Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RYCLEuLXIypoCt_YwMGG54NCxhY.roa
File: RYCLEuLXIypoCt_YwMGG54NCxhY.roa (raw, json)
Hash identifier: MJKe0pwek/3usbEN4Cxx1wbKQ01Xn0272wyXGFjKIV0=
Subject key identifier: 45:80:8B:12:E2:D7:23:2A:68:0A:DF:D8:C0:C1:86:E7:83:42:C6:16
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197116EDD12A5AA90A58AAA69FACCBCED5E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RYCLEuLXIypoCt_YwMGG54NCxhY.roa
Signing time: Tue 27 May 2025 11:09:27 +0000
ROA not before: Tue 27 May 2025 11:09:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214927
IP address blocks: 45.9.117.0/24 maxlen: 24
45.95.96.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.130.60.0/24 maxlen: 24
45.131.212.0/24 maxlen: 24
45.131.213.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.135.39.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.140.13.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
45.145.56.0/24 maxlen: 24
45.146.131.0/24 maxlen: 24
45.152.208.0/24 maxlen: 24
45.153.22.0/24 maxlen: 24
45.155.69.0/24 maxlen: 24
45.158.185.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
185.122.171.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
185.126.66.0/24 maxlen: 24
185.155.200.0/24 maxlen: 24
185.242.244.0/24 maxlen: 24
185.242.245.0/24 maxlen: 24
192.153.171.0/24 maxlen: 24
193.8.215.0/24 maxlen: 24
193.23.245.0/24 maxlen: 24
193.23.253.0/24 maxlen: 24
193.27.10.0/24 maxlen: 24
193.27.19.0/24 maxlen: 24
193.27.21.0/24 maxlen: 24
194.33.29.0/24 maxlen: 24
195.158.192.0/24 maxlen: 24
2a0c:7886:105::/48 maxlen: 48
2a0f:e7c6:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 18:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:6e:dd:12:a5:aa:90:a5:8a:aa:69:fa:cc:bc:ed:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 27 11:09:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45808b12e2d7232a680adfd8c0c186e78342c616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0a:75:b4:ef:7c:23:ba:c9:4e:5b:7d:c5:63:
c6:c8:04:b1:f0:83:f2:dd:05:8c:65:fc:b6:2f:82:
9d:fe:48:f4:91:90:f2:93:06:94:f2:b2:7a:1d:e8:
a5:20:40:64:dd:b5:4d:34:e6:97:7f:f0:a0:c1:00:
9d:31:42:93:9b:34:29:c4:50:2b:40:34:ce:c8:11:
d9:7f:e7:7a:4a:03:dd:cb:58:d7:b8:ac:d4:44:ec:
fe:a9:8f:84:f9:99:35:88:12:48:6a:52:25:56:f8:
58:ac:d3:4c:f3:6c:0c:f3:dd:35:17:59:80:64:61:
d0:65:8e:e2:67:c7:f3:ae:08:67:d5:61:6e:06:3d:
dc:61:43:ba:5c:d3:1d:df:b5:47:f9:9c:49:b5:85:
c5:fd:ca:fd:fc:d7:4c:08:17:66:12:dc:58:e5:16:
84:a9:83:dd:96:9c:22:38:d2:56:c1:48:b2:46:ce:
94:06:2d:5b:cd:ae:5e:d1:d0:72:f4:00:1e:25:ca:
b1:c8:5a:d1:d1:85:2e:30:34:94:94:0e:1a:a2:7c:
da:b8:8d:6e:70:fc:9d:19:4b:ef:f9:90:04:99:d4:
86:64:59:a5:56:9e:07:ad:56:d0:cc:9f:91:24:13:
56:04:61:3b:40:82:f8:ff:ae:3b:0c:f3:b5:33:3c:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:80:8B:12:E2:D7:23:2A:68:0A:DF:D8:C0:C1:86:E7:83:42:C6:16
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RYCLEuLXIypoCt_YwMGG54NCxhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.95.96.0/24
45.118.248.0/24
45.130.60.0/24
45.131.212.0/23
45.131.215.0/24
45.135.39.0/24
45.137.81.0/24
45.140.13.0/24
45.141.177.0/24
45.145.56.0/24
45.146.131.0/24
45.152.208.0/24
45.153.22.0/24
45.155.69.0/24
45.158.185.0/24
85.209.128.0/24
103.114.43.0/24
113.30.154.0/24
185.122.171.0/24
185.126.64.0/24
185.126.66.0/24
185.155.200.0/24
185.242.244.0/23
192.153.171.0/24
193.8.215.0/24
193.23.245.0/24
193.23.253.0/24
193.27.10.0/24
193.27.19.0/24
193.27.21.0/24
194.33.29.0/24
195.158.192.0/24
IPv6:
2a0c:7886:105::/48
2a0f:e7c6:1000::/48
Signature Algorithm: sha256WithRSAEncryption
ad:92:e3:45:25:65:7d:fe:f0:15:15:c3:23:09:74:ef:fd:01:
b6:d0:e8:41:51:df:d2:bb:d9:6e:e1:80:a0:25:e2:b1:89:a1:
28:3a:3f:39:d7:e7:f1:1c:ce:40:08:e9:7d:4d:d6:76:bb:f8:
a5:e2:6e:13:10:57:2e:ad:cc:42:ca:50:3e:70:68:ba:07:53:
7e:45:ed:c8:be:62:5d:41:a2:8d:e8:08:b7:3c:d9:28:f1:33:
6e:df:55:cd:01:29:d9:81:5e:08:df:37:32:08:ce:68:4f:79:
13:16:4d:dd:cf:47:12:4f:55:61:5b:7c:ad:d2:45:9f:d7:80:
df:85:e1:02:e9:57:44:29:59:db:8b:0f:ba:dd:3f:c4:37:32:
04:3b:87:b8:2a:0c:54:24:7c:cf:52:c1:da:d8:a7:c1:8f:f9:
11:bf:db:cf:d6:6c:fe:46:8a:2a:18:2c:68:a0:78:73:83:80:
af:8e:66:a3:63:b3:5f:53:c9:9c:04:9d:f2:df:ae:16:76:42:
0a:eb:68:2b:81:12:76:65:e2:c1:b3:ef:5f:4c:32:80:93:9b:
c9:96:33:2a:39:83:fd:11:45:b0:ab:88:47:36:7f:e8:5f:a8:
dd:59:be:a4:92:49:25:be:10:4f:10:ac:9c:b1:59:43:2b:21:
81:24:cd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:09:48 2025 by rpki-client