Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/FUZfeP8ocV53P--G13lqyzrrENA.roa
File: FUZfeP8ocV53P--G13lqyzrrENA.roa (raw, json)
Hash identifier: 336+vnbvxF81MnMngmhmHGWbYOXfVZcKH41O7jLLtiw=
Subject key identifier: 15:46:5F:78:FF:28:71:5E:77:3F:EF:86:D7:79:6A:CB:3A:EB:10:D0
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01954807B70E917293577DB053F3C226B10F
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/FUZfeP8ocV53P--G13lqyzrrENA.roa
Signing time: Thu 27 Feb 2025 15:30:20 +0000
ROA not before: Thu 27 Feb 2025 15:30:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47690
IP address blocks: 45.43.145.0/24 maxlen: 24
45.43.146.0/24 maxlen: 24
45.43.148.0/24 maxlen: 24
45.43.149.0/24 maxlen: 24
45.43.150.0/24 maxlen: 24
45.43.151.0/24 maxlen: 24
45.43.154.0/24 maxlen: 24
45.43.155.0/24 maxlen: 24
45.43.158.0/24 maxlen: 24
45.43.159.0/24 maxlen: 24
45.43.160.0/24 maxlen: 24
45.43.161.0/24 maxlen: 24
45.43.162.0/24 maxlen: 24
104.222.176.0/24 maxlen: 24
104.222.177.0/24 maxlen: 24
104.222.178.0/24 maxlen: 24
104.222.179.0/24 maxlen: 24
104.222.180.0/24 maxlen: 24
104.222.181.0/24 maxlen: 24
104.222.182.0/24 maxlen: 24
104.222.183.0/24 maxlen: 24
104.222.189.0/24 maxlen: 24
104.233.8.0/24 maxlen: 24
104.233.9.0/24 maxlen: 24
104.233.59.0/24 maxlen: 24
104.238.6.0/24 maxlen: 24
104.238.11.0/24 maxlen: 24
104.238.12.0/24 maxlen: 24
104.238.13.0/24 maxlen: 24
104.239.8.0/24 maxlen: 24
104.239.12.0/24 maxlen: 24
104.239.14.0/24 maxlen: 24
104.239.29.0/24 maxlen: 24
104.239.54.0/24 maxlen: 24
104.239.55.0/24 maxlen: 24
104.239.56.0/24 maxlen: 24
104.239.57.0/24 maxlen: 24
104.239.58.0/24 maxlen: 24
104.239.59.0/24 maxlen: 24
104.239.60.0/24 maxlen: 24
104.239.61.0/24 maxlen: 24
104.239.62.0/24 maxlen: 24
104.239.63.0/24 maxlen: 24
104.239.64.0/24 maxlen: 24
104.239.65.0/24 maxlen: 24
104.249.8.0/24 maxlen: 24
104.249.9.0/24 maxlen: 24
104.249.10.0/24 maxlen: 24
104.249.11.0/24 maxlen: 24
104.249.12.0/24 maxlen: 24
104.249.13.0/24 maxlen: 24
104.249.14.0/24 maxlen: 24
104.249.15.0/24 maxlen: 24
104.249.16.0/24 maxlen: 24
104.249.17.0/24 maxlen: 24
104.249.18.0/24 maxlen: 24
104.249.19.0/24 maxlen: 24
104.249.20.0/24 maxlen: 24
104.249.21.0/24 maxlen: 24
104.249.22.0/24 maxlen: 24
104.249.23.0/24 maxlen: 24
104.249.42.0/24 maxlen: 24
104.249.43.0/24 maxlen: 24
104.249.44.0/24 maxlen: 24
104.249.45.0/24 maxlen: 24
104.249.46.0/24 maxlen: 24
104.249.47.0/24 maxlen: 24
104.249.48.0/24 maxlen: 24
104.249.49.0/24 maxlen: 24
104.249.50.0/24 maxlen: 24
104.249.51.0/24 maxlen: 24
104.249.52.0/24 maxlen: 24
104.249.53.0/24 maxlen: 24
104.249.54.0/24 maxlen: 24
216.173.90.0/24 maxlen: 24
216.173.91.0/24 maxlen: 24
216.173.92.0/24 maxlen: 24
216.173.93.0/24 maxlen: 24
216.173.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 16:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:07:b7:0e:91:72:93:57:7d:b0:53:f3:c2:26:b1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Feb 27 15:30:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15465f78ff28715e773fef86d7796acb3aeb10d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:86:b0:81:74:40:a6:6b:b5:b4:6b:c0:37:
2b:42:7e:f2:f2:f7:f6:88:a0:72:0a:93:54:a7:84:
69:7b:55:e7:b6:1f:93:a9:18:ed:72:c1:03:ba:52:
53:a0:51:8b:69:b4:06:9a:78:51:f3:00:12:96:a0:
07:de:aa:d4:fb:93:a9:c2:72:f4:7e:b4:0e:bd:c7:
d6:d1:8e:61:53:a1:b0:c6:5d:1b:df:1a:55:3e:a7:
90:5f:af:10:5e:a4:06:d1:28:44:d1:e8:64:15:26:
81:24:44:ad:38:f7:4b:ae:6c:98:6b:e3:9f:e8:d2:
16:19:c1:d3:79:0b:3c:93:01:40:f9:f6:4b:6e:da:
b8:63:e5:c4:7f:15:b2:0c:9e:23:b7:f8:0b:27:c8:
46:f1:5c:b4:2f:0f:87:ca:ff:f4:c2:6b:b1:16:86:
ae:cd:df:94:50:b3:09:c1:4e:05:f9:bf:cc:8f:83:
7b:00:3e:7c:fb:62:70:61:c2:6c:da:0d:e7:5a:8e:
e8:59:e7:8d:8c:63:a6:b6:6d:e1:e1:44:ec:49:c1:
82:87:1d:83:fa:53:bb:08:13:ea:1a:cd:66:87:4c:
9c:ad:fc:05:16:55:43:7f:42:b6:d1:35:57:54:f4:
9e:1c:13:30:0e:2d:fc:c1:c1:64:74:54:9f:7d:7a:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:46:5F:78:FF:28:71:5E:77:3F:EF:86:D7:79:6A:CB:3A:EB:10:D0
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/FUZfeP8ocV53P--G13lqyzrrENA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.145.0-45.43.146.255
45.43.148.0/22
45.43.154.0/23
45.43.158.0-45.43.162.255
104.222.176.0/21
104.222.189.0/24
104.233.8.0/23
104.233.59.0/24
104.238.6.0/24
104.238.11.0-104.238.13.255
104.239.8.0/24
104.239.12.0/24
104.239.14.0/24
104.239.29.0/24
104.239.54.0-104.239.65.255
104.249.8.0-104.249.23.255
104.249.42.0-104.249.54.255
216.173.90.0-216.173.93.255
216.173.95.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:bc:f0:87:96:2b:23:e5:6b:80:22:63:f9:e2:87:6e:2f:ff:
f3:24:86:95:68:f7:7c:7e:18:69:94:99:f7:bc:6e:d9:bb:a5:
95:bf:ac:e0:ed:c0:5b:d3:ec:28:ad:40:0e:cb:1b:8d:81:d1:
d9:e1:b8:3a:f5:7b:f1:81:17:af:6f:2a:fc:e7:db:0d:e6:a4:
ce:29:64:12:21:e2:26:84:a8:69:b9:83:29:b1:14:c9:5b:fb:
61:f9:d3:bc:24:15:10:ca:d0:bc:6f:91:ad:a7:09:e8:8d:e0:
6e:ff:53:da:a9:ff:e2:36:c1:43:73:a4:71:01:36:6a:78:ff:
2c:a1:81:12:37:b7:97:49:bb:8d:9a:d1:29:a7:61:bf:99:46:
cb:52:5d:55:37:cc:90:ec:bc:b5:ad:59:55:99:1c:c7:51:c5:
20:cc:9c:3a:0f:fb:da:2d:42:33:7c:0a:dc:92:0c:f1:60:9e:
07:4d:8f:b1:34:fa:99:a7:38:dc:d2:56:3b:dc:97:5b:23:af:
35:ef:4d:dc:09:3e:9c:c5:2f:5b:2d:d9:2f:af:f4:19:59:28:
e7:fe:fd:dd:e7:f0:f4:9c:cb:38:df:64:7c:e0:f0:50:84:74:
55:2b:e8:82:42:3c:5f:b8:35:36:bd:1f:94:ef:4d:2b:69:15:
7e:19:c0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:45:52 2025 by rpki-client