Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tlVa6ZOWhVenV-b8MYly5DhhbRs.roa
File: tlVa6ZOWhVenV-b8MYly5DhhbRs.roa (raw, json)
Hash identifier: 8D/JYWZcx2rSZmWbIsWW06T3IxqM7BNMML/5jre5kh4=
Subject key identifier: B6:55:5A:E9:93:96:85:57:A7:57:E6:FC:31:89:72:E4:38:61:6D:1B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB96B308A89591389B4B0EDEFF0FBA
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tlVa6ZOWhVenV-b8MYly5DhhbRs.roa
Signing time: Wed 01 Jan 2025 17:48:20 +0000
ROA not before: Wed 01 Jan 2025 17:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 17 Jan 2025 07:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:96:b3:08:a8:95:91:38:9b:4b:0e:de:ff:0f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6555ae993968557a757e6fc318972e438616d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:ac:b9:03:d1:e1:23:fd:9d:38:bc:89:c3:
54:f1:ff:fa:28:e4:36:6d:71:00:85:bf:80:1b:21:
91:0d:f0:8a:10:cc:78:45:5f:57:d2:45:25:1a:30:
bd:e9:bb:fa:5c:aa:3b:88:5c:b7:49:85:52:d8:06:
f6:20:d3:0d:9a:69:7c:8c:a6:0c:93:18:0d:98:93:
ae:b6:08:57:12:7b:b5:a5:e4:32:88:f3:9a:6a:3f:
80:29:73:50:98:8b:71:f4:ff:7c:30:2d:30:2f:6c:
f4:c3:24:cd:a3:f0:a4:14:6c:73:1b:0e:48:cf:bb:
1a:92:fe:1d:74:58:12:79:8a:c7:63:67:93:f4:bd:
a4:f9:4e:7f:a8:21:a2:0e:f1:c7:88:0d:71:d1:d3:
ff:20:e1:26:bc:90:e4:ba:fb:86:e3:35:77:a8:22:
f8:47:a5:f9:d9:53:0d:6a:57:a8:2c:b8:74:27:c5:
ff:2f:d8:e4:8c:04:0c:e5:a0:ee:aa:5c:1b:09:1c:
1a:12:56:13:94:25:9a:74:5e:2e:f9:22:d0:55:b7:
c6:d6:80:a2:81:e7:f7:0b:68:18:73:60:04:d0:61:
d4:4c:b1:9a:c9:10:1b:96:d5:70:ff:50:0a:c8:1a:
97:5e:af:1c:5e:95:78:3d:ae:e3:6f:e8:d7:20:2b:
7c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:55:5A:E9:93:96:85:57:A7:57:E6:FC:31:89:72:E4:38:61:6D:1B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tlVa6ZOWhVenV-b8MYly5DhhbRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0/24
77.242.148.0/24
77.242.151.0/24
83.137.153.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.246.0/23
92.52.208.0/21
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
19:17:2d:74:14:64:b7:89:4b:8e:48:28:af:fb:e4:bd:da:0f:
84:2b:a2:16:3b:ed:d3:f9:70:a9:51:a5:3f:84:fd:a8:9a:be:
df:c5:27:52:45:a1:95:1d:d9:d3:31:c5:b0:ae:7a:42:0d:9e:
41:d6:6d:30:70:d3:e5:36:31:c8:e0:97:4d:b2:f9:dd:a8:55:
b4:77:73:19:eb:f0:74:34:2b:b3:fe:71:57:6b:7b:9c:fa:58:
82:32:be:aa:25:fa:ef:6b:9b:65:b0:41:e6:f2:03:e0:92:9c:
06:c0:df:dd:92:eb:7e:ac:39:90:85:69:eb:c6:4b:21:c6:33:
2b:c2:2c:a4:d7:b7:03:94:fe:47:0b:f2:98:9a:5e:9f:42:b3:
89:26:f6:18:a2:e7:8b:4b:29:e4:0e:a4:3e:ce:42:a8:c4:9a:
47:ed:4c:a1:43:cc:43:9a:24:2e:8f:88:07:19:93:e8:9a:42:
a1:21:67:f2:fd:92:d9:68:b4:e8:f5:36:26:89:a4:62:db:0b:
59:9b:f2:cb:a3:53:ec:a9:67:5a:82:56:6f:d4:20:dd:09:ce:
c6:1f:ff:60:65:73:ea:60:66:57:47:76:69:3f:ee:ee:16:b0:
e2:cd:56:ea:d7:ab:67:c3:ac:6d:ac:9e:60:a8:38:10:17:23:
10:55:27:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:14:53 2025 by rpki-client