Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/x1WC9We8XWvy-gKLFG6mZdcoeFU.roa
File: x1WC9We8XWvy-gKLFG6mZdcoeFU.roa (raw, json)
Hash identifier: gWp8h5mQLS2to5qLzEMR1bD14/3QtIL12TgOAN482f4=
Subject key identifier: C7:55:82:F5:67:BC:5D:6B:F2:FA:02:8B:14:6E:A6:65:D7:28:78:55
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0193C6908EA71E12F62D79FFB5A294F62A73
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/x1WC9We8XWvy-gKLFG6mZdcoeFU.roa
Signing time: Sat 14 Dec 2024 19:06:22 +0000
ROA not before: Sat 14 Dec 2024 19:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 45.92.172.0/24 maxlen: 24
45.135.177.0/24 maxlen: 24
45.138.144.0/24 maxlen: 24
45.138.147.0/24 maxlen: 24
45.140.60.0/24 maxlen: 24
45.140.62.0/24 maxlen: 24
45.140.63.0/24 maxlen: 24
45.142.72.0/24 maxlen: 24
45.142.73.0/24 maxlen: 24
45.142.74.0/24 maxlen: 24
45.142.75.0/24 maxlen: 24
45.143.142.0/24 maxlen: 24
45.147.252.0/24 maxlen: 24
45.152.212.0/24 maxlen: 24
45.152.213.0/24 maxlen: 24
45.152.214.0/24 maxlen: 24
45.152.215.0/24 maxlen: 24
45.156.148.0/24 maxlen: 24
45.156.151.0/24 maxlen: 24
45.158.45.0/24 maxlen: 24
87.247.141.0/24 maxlen: 24
91.188.228.0/24 maxlen: 24
91.188.229.0/24 maxlen: 24
91.188.230.0/24 maxlen: 24
91.188.231.0/24 maxlen: 24
91.213.35.0/24 maxlen: 24
91.220.206.0/24 maxlen: 24
91.220.229.0/24 maxlen: 24
193.8.171.0/24 maxlen: 24
194.156.0.0/24 maxlen: 24
194.156.27.0/24 maxlen: 24
213.226.102.0/24 maxlen: 24
213.226.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c6:90:8e:a7:1e:12:f6:2d:79:ff:b5:a2:94:f6:2a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Dec 14 19:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c75582f567bc5d6bf2fa028b146ea665d7287855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:20:e9:92:ba:82:88:99:5a:1b:60:d3:d8:04:
0b:10:49:5a:f3:a2:25:a0:ae:cf:42:7a:57:a8:d9:
97:e4:ef:b7:0e:59:b4:28:c3:69:5c:24:ee:d7:ce:
e0:e5:1c:f1:ae:5a:bc:5e:1a:34:8e:6f:66:3c:c0:
d0:7a:4f:10:10:f9:01:8e:81:c3:d9:19:58:fd:81:
b1:25:62:53:cc:b9:47:c1:48:28:a0:95:05:2b:09:
6d:a0:0f:4d:0e:d0:03:ae:ae:1f:c4:ae:11:63:e7:
67:52:36:f7:bd:43:a3:d0:d1:57:f0:cb:c2:46:75:
35:0f:bf:22:26:87:6f:19:b1:17:99:81:16:ad:27:
ce:da:00:9b:cb:7b:70:60:f9:b0:4c:d0:b4:c9:4d:
99:3f:45:86:d2:c7:19:3b:6c:57:80:7d:02:a3:9e:
66:3e:42:c9:17:58:e8:0a:ee:e9:e4:41:9c:23:b7:
58:d9:37:8a:c7:35:37:b7:60:09:95:2c:2e:93:fb:
29:e8:8c:dd:c4:e1:58:da:6b:b6:16:82:65:af:75:
f6:74:7f:4e:7c:22:0a:42:24:3f:9b:0b:30:40:e1:
51:e9:98:4b:f9:29:aa:14:36:30:1d:33:b9:c9:44:
87:d7:5a:13:00:45:c7:b2:1a:2f:f2:ca:32:6d:09:
1a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:55:82:F5:67:BC:5D:6B:F2:FA:02:8B:14:6E:A6:65:D7:28:78:55
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/x1WC9We8XWvy-gKLFG6mZdcoeFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.172.0/24
45.135.177.0/24
45.138.144.0/24
45.138.147.0/24
45.140.60.0/24
45.140.62.0/23
45.142.72.0/22
45.143.142.0/24
45.147.252.0/24
45.152.212.0/22
45.156.148.0/24
45.156.151.0/24
45.158.45.0/24
87.247.141.0/24
91.188.228.0/22
91.213.35.0/24
91.220.206.0/24
91.220.229.0/24
193.8.171.0/24
194.156.0.0/24
194.156.27.0/24
213.226.102.0/23
Signature Algorithm: sha256WithRSAEncryption
45:e1:97:26:33:b7:4a:03:ad:ee:59:b3:b9:ad:67:c0:34:f9:
a2:a5:75:80:83:34:22:e7:d3:1f:85:e7:d4:c9:2f:79:96:04:
72:e2:a6:67:14:02:b7:0e:7e:f5:1b:03:71:2b:c7:0d:ac:09:
12:2a:98:e2:b9:71:ce:c5:a7:a2:86:bc:64:17:aa:db:b7:2a:
a6:71:2e:1e:52:1d:f5:d4:36:fb:5b:03:2b:92:f8:93:34:d6:
45:73:e4:31:52:db:4b:34:cc:23:bc:b6:99:1e:66:5a:9b:1a:
0b:a7:97:3d:1a:aa:58:ec:35:58:94:2f:ef:49:60:27:d4:18:
4f:4d:0b:5b:0d:44:40:23:32:10:53:e9:71:e0:97:2d:bd:c5:
6d:a3:62:6b:05:b2:ba:a1:0c:2b:b7:8e:99:f4:b9:c0:3f:5f:
5d:56:f3:91:71:cf:00:db:7b:54:c4:95:be:34:24:34:80:d7:
b3:29:81:ea:f6:f5:35:e8:28:45:08:03:3f:35:37:b0:98:80:
85:7c:a5:7c:dd:e2:9d:e3:50:a1:a1:1b:48:d0:78:b8:db:bf:
c1:68:b0:d3:c8:4f:12:d2:31:5d:20:b3:c9:73:fe:46:ec:52:
10:93:9b:2a:8d:42:04:80:28:5d:bb:48:41:23:7d:42:ae:4d:
91:b1:95:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:19:36 2025 by rpki-client