Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tI6ipSUZhk9s6J8aGUQsKwYQtRI.roa
File: tI6ipSUZhk9s6J8aGUQsKwYQtRI.roa (raw, json)
Hash identifier: nhAHBw6+br/yTVTN8ye0WKzHVVW22K1N8o1OX5WSiBs=
Subject key identifier: B4:8E:A2:A5:25:19:86:4F:6C:E8:9F:1A:19:44:2C:2B:06:10:B5:12
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01938661655A185E7A6F8569AB543C2916F2
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tI6ipSUZhk9s6J8aGUQsKwYQtRI.roa
Signing time: Mon 02 Dec 2024 07:59:09 +0000
ROA not before: Mon 02 Dec 2024 07:59:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:61:65:5a:18:5e:7a:6f:85:69:ab:54:3c:29:16:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Dec 2 07:59:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b48ea2a52519864f6ce89f1a19442c2b0610b512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:e9:ca:15:1c:3c:c5:67:de:b0:50:81:9b:
7b:f5:09:f7:f8:1f:08:93:bc:4e:12:54:64:d7:b0:
f2:4f:ef:f2:56:6f:6b:03:b6:4a:d5:f1:ac:8e:9d:
7d:13:3a:36:85:6f:d3:52:2f:39:e0:aa:62:e3:31:
f2:06:f0:99:d5:42:7f:4d:74:97:ac:bf:1d:b5:11:
8a:7a:71:ca:4b:b3:61:68:8a:01:0c:98:56:a4:be:
f1:35:78:73:fb:a1:9f:c0:07:3d:93:e9:26:c2:58:
f1:63:56:b0:51:78:b5:d1:bc:56:01:92:b6:d5:76:
db:d8:97:f4:91:d7:ac:1a:d8:3f:11:aa:64:b0:27:
1e:45:01:c6:9d:de:6d:9e:11:15:ca:2c:e0:87:8d:
d0:da:5f:93:52:b6:e1:2c:53:18:d9:5d:77:1a:bf:
9e:4a:40:dd:d7:9b:29:2f:38:06:37:13:d2:9c:6b:
02:0e:f4:1c:b8:9b:f6:64:b2:cf:0d:43:5c:62:f6:
6a:b6:05:f5:ac:6b:c1:cb:99:35:06:b0:99:52:d8:
89:dc:25:9b:44:9a:c7:dc:20:ac:6d:e4:dc:f2:fd:
46:32:a2:d2:38:21:88:13:e8:43:db:d1:3c:fb:0a:
9a:b8:d0:5c:8e:e8:95:15:6a:3f:42:1e:01:12:93:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8E:A2:A5:25:19:86:4F:6C:E8:9F:1A:19:44:2C:2B:06:10:B5:12
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tI6ipSUZhk9s6J8aGUQsKwYQtRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0/24
77.242.148.0/24
77.242.151.0/24
83.137.153.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.246.0/23
92.52.208.0/21
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
24:0f:9f:f6:24:df:fe:03:b4:56:f6:ec:9a:40:0e:65:fb:e6:
ef:71:27:f4:36:10:4f:f6:62:55:d1:a2:da:95:13:d8:31:a2:
3c:9b:b0:b5:e7:09:1a:a7:e7:c0:b6:07:71:ea:88:78:ed:27:
46:5e:e0:28:a4:20:99:de:03:90:b5:1c:c2:e6:96:be:00:4d:
dc:dd:69:08:26:04:17:e7:a0:10:17:69:ad:15:a9:cb:5d:e9:
2a:a9:76:21:86:2d:1b:cc:32:c2:ec:d2:6d:3c:ab:cc:fd:ed:
0f:3e:43:6f:d8:aa:0e:69:b3:6d:70:08:41:e8:b0:db:8a:88:
e2:f2:c5:8c:bf:b1:f4:eb:2d:37:19:62:5f:20:52:84:33:08:
dc:bc:66:e4:cc:85:6a:0f:78:a1:4b:38:46:1b:ad:71:89:93:
f5:25:3e:bc:23:eb:5b:ed:75:d5:ed:ae:ec:06:12:a3:9d:c2:
ff:7b:59:5e:5a:02:34:40:0b:96:45:4a:e4:8c:4b:a9:42:8a:
8b:c9:e0:66:e2:f1:8a:9b:91:94:68:46:26:ad:77:4c:e7:6b:
0a:d6:d7:72:2b:f3:d9:10:95:2e:4e:73:87:84:3e:31:c6:55:
c1:23:47:78:46:b8:4c:ce:29:31:53:68:03:61:94:1b:e4:9a:
39:8d:24:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:48 2025 by rpki-client