Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/Y3yc3HrQzTdFeg5pHHD4Q-eKaJ0.roa
File: Y3yc3HrQzTdFeg5pHHD4Q-eKaJ0.roa (raw, json)
Hash identifier: ml0YdAViLGeK91KJIF3mxvKBP57uNQ6HNPOHFL6Wcf4=
Subject key identifier: 63:7C:9C:DC:7A:D0:CD:37:45:7A:0E:69:1C:70:F8:43:E7:8A:68:9D
Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial: 018CC6B77E5CC208AD5AB2DD25BB01BEA713
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/Y3yc3HrQzTdFeg5pHHD4Q-eKaJ0.roa
Signing time: Mon 01 Jan 2024 20:29:23 +0000
ROA not before: Mon 01 Jan 2024 20:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62241
IP address blocks: 185.48.56.0/22 maxlen: 22
185.245.184.0/22 maxlen: 22
45.93.132.0/22 maxlen: 22
2a01:9520::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7e:5c:c2:08:ad:5a:b2:dd:25:bb:01:be:a7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Validity
Not Before: Jan 1 20:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=637c9cdc7ad0cd37457a0e691c70f843e78a689d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:83:bc:b8:51:27:60:52:23:90:98:c1:8b:
c5:d5:83:c7:25:52:34:77:60:9f:fe:b7:a3:ce:c1:
e9:2b:71:10:0d:8f:00:36:96:b8:6d:cd:dc:f8:12:
e7:0d:2d:6e:21:e4:8f:25:b6:8d:9a:ed:c8:ac:9d:
2a:b9:32:c4:03:65:57:d5:5f:a4:32:b2:39:2d:fa:
66:fb:46:cb:aa:97:74:d3:a0:7a:63:83:17:d0:25:
5f:71:43:5e:60:bd:6f:3f:52:90:00:43:69:e1:ce:
61:a6:4e:4b:39:f1:f0:60:99:d0:ba:85:2f:bd:47:
1c:77:37:9d:3f:3b:f3:4c:61:2f:21:a6:0d:42:0d:
7f:3d:ea:71:d7:79:0a:9b:32:f9:a3:54:43:04:c4:
85:96:c4:ee:9d:9e:16:50:2d:a4:53:03:59:f9:7b:
da:cb:71:90:3d:0c:76:5c:d2:fe:0b:95:81:8d:39:
65:8e:24:64:0f:49:ed:39:e0:df:df:5f:9b:b5:63:
81:a7:85:bd:35:f1:7d:fe:e0:6e:2f:6c:a7:56:e0:
58:c6:fe:c6:c0:97:d8:20:73:35:d9:c4:ba:aa:df:
fc:ae:ca:d5:8a:30:d1:aa:85:62:46:06:2c:a5:e2:
0a:70:34:6d:a9:a1:a6:19:07:c6:19:b7:13:9f:92:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7C:9C:DC:7A:D0:CD:37:45:7A:0E:69:1C:70:F8:43:E7:8A:68:9D
X509v3 Authority Key Identifier:
keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/Y3yc3HrQzTdFeg5pHHD4Q-eKaJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.132.0/22
185.48.56.0/22
185.245.184.0/22
IPv6:
2a01:9520::/29
Signature Algorithm: sha256WithRSAEncryption
37:f6:af:f7:16:3f:1b:14:98:60:fc:b7:9a:c2:ea:3e:37:3e:
70:74:78:b3:43:f4:c2:74:21:81:48:68:a5:73:b4:3f:66:59:
74:77:0c:8d:6d:12:0a:62:8e:bc:43:f4:f3:e7:55:e8:95:c3:
04:e8:82:5d:6d:bc:a9:a7:1a:be:00:fd:b5:cb:69:d9:4d:15:
94:da:50:55:58:d8:72:59:b1:0a:0d:55:21:7f:5d:9c:5a:18:
b7:89:48:a3:d2:00:43:71:51:d5:29:c2:68:6f:27:51:46:ee:
72:4f:49:db:13:4a:fa:49:4a:bb:df:a8:f9:a3:e0:b9:f8:cf:
5b:68:fd:09:ba:1e:3e:e7:53:bf:b6:59:9f:b0:e3:37:1c:21:
9b:eb:39:7f:89:b2:0d:c7:8e:00:9d:06:fe:88:33:48:3b:94:
e0:15:e9:88:47:4a:ff:c1:48:f9:ac:c2:49:4a:4d:0a:e7:5d:
a1:a2:16:bd:1b:c8:70:9a:f3:79:06:78:9d:05:11:a2:30:7b:
eb:82:f9:3e:10:fd:f8:10:de:86:54:83:0e:ad:b6:e3:cc:c5:
53:a4:aa:2e:b1:4e:61:10:2f:2e:c2:1e:41:03:b4:44:4d:33:
65:73:ca:8a:bf:23:76:ef:2b:fa:35:6c:e7:bf:2a:7c:ce:df:
b5:f5:06:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:12 2025 by rpki-client