Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/_myhLP5wJQO5zrNpGqlfX2P_eEI.roa
File: _myhLP5wJQO5zrNpGqlfX2P_eEI.roa (raw, json)
Hash identifier: uxYlBgCBcBox1loU3PaNZvPsnu81IrKywYy29oE8GrY=
Subject key identifier: FE:6C:A1:2C:FE:70:25:03:B9:CE:B3:69:1A:A9:5F:5F:63:FF:78:42
Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial: 019421B2335D2F696B86DA44465B38D359A2
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/_myhLP5wJQO5zrNpGqlfX2P_eEI.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39305
IP address blocks: 45.84.52.0/22 maxlen: 22
62.106.73.0/24 maxlen: 24
77.75.228.0/24 maxlen: 24
91.211.64.0/22 maxlen: 22
91.238.63.0/24 maxlen: 24
91.242.224.0/24 maxlen: 24
109.234.73.0/24 maxlen: 24
146.19.18.0/24 maxlen: 24
185.182.107.0/24 maxlen: 24
194.247.36.0/24 maxlen: 24
212.6.47.0/24 maxlen: 24
2a0c:7140::/29 maxlen: 29
2a0e:9780::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 16 Jan 2025 10:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:33:5d:2f:69:6b:86:da:44:46:5b:38:d3:59:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe6ca12cfe702503b9ceb3691aa95f5f63ff7842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:37:26:fd:9d:d2:65:05:a3:82:7c:e4:68:
b9:58:a4:a5:8b:7c:1b:ed:99:f4:8e:ca:3b:08:a9:
e2:01:73:54:6f:a9:3d:54:17:07:15:b0:dc:05:8c:
f7:20:dd:1e:af:90:08:58:cf:7b:2c:39:20:d8:8d:
f7:ac:b2:d0:82:4a:fc:22:00:d3:af:06:d2:2e:58:
01:78:2a:fc:04:81:7a:3f:b3:19:bf:0d:90:b7:4f:
11:96:da:e2:96:60:4f:4a:01:b1:7d:e9:e0:06:0e:
6e:67:2b:1e:80:8d:19:aa:4e:4f:44:0b:ce:7d:8f:
fe:19:3e:11:74:05:85:69:6c:4a:0a:5e:5d:31:73:
07:8a:86:95:88:31:35:e9:01:24:90:12:67:ab:d4:
fc:54:1a:36:ad:e9:c2:44:2e:db:e1:aa:6e:70:f9:
fb:8d:42:75:71:c4:7f:c8:af:b6:49:1c:37:40:a2:
a4:5e:40:42:80:1c:bc:2d:39:8a:88:5b:b5:04:b6:
4b:da:5d:47:f8:72:b0:1f:19:b4:bd:32:7b:dc:52:
eb:97:72:f7:3b:dc:3b:5a:3f:04:02:e1:f5:1c:55:
f8:a3:f6:34:3b:26:52:6e:4b:b6:f3:ec:84:5b:e6:
46:52:94:d6:36:83:1c:49:e7:a2:94:9f:c4:c2:88:
3c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6C:A1:2C:FE:70:25:03:B9:CE:B3:69:1A:A9:5F:5F:63:FF:78:42
X509v3 Authority Key Identifier:
keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/_myhLP5wJQO5zrNpGqlfX2P_eEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.52.0/22
62.106.73.0/24
77.75.228.0/24
91.211.64.0/22
91.238.63.0/24
91.242.224.0/24
109.234.73.0/24
146.19.18.0/24
185.182.107.0/24
194.247.36.0/24
212.6.47.0/24
IPv6:
2a0c:7140::/29
2a0e:9780::/29
Signature Algorithm: sha256WithRSAEncryption
9b:a5:0e:50:21:57:1e:38:07:82:15:92:27:a5:a1:9f:0f:b0:
ad:3b:b6:7e:40:fe:52:d5:90:db:7d:9f:4b:e4:3b:bf:40:35:
9c:21:0e:a7:83:45:9b:c0:20:c0:27:96:52:e0:c1:e2:d9:af:
50:23:20:e8:37:96:97:59:42:69:d5:73:a0:8f:58:f0:b9:93:
05:a6:0d:97:80:72:2a:1a:bc:c2:bb:69:fc:02:6c:d8:7b:43:
6d:d5:bb:5b:93:55:58:a3:bd:52:7a:d2:18:b0:51:c5:6a:6d:
78:66:ee:e6:5a:9e:d2:ac:4f:88:ef:77:71:aa:c8:e8:3b:41:
ab:bd:8b:41:b3:39:98:e1:d3:37:f9:85:fb:5d:3c:54:40:01:
44:b9:cb:07:78:d8:95:6c:f8:d9:0a:46:fe:b9:4a:8b:a8:0a:
c7:cd:eb:63:a2:d5:15:c8:84:2a:2a:7f:c9:85:f2:99:d3:69:
37:10:01:65:d3:cb:05:21:4e:6f:7d:9f:8e:d0:47:a0:49:90:
18:b3:00:73:5f:e8:6f:30:af:a0:ce:2a:19:df:58:42:b3:26:
e2:19:fc:2d:d8:ca:24:d0:ca:b0:16:33:68:6f:6c:9a:c4:90:
3f:92:93:75:23:c2:bf:91:4e:91:d8:a9:a9:28:48:26:c6:0e:
c1:2c:1f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:39:42 2025 by rpki-client