Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Yqhj7R2w4qCJp16mA0pzxAMvbR4.roa
File: Yqhj7R2w4qCJp16mA0pzxAMvbR4.roa (raw, json)
Hash identifier: lR68ght3lwIsIO1ubpBysy/gPvSWMynZ9V1K87ivXeM=
Subject key identifier: 62:A8:63:ED:1D:B0:E2:A0:89:A7:5E:A6:03:4A:73:C4:03:2F:6D:1E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190320210765D89607E315752243BA4815B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Yqhj7R2w4qCJp16mA0pzxAMvbR4.roa
Signing time: Wed 19 Jun 2024 19:38:34 +0000
ROA not before: Wed 19 Jun 2024 19:38:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.86.12.0/24 maxlen: 24
45.152.198.0/24 maxlen: 24
2a0c:7884::/32 maxlen: 32
2a0e:1a84::/32 maxlen: 32
2a0f:2d80:1292::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a13:18c3::/32 maxlen: 32
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 27 Jun 2024 17:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:32:02:10:76:5d:89:60:7e:31:57:52:24:3b:a4:81:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 19 19:38:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62a863ed1db0e2a089a75ea6034a73c4032f6d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:b9:6d:4b:13:e9:d8:7c:ee:ba:f5:d1:af:
a7:2e:7c:f6:ed:90:49:d0:bd:a1:41:98:e4:ea:ab:
cd:d6:e9:15:f1:2a:fc:23:8e:e8:bc:2c:99:9f:c8:
b3:a6:73:7b:95:97:2b:af:04:d7:d2:36:11:cd:49:
df:9d:af:e7:e9:76:00:42:8c:d6:53:b8:ea:46:14:
b1:02:fa:cf:a2:c1:92:fb:99:3e:b2:97:2b:41:bd:
42:bb:2e:12:a8:e3:90:15:a5:6a:7c:62:c0:2e:be:
aa:21:22:90:fb:b0:a4:39:9c:24:c0:ea:c8:2f:e4:
f8:8c:ce:e6:f7:f8:84:e4:01:87:64:2f:f8:eb:8a:
43:07:a8:55:2f:7a:c6:6f:b9:02:9e:06:91:ea:14:
21:5d:52:37:bb:bd:92:ff:d4:a2:03:a7:a9:ac:00:
9e:54:5b:f6:a7:62:47:37:89:b8:7e:9a:35:b6:c4:
96:ac:2f:76:de:f7:51:2a:c6:cd:c3:be:8a:9e:66:
e7:65:c5:93:20:b0:a2:24:b1:aa:61:ad:77:0a:88:
b6:8f:e2:64:80:ad:b4:42:41:f4:8e:c3:22:93:59:
d7:10:9a:f2:5d:32:eb:ed:41:f3:d8:0c:72:a3:76:
a8:2e:27:6f:ee:e5:00:b5:d4:69:58:d7:1b:a1:70:
cd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A8:63:ED:1D:B0:E2:A0:89:A7:5E:A6:03:4A:73:C4:03:2F:6D:1E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Yqhj7R2w4qCJp16mA0pzxAMvbR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.12.0/24
45.152.198.0/24
IPv6:
2a0c:7884::/32
2a0e:1a84::/32
2a0f:2d80:1292::/48
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a13:18c3::/32
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
35:12:e7:c6:c8:05:52:a1:a8:67:ed:6b:fc:2a:98:ef:fe:5b:
67:27:3f:d1:7d:f3:6e:ae:02:72:37:8b:d3:3a:b9:fa:5c:d2:
1a:05:a5:0a:1b:66:fe:17:3a:71:92:a6:17:a5:68:dd:97:e0:
60:63:03:9e:c8:87:db:65:82:5a:93:cc:5f:bd:4a:71:78:62:
b7:36:38:13:ca:40:c0:98:04:2b:e3:10:98:ae:21:29:19:3d:
e6:49:be:84:67:72:7e:a0:15:a6:34:ab:d9:2b:3d:39:a4:6a:
da:0b:2e:26:22:e7:4e:27:c2:a8:30:fe:28:42:4a:ef:81:af:
f3:79:b9:92:2d:94:f6:2c:e2:5f:98:80:13:21:19:7b:0c:c3:
24:55:fc:2e:55:59:cb:f6:45:55:85:6e:68:29:e9:c7:8c:c9:
f8:ea:8e:ed:b4:60:f0:e6:b9:ad:9c:72:52:bc:1e:28:5e:35:
1a:97:42:e8:9c:dc:e7:28:5c:9a:73:93:5c:fa:87:a9:b1:5a:
6f:d7:04:07:7d:56:34:2c:95:5d:92:09:4c:48:b0:db:b0:45:
57:ca:bc:71:29:ac:0a:c0:ea:42:23:53:f0:6f:d0:35:55:3d:
55:25:fa:e9:e2:2c:c6:e9:1c:2d:af:02:01:e7:16:30:16:c1:
b7:b1:44:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:09:40 2025 by rpki-client