Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/Y6vFdVo-GjJoXddCRXOoOuYWqlY.roa
File: Y6vFdVo-GjJoXddCRXOoOuYWqlY.roa (raw, json)
Hash identifier: T5QXavJvixaaOxN73mucpK9ZuvAfRwDkBmPlpJOxvtE=
Subject key identifier: 63:AB:C5:75:5A:3E:1A:32:68:5D:D7:42:45:73:A8:3A:E6:16:AA:56
Certificate issuer: /CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Certificate serial: 019426D9F48B2CC4A5CB2A3683087B943BDF
Authority key identifier: E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/Y6vFdVo-GjJoXddCRXOoOuYWqlY.roa
Signing time: Thu 02 Jan 2025 11:50:05 +0000
ROA not before: Thu 02 Jan 2025 11:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214798
IP address blocks: 45.129.140.0/24 maxlen: 24
185.169.107.0/24 maxlen: 24
2a09:31c0:cafe::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Mar 2025 11:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f4:8b:2c:c4:a5:cb:2a:36:83:08:7b:94:3b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Validity
Not Before: Jan 2 11:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63abc5755a3e1a32685dd7424573a83ae616aa56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:ba:9a:76:d7:86:d2:65:2a:b7:b7:cc:d3:
5d:e1:98:70:95:42:cc:61:7f:25:0c:e1:22:53:5e:
99:a6:38:e9:34:38:32:27:b2:ba:a2:c1:36:d7:4d:
cb:44:7c:17:ad:3e:3d:4c:ef:1f:03:e8:86:92:fb:
e2:12:1e:87:3a:a6:a3:17:1c:c8:1a:65:e7:48:95:
c5:6a:e1:c0:4b:59:4b:1d:67:9c:9e:29:d7:ed:d7:
fa:b9:5d:17:a9:f5:83:6b:a1:48:b4:31:39:4a:95:
3c:52:5b:7f:52:e2:bf:32:fb:ee:4f:ab:3c:dc:2a:
ba:95:bc:ec:be:b8:36:6e:1a:ab:8c:b7:16:89:a8:
07:c0:58:29:1b:e8:fa:62:96:04:cd:80:81:0a:32:
e4:42:21:79:f9:b4:96:5f:98:d9:ad:24:b9:89:76:
e0:5a:69:f7:0f:80:98:49:b0:42:3c:29:e5:41:7e:
ae:aa:0e:1a:51:84:98:85:6e:14:fb:1b:c8:38:52:
9e:3b:2c:38:e5:61:22:12:02:93:d9:33:68:56:92:
a2:26:a5:5a:97:ec:15:b4:be:af:91:22:1e:f0:36:
a6:eb:1e:11:be:c9:fc:cb:cb:45:af:5d:90:e5:02:
44:7b:b1:f8:1d:28:7e:00:e9:e5:e9:12:2e:ed:74:
5b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AB:C5:75:5A:3E:1A:32:68:5D:D7:42:45:73:A8:3A:E6:16:AA:56
X509v3 Authority Key Identifier:
keyid:E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/Y6vFdVo-GjJoXddCRXOoOuYWqlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.140.0/24
185.169.107.0/24
IPv6:
2a09:31c0:cafe::/48
Signature Algorithm: sha256WithRSAEncryption
0b:3d:9a:cb:04:a3:45:07:6c:9f:ca:23:47:01:20:6e:7e:a7:
9a:26:9e:ae:33:46:62:d9:e9:06:32:6a:26:29:80:a8:97:a6:
00:0a:eb:7e:d6:06:4b:a1:de:c8:6d:da:c8:51:80:6d:3e:a5:
4d:d2:1f:33:51:0e:7e:84:ef:07:7f:f3:65:e9:d4:fe:5d:d1:
40:c3:d1:27:62:28:f2:20:d7:4a:38:65:05:74:15:01:1f:43:
84:31:e6:1f:31:59:d7:b7:84:4e:86:4b:a6:0e:e2:a3:99:dd:
66:b3:e7:42:de:97:29:22:aa:00:2d:a3:5e:7f:ae:6a:a7:5b:
98:d5:73:d7:f2:9c:c4:72:4a:d6:0f:94:fe:0f:48:2d:af:2e:
88:52:df:2d:86:c4:b0:23:e4:47:dd:e7:e8:cc:d2:d0:c0:47:
3c:77:f5:64:76:51:d0:34:e2:a8:a1:f3:0d:d9:30:a4:7a:2c:
da:2e:99:2a:c1:bf:bf:13:88:b4:31:c9:90:ba:15:50:67:aa:
88:ec:e7:e3:2c:bc:e2:ca:50:f0:db:21:f2:0a:25:c3:c5:c9:
f3:29:25:e5:ec:64:f1:8f:92:47:8a:66:35:0c:12:88:1f:20:
8a:dc:12:63:fe:3d:8c:d3:e8:9c:35:27:54:77:3c:11:4a:b4:
c8:54:a9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:12:49 2025 by rpki-client