Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/YQYjtDPh_v2afDOktu95ET5fYC4.roa
File: YQYjtDPh_v2afDOktu95ET5fYC4.roa (raw, json)
Hash identifier: iG9nMXp1Sf1Lnb2G0aTCkMg3IIR8GcxlIW7Y2/Ds7Z0=
Subject key identifier: 61:06:23:B4:33:E1:FE:FD:9A:7C:33:A4:B6:EF:79:11:3E:5F:60:2E
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 01955D73B8993D7DC0BCF4E87491F1FEFB58
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/YQYjtDPh_v2afDOktu95ET5fYC4.roa
Signing time: Mon 03 Mar 2025 19:20:19 +0000
ROA not before: Mon 03 Mar 2025 19:20:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.136.37.0/24 maxlen: 24
45.136.39.0/24 maxlen: 24
185.38.26.0/24 maxlen: 24
185.38.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 19:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:73:b8:99:3d:7d:c0:bc:f4:e8:74:91:f1:fe:fb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Mar 3 19:20:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=610623b433e1fefd9a7c33a4b6ef79113e5f602e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:91:33:02:9f:b9:cc:e3:f7:1b:cd:38:6e:5d:
e2:cd:97:1a:6d:85:fa:f3:c2:e5:c1:be:b1:e9:d6:
18:7d:3d:bc:d6:9a:4b:96:fd:39:77:ce:cf:ef:ac:
98:3e:b5:5b:28:18:a1:a4:2c:6d:de:fc:38:10:40:
d3:d4:e7:26:66:26:40:45:d1:ed:a9:76:d5:b5:bc:
dc:d9:bb:4e:fb:1a:89:a1:d4:65:74:1c:73:d5:3a:
5b:76:81:3e:dc:2b:c5:ec:f0:f1:ab:f3:a5:a8:70:
54:18:b7:47:90:15:9f:c4:0d:f3:a7:57:34:37:8e:
21:01:63:ba:49:94:45:53:ae:0a:14:7d:b4:da:9b:
60:77:53:87:31:73:61:21:7c:ca:18:ab:a4:c9:23:
4d:e2:1e:95:97:bd:f4:65:91:e1:8d:56:c0:c2:cd:
b5:d9:98:8b:57:42:4a:f1:bc:3e:99:ca:ee:21:b1:
14:9f:e1:ee:c6:5f:17:0f:c1:28:41:d2:09:ce:9c:
b6:d1:44:e3:68:eb:3e:66:f4:1a:3d:c1:b2:32:31:
6f:6d:78:6d:06:69:6f:07:25:5b:b8:5d:75:af:c1:
17:fc:fd:0f:3a:53:df:32:90:7b:20:01:da:89:c6:
3d:3f:64:8a:95:81:e4:03:ff:48:08:f6:94:9b:07:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:06:23:B4:33:E1:FE:FD:9A:7C:33:A4:B6:EF:79:11:3E:5F:60:2E
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/YQYjtDPh_v2afDOktu95ET5fYC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.37.0/24
45.136.39.0/24
185.38.26.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:42:2b:42:7d:a7:1b:21:3a:a9:ee:c0:c5:51:f7:1b:b5:d6:
a9:0c:0e:b1:02:e7:d5:2b:b3:88:45:1b:ee:90:3c:1c:31:b6:
df:f8:b8:57:a1:ac:ba:0e:7a:1a:3b:ca:8a:6d:d9:ee:c9:2e:
fc:98:83:b8:10:2a:43:e2:46:53:cf:f1:77:f3:1b:88:13:25:
6d:c3:25:35:2f:6c:d0:39:48:60:38:49:d7:0a:2e:98:75:b8:
b7:13:29:68:39:aa:5c:c9:2b:d5:5d:3c:4a:20:6c:84:82:a7:
a0:a2:92:93:a4:2b:25:f6:3d:fb:3c:1c:ce:76:cf:4e:10:aa:
3c:bb:c2:75:a1:f6:51:e5:54:db:21:35:06:58:73:8a:2e:72:
8b:fe:09:26:ba:f9:97:22:cf:76:ef:af:de:e2:df:94:ed:81:
de:db:3f:41:b2:79:10:56:b4:24:63:e8:ba:9c:64:dd:e2:b0:
84:1f:81:f7:c3:47:e2:ff:3d:0a:aa:08:77:a7:a2:21:44:ee:
55:8d:ad:a8:1e:d2:11:60:10:13:45:27:c3:63:20:5f:c7:fe:
db:6c:7d:2f:cd:f6:31:3a:98:5a:61:39:3a:01:2b:be:e4:18:
a9:15:c5:b8:7b:d1:a3:f7:d2:31:89:73:91:dd:dd:89:b9:69:
61:30:e0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:14:44 2025 by rpki-client