Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Yka1ALr5yxCKc8TyLpS_cmLeD_M.roa
File: Yka1ALr5yxCKc8TyLpS_cmLeD_M.roa (raw, json)
Hash identifier: GMVp0DeQQSrK0NTpcuocYbWczvvMiQfngFFQNVrlDMg=
Subject key identifier: 62:46:B5:00:BA:F9:CB:10:8A:73:C4:F2:2E:94:BF:72:62:DE:0F:F3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01912BD85A778A6DEDE370734B506D6224D0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Yka1ALr5yxCKc8TyLpS_cmLeD_M.roa
Signing time: Wed 07 Aug 2024 07:58:04 +0000
ROA not before: Wed 07 Aug 2024 07:58:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.86.12.0/24 maxlen: 24
45.152.198.0/24 maxlen: 24
2a0e:15c4::/32 maxlen: 32
2a0e:1a84::/32 maxlen: 32
2a0f:3d80:bac::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a12:ecc2::/32 maxlen: 32
2a13:18c3::/32 maxlen: 48
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 07 Aug 2024 15:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2b:d8:5a:77:8a:6d:ed:e3:70:73:4b:50:6d:62:24:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 7 07:58:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6246b500baf9cb108a73c4f22e94bf7262de0ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:b2:99:7f:32:66:e4:ea:c7:a2:db:44:fa:
d7:f7:51:da:29:32:b1:87:ed:9c:10:5b:38:e7:b9:
5e:32:53:ec:01:98:46:ba:d6:55:82:1e:eb:3b:0f:
32:2e:53:30:9c:37:2f:32:60:9e:43:a3:6d:39:3e:
c9:1b:2e:c4:f0:a0:29:e1:06:ef:95:80:05:c3:84:
c6:c5:db:1e:b8:28:c0:fb:cd:74:0e:90:43:9c:35:
45:ec:ea:7d:07:3e:13:18:4a:60:77:78:43:e5:80:
dc:a5:75:b7:c2:13:36:99:ee:b1:15:e8:ce:38:d0:
9c:0f:c2:7c:6b:5c:8e:da:65:03:1d:b4:c1:49:d9:
e1:6b:61:dc:f5:bf:82:0b:e6:5f:26:98:54:5f:5e:
f2:69:97:ff:30:cf:9e:55:5e:1c:84:d0:ce:1f:2b:
e7:28:7e:55:c9:08:33:80:f1:07:b3:1b:5e:d4:a2:
6c:f1:38:89:a9:59:82:2f:eb:c9:86:2d:13:85:70:
39:97:8f:15:07:61:f4:9f:bc:97:32:42:3f:6c:5b:
e6:21:0d:38:fa:ba:3f:80:58:59:35:57:2f:a0:fb:
5e:e4:96:39:b5:de:2e:91:f8:72:45:5a:9b:ad:7d:
89:c5:23:4a:ae:12:38:93:6d:94:9f:e1:c6:37:8c:
4d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:46:B5:00:BA:F9:CB:10:8A:73:C4:F2:2E:94:BF:72:62:DE:0F:F3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Yka1ALr5yxCKc8TyLpS_cmLeD_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.12.0/24
45.152.198.0/24
IPv6:
2a0e:15c4::/32
2a0e:1a84::/32
2a0f:3d80:bac::/48
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a12:ecc2::/32
2a13:18c3::/32
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
95:9d:14:ab:dc:7a:e7:7f:c4:b0:1a:1a:1b:6a:8c:cf:a6:a6:
f0:1c:f0:ef:6f:84:65:2b:06:b6:d1:8e:d4:70:70:a2:1a:f1:
7b:23:f5:9f:46:22:27:77:e0:63:72:2e:08:ac:d9:3a:cc:1b:
ae:70:c5:e5:b5:70:ec:bd:f8:fd:a9:ce:52:78:48:06:dd:c4:
67:83:59:5e:bf:11:83:84:44:a0:67:38:e1:45:49:20:cb:6a:
f1:57:56:69:72:4c:05:f6:cc:6d:9b:97:54:2b:8a:66:e0:1e:
b7:9b:06:dd:6a:b7:c0:2d:66:9d:12:bc:cc:5e:01:93:19:48:
53:37:fc:07:76:f2:92:93:95:fb:09:03:88:07:b9:05:ba:97:
86:e6:96:11:a7:29:f4:52:72:0c:34:ab:86:5b:20:c4:66:25:
13:23:f3:58:4a:ac:c9:c6:ee:8c:92:25:22:4f:87:c7:52:7b:
80:31:a5:af:75:34:30:8a:9a:ef:73:99:a1:e1:a3:51:16:08:
7b:34:13:b4:37:bf:a6:bf:13:98:1c:a1:fc:a9:eb:d5:5c:d1:
c7:6c:25:d5:b8:a0:c2:94:3f:18:11:c6:94:c9:a7:a7:e1:c1:
6e:47:f8:12:76:af:67:bc:0d:34:c2:a0:36:e2:01:3e:23:bb:
c3:ff:b7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:13:12 2025 by rpki-client