.236.181.0/24 maxlen: 24
151.236.182.0/23 maxlen: 24
151.236.182.0/24 maxlen: 24
151.236.183.0/24 maxlen: 24
151.236.186.0/24 maxlen: 24
151.236.188.0/23 maxlen: 23
151.236.188.0/24 maxlen: 24
151.236.189.0/24 maxlen: 24
151.236.190.0/23 maxlen: 23
151.236.190.0/24 maxlen: 24
151.236.191.0/24 maxlen: 24
198.160.165.0/24 maxlen: 24
198.160.166.0/24 maxlen: 24
198.160.168.0/23 maxlen: 23
198.160.168.0/24 maxlen: 24
198.176.116.0/23 maxlen: 23
198.176.116.0/24 maxlen: 24
198.176.117.0/24 maxlen: 24
2a10:2200:1::/48 maxlen: 48
2a10:2200:2::/48 maxlen: 48
2a10:2200:3::/48 maxlen: 48
2a10:2200:b::/48 maxlen: 48
2a10:2200:c::/48 maxlen: 48
2a10:2200:d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 19 Apr 2025 15:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:c7:c8:39:b1:9c:e9:77:8b:a3:8e:de:ed:96:6b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Apr 6 06:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=098462c2cbe51a2828401b172986454af8c2159e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:dd:ee:ad:52:ac:8c:b5:3c:09:eb:57:41:0c:
e7:4b:5e:2a:41:9f:82:d7:cd:8d:2d:4d:2b:31:c1:
27:20:8a:4a:53:e2:13:9b:54:16:31:ea:c1:4f:27:
bf:a2:42:72:a2:66:31:e2:5f:69:d3:23:27:b9:cf:
4d:ce:bb:f4:8d:92:f9:55:40:c6:68:e2:cc:a1:bd:
cf:be:10:89:c3:e5:7a:3c:21:6a:81:1e:2d:cd:65:
06:6c:ac:89:56:86:b6:c7:82:eb:fd:56:1f:8d:8d:
cf:68:e4:65:77:c1:d9:15:44:fc:43:33:cf:dd:45:
9f:36:88:08:21:b9:a5:ea:56:ab:9d:ea:ac:4c:2e:
b2:fd:55:eb:ef:d3:e4:12:08:b7:11:59:43:9f:07:
1e:85:fe:36:b3:31:82:3e:04:ec:82:74:e5:9a:92:
ba:72:26:08:c2:c8:1e:93:fe:07:14:72:c4:f1:64:
2d:92:81:b0:bc:57:36:99:51:1a:dc:63:03:cc:4c:
9c:fc:ef:99:83:2b:34:e3:e3:ca:84:9a:ac:9f:1d:
17:38:28:f8:8e:be:9a:9b:04:09:bc:4f:d4:1b:40:
59:0a:b5:42:ee:ac:9e:1a:95:c4:0f:ce:c5:62:4b:
9b:d5:de:10:28:3d:11:26:64:0d:64:1d:69:ce:4f:
3a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:84:62:C2:CB:E5:1A:28:28:40:1B:17:29:86:45:4A:F8:C2:15:9E
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/CYRiwsvlGigoQBsXKYZFSvjCFZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.116.0/22
151.236.160.0-151.236.183.255
151.236.186.0/24
151.236.188.0/22
198.160.165.0-198.160.166.255
198.160.168.0/23
198.176.116.0/23
IPv6:
2a10:2200:1::-2a10:2200:3:ffff:ffff:ffff:ffff:ffff
2a10:2200:b::-2a10:2200:d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
55:4b:d1:20:4b:df:aa:f5:99:ee:db:73:28:81:39:aa:fe:b6:
b9:3d:78:c6:e9:c3:78:fa:f1:21:59:8f:ed:bd:38:1e:c2:1b:
95:80:43:bf:73:ba:3a:55:93:28:c4:87:ed:78:54:0e:a5:f2:
c5:9f:43:1d:e3:6b:16:91:51:0c:68:b7:7d:31:7e:7d:ad:3f:
61:ce:d7:e4:08:4e:aa:97:74:6f:04:3a:5a:99:85:3b:09:01:
79:fc:76:fb:18:2f:7c:7b:31:89:70:69:cd:e6:22:11:af:f2:
f3:1f:68:8d:4a:c8:8e:53:9e:d0:f9:13:b0:48:d9:fa:11:d5:
84:1b:3d:58:7e:02:c9:c8:e5:9e:1b:c7:bc:ac:29:09:32:b6:
66:f6:79:c7:b2:d8:80:08:e6:05:53:06:38:f4:90:5c:41:a2:
21:97:bc:71:e4:e1:c0:2f:d3:88:08:d9:7e:a0:e5:c8:b2:2b:
58:ac:85:80:89:e6:3c:ff:38:26:de:72:52:15:5e:a6:81:54:
79:5e:11:13:05:a5:c3:31:4a:11:0f:16:90:dd:47:a2:d1:4a:
17:d2:ee:84:88:54:0b:dc:e4:f6:da:9a:d4:c4:51:ba:2c:e4:
37:7a:62:84:6a:f7:9d:8a:7c:3e:0d:e0:f7:c1:cd:5e:e9:e8:
2b:2f:74:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:27 2025 by rpki-client