Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TeP6H2AihRlDowYQmuboomVl_Bk.roa
File: TeP6H2AihRlDowYQmuboomVl_Bk.roa (raw, json)
Hash identifier: 0a4dHfTVn8sj5ugiJYxGdwwRa9ogay6f+h/wlRYOBbA=
Subject key identifier: 4D:E3:FA:1F:60:22:85:19:43:A3:06:10:9A:E6:E8:A2:65:65:FC:19
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019179EF2A2A5166FFDF13B7A59617623DE3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TeP6H2AihRlDowYQmuboomVl_Bk.roa
Signing time: Thu 22 Aug 2024 11:53:22 +0000
ROA not before: Thu 22 Aug 2024 11:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.86.12.0/24 maxlen: 24
45.152.198.0/24 maxlen: 24
103.114.40.0/24 maxlen: 24
2a0e:1a84::/32 maxlen: 32
2a0f:3d80:bac::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a0f:e6c6:5532::/48 maxlen: 48
2a12:ecc2::/32 maxlen: 48
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Fri 23 Aug 2024 15:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:79:ef:2a:2a:51:66:ff:df:13:b7:a5:96:17:62:3d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 22 11:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4de3fa1f6022851943a306109ae6e8a26565fc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b6:2c:4b:dd:47:7f:60:0c:69:2c:5e:51:de:
f3:88:ea:12:ec:5e:81:b5:7e:b3:f1:73:59:92:d9:
94:32:11:2c:9e:fe:58:d2:09:c7:78:eb:03:06:c4:
9a:0d:f1:0b:09:50:f3:be:63:fa:c5:24:23:a7:7d:
06:be:61:e7:86:41:9f:38:ac:8d:30:84:86:67:67:
12:f9:63:7e:5f:68:ae:54:4c:82:14:65:1b:7b:f7:
5f:69:fc:11:66:d8:1a:58:01:7c:27:95:09:bb:6c:
4c:ea:a3:57:6b:31:a5:07:59:09:e9:13:ff:e7:c8:
7b:5f:2a:5b:bf:9e:36:0c:22:4a:b9:92:6d:30:51:
9b:a0:cb:de:1d:77:cb:3f:aa:39:d7:01:15:2c:3a:
d2:8a:91:a3:cc:ed:8a:c6:59:dd:e7:00:57:91:32:
06:83:f4:c7:b8:20:a1:fa:fa:b6:7c:43:3f:b4:19:
1b:d3:a6:5e:c6:4d:f4:72:76:f9:17:21:ba:dd:34:
07:7b:78:01:b1:9e:af:76:d5:47:e3:7d:96:2d:62:
82:6a:50:af:c8:4d:92:ae:8a:df:3e:10:4d:a4:0e:
65:3e:82:33:8b:eb:74:07:80:4b:c0:85:f4:f1:96:
29:63:57:9c:ca:c2:be:bc:e5:72:a1:ab:30:e6:cb:
b8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E3:FA:1F:60:22:85:19:43:A3:06:10:9A:E6:E8:A2:65:65:FC:19
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TeP6H2AihRlDowYQmuboomVl_Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.12.0/24
45.152.198.0/24
103.114.40.0/24
IPv6:
2a0e:1a84::/32
2a0f:3d80:bac::/48
2a0f:3d82::/32
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a0f:e6c6:5532::/48
2a12:ecc2::/32
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
22:b0:8b:79:d7:33:73:64:5c:90:5a:e3:58:9a:a0:a5:c0:8d:
04:cb:bf:25:69:14:6a:64:59:64:c3:d1:ea:51:40:ad:c5:b4:
2c:a5:4a:b6:7b:7b:eb:48:f2:d7:23:e8:5a:80:f3:2a:76:71:
96:7e:01:30:8b:dc:2a:7f:c0:b2:12:25:96:5a:9e:cb:0b:99:
9f:6f:e1:b0:be:7c:95:39:b2:dd:74:ca:44:e0:71:f1:9b:65:
2f:1f:76:2c:0f:df:ed:3e:05:8f:5f:ce:7b:26:9b:fb:e4:29:
88:71:a4:e2:ef:07:5a:eb:b5:5f:66:80:b4:10:7f:4e:39:37:
3c:d7:68:15:20:b5:5d:b7:80:86:4b:ae:c2:98:2c:5c:d5:fd:
13:0a:7a:84:da:3e:70:bf:79:ad:8f:24:2a:51:60:22:64:87:
f9:89:39:69:89:91:e7:db:89:da:86:15:5c:7e:c5:f1:89:8f:
a9:c8:46:a2:0e:04:16:5a:a7:38:8e:7b:03:9f:1b:4c:a3:b9:
98:b7:8d:4d:fc:f2:5f:d1:b0:d1:39:43:75:91:5f:61:af:98:
4f:0d:75:e9:22:5a:22:8a:00:30:8c:83:b2:d5:87:dc:3f:19:
5b:9c:fa:a6:3b:ad:71:63:43:5a:86:8d:f7:76:fa:ec:d0:ad:
e3:07:87:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:22:47 2025 by rpki-client