Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/Y6NZiX4xq_A9RLvw65zNeQHBgrg.roa
File: Y6NZiX4xq_A9RLvw65zNeQHBgrg.roa (raw, json)
Hash identifier: O2pCNG/aa8aJUBVejs+nnwDy34WEOhh4Roe3eEk+R30=
Subject key identifier: 63:A3:59:89:7E:31:AB:F0:3D:44:BB:F0:EB:9C:CD:79:01:C1:82:B8
Certificate issuer: /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial: 0190C5D822997ABF34423A78899E36A86315
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/Y6NZiX4xq_A9RLvw65zNeQHBgrg.roa
Signing time: Thu 18 Jul 2024 12:36:34 +0000
ROA not before: Thu 18 Jul 2024 12:36:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39351
IP address blocks: 45.83.220.0/24 maxlen: 24
45.83.221.0/24 maxlen: 24
45.83.222.0/23 maxlen: 24
45.129.56.0/24 maxlen: 24
45.129.59.0/24 maxlen: 24
141.98.252.0/24 maxlen: 24
141.98.254.0/24 maxlen: 24
141.98.255.0/24 maxlen: 24
185.65.132.0/24 maxlen: 24
185.65.133.0/24 maxlen: 24
185.65.134.0/24 maxlen: 24
185.65.135.0/24 maxlen: 24
185.195.232.0/24 maxlen: 24
185.195.233.0/24 maxlen: 24
185.209.196.0/24 maxlen: 24
185.209.197.0/24 maxlen: 24
185.209.198.0/24 maxlen: 24
185.209.199.0/24 maxlen: 24
185.213.152.0/24 maxlen: 24
185.213.153.0/24 maxlen: 24
185.213.154.0/24 maxlen: 24
185.213.155.0/24 maxlen: 24
193.32.126.0/24 maxlen: 24
193.32.127.0/24 maxlen: 24
193.32.248.0/24 maxlen: 24
193.32.249.0/24 maxlen: 24
193.138.216.0/22 maxlen: 22
2a03:1b20:1::/48 maxlen: 48
2a03:1b20:2::/48 maxlen: 48
2a03:1b20:3::/48 maxlen: 48
2a03:1b20:4::/48 maxlen: 48
2a03:1b20:5::/48 maxlen: 48
2a03:1b20:6::/48 maxlen: 48
2a03:1b20:7::/48 maxlen: 48
2a03:1b20:8::/48 maxlen: 48
2a03:1b20:9::/48 maxlen: 48
2a03:1b20:a::/48 maxlen: 48
2a03:1b20:b::/48 maxlen: 48
2a03:1b20:bef1::/48 maxlen: 48
2a03:1b20:bef2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 02 Sep 2024 13:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:d8:22:99:7a:bf:34:42:3a:78:89:9e:36:a8:63:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Validity
Not Before: Jul 18 12:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63a359897e31abf03d44bbf0eb9ccd7901c182b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f4:98:12:12:8b:1e:c8:b1:45:91:79:72:d2:
40:be:a3:51:99:9f:c3:d2:17:f6:e1:2b:f5:fa:28:
16:20:eb:8c:27:ce:be:6e:c1:14:bb:40:83:11:a8:
49:22:2d:11:3e:63:c7:69:fc:01:8d:80:b6:64:e4:
9d:c9:76:cd:97:21:ad:72:82:4a:ea:ba:97:f0:cf:
9c:30:5e:31:01:db:fd:29:71:37:2e:16:c0:45:83:
be:90:87:71:6b:62:16:31:3f:0a:c5:e5:10:8e:bf:
61:4a:21:3b:7c:85:45:12:a2:7c:83:0d:f1:a3:28:
e2:49:21:71:18:fb:28:84:3d:0e:b0:dc:f0:e8:30:
61:50:fd:b0:b4:b0:cb:57:1c:f1:39:7a:57:6a:59:
61:b6:32:5e:9e:de:f8:a9:8b:c0:50:11:bc:79:53:
8d:e6:a5:9c:aa:1a:90:71:de:da:2e:0a:70:2f:0f:
29:1b:9a:e6:70:26:c4:fa:d7:7a:e3:0c:74:ff:f3:
36:90:68:41:73:12:ae:56:70:23:c6:cd:1f:26:e2:
5d:b6:32:d3:41:05:02:9e:66:5e:c3:cf:b3:07:4d:
88:5b:02:42:e7:9e:ca:91:1b:92:8f:a9:c8:58:f2:
72:21:44:c8:25:0b:8a:ec:1d:85:5a:5b:82:24:c5:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A3:59:89:7E:31:AB:F0:3D:44:BB:F0:EB:9C:CD:79:01:C1:82:B8
X509v3 Authority Key Identifier:
keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/Y6NZiX4xq_A9RLvw65zNeQHBgrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.220.0/22
45.129.56.0/24
45.129.59.0/24
141.98.252.0/24
141.98.254.0/23
185.65.132.0/22
185.195.232.0/23
185.209.196.0/22
185.213.152.0/22
193.32.126.0/23
193.32.248.0/23
193.138.216.0/22
IPv6:
2a03:1b20:1::-2a03:1b20:b:ffff:ffff:ffff:ffff:ffff
2a03:1b20:bef1::-2a03:1b20:bef2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8d:8c:18:74:f2:1a:2c:22:ed:49:79:9d:16:1c:88:11:d8:11:
91:5d:e7:ab:e9:22:dc:bc:51:0c:6e:d8:07:ff:c7:eb:15:2a:
e3:e7:7f:6d:dc:2c:cc:ee:41:f7:68:74:ef:59:ff:16:cb:e8:
aa:f0:f4:57:3a:0b:af:9e:84:56:8c:31:38:bc:fa:a6:a2:71:
4e:a9:e2:25:53:ff:66:74:e5:5c:06:06:13:46:06:7c:5c:d6:
9e:0c:c3:b3:5b:8c:18:5d:bb:a0:a7:63:21:a1:3b:a8:ce:a2:
cb:77:2c:1f:70:f2:69:8d:52:6a:c5:3e:b4:4b:06:08:27:75:
d3:49:bb:3a:93:4d:ee:cd:7d:d2:b6:c3:86:f0:7c:41:50:86:
30:98:8f:32:28:51:cc:f4:7a:c8:82:24:8f:c6:21:d0:32:33:
8c:12:6e:a1:d4:d9:c0:90:77:16:63:7a:0f:7a:50:df:86:9b:
e6:d7:70:52:19:6a:26:05:4c:25:4e:1e:f1:16:1a:7e:e0:32:
40:e3:7d:16:1e:f5:f6:53:ae:7c:a3:a4:60:43:0c:b8:9d:da:
05:09:aa:e0:d1:47:5d:0f:2a:1c:65:fa:c1:ef:42:c1:58:67:
2f:e8:34:e9:2b:e2:20:ef:8d:0c:c9:4b:c2:e7:ce:ef:98:12:
e8:2d:f6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:19 2025 by rpki-client