Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/2nyC_5DWM2gRDp9k1XlMgzMnNlI.roa
File: 2nyC_5DWM2gRDp9k1XlMgzMnNlI.roa (raw, json)
Hash identifier: p+FysTvA+dyNdvS647FUXG7l4+eqTn8rWpmZPLxTQgQ=
Subject key identifier: DA:7C:82:FF:90:D6:33:68:11:0E:9F:64:D5:79:4C:83:33:27:36:52
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 01932C5CA7646B4D7E13E9CE413398BA5DAF
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/2nyC_5DWM2gRDp9k1XlMgzMnNlI.roa
Signing time: Thu 14 Nov 2024 20:28:09 +0000
ROA not before: Thu 14 Nov 2024 20:28:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 931
IP address blocks: 5.252.164.0/24 maxlen: 24
45.130.153.0/24 maxlen: 24
45.130.154.0/24 maxlen: 24
45.130.155.0/24 maxlen: 24
103.104.250.0/24 maxlen: 24
103.202.52.0/24 maxlen: 24
103.202.53.0/24 maxlen: 24
103.202.54.0/24 maxlen: 24
103.202.55.0/24 maxlen: 24
188.210.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 20:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2c:5c:a7:64:6b:4d:7e:13:e9:ce:41:33:98:ba:5d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Nov 14 20:28:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da7c82ff90d63368110e9f64d5794c8333273652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4d:73:46:cc:15:05:2c:24:40:be:59:50:d4:
50:89:17:62:a9:d3:96:11:02:19:c3:15:be:64:ca:
97:90:d3:6e:bd:b3:82:7c:5a:d5:4b:e1:e1:fe:43:
8d:ea:72:87:3c:b6:d0:e4:ab:d6:46:83:cb:66:d3:
79:d4:99:04:96:d1:15:e7:27:1c:d5:9f:5d:31:32:
8c:a0:00:fd:3e:f7:a2:0e:02:24:0a:38:cd:2a:c5:
41:55:0c:0f:12:de:bc:6d:2b:8a:fb:4b:5b:1d:ce:
c6:31:38:4c:1a:64:c8:6b:6d:c1:d6:e7:05:16:cb:
bf:9b:92:6e:50:ea:ff:44:38:45:0e:47:c5:07:4b:
c7:84:77:99:c9:6c:ff:c3:34:e6:dd:a0:a4:c6:71:
70:31:f8:21:fd:7b:8b:24:76:16:a6:54:f2:dc:50:
58:13:ed:f5:68:54:19:aa:e3:97:37:c1:50:f4:be:
da:b4:92:a5:52:59:c7:34:15:13:d3:34:d7:50:7a:
11:24:c2:af:7c:16:e3:c3:31:2b:8d:38:da:1c:5b:
21:4b:76:4e:81:d3:20:61:cd:c5:c2:96:33:8d:c8:
5e:e3:85:3b:d8:98:58:4b:2a:ea:73:08:c8:09:e6:
ee:53:d0:ec:40:f8:10:d5:c4:5b:57:a1:f6:17:e9:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7C:82:FF:90:D6:33:68:11:0E:9F:64:D5:79:4C:83:33:27:36:52
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/2nyC_5DWM2gRDp9k1XlMgzMnNlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.164.0/24
45.130.153.0-45.130.155.255
103.104.250.0/24
103.202.52.0/22
188.210.236.0/24
Signature Algorithm: sha256WithRSAEncryption
58:32:4c:3b:50:22:b0:04:93:cc:a5:86:1a:a3:9e:3a:b5:00:
92:60:5e:95:0c:08:e0:ba:84:c1:79:ae:1a:50:af:3c:5e:7b:
bd:88:48:32:29:2e:da:23:e4:fe:69:94:cc:10:e0:38:ea:03:
3c:b8:51:19:33:27:4b:34:02:c5:b5:15:7d:8e:8a:01:65:09:
f8:48:c6:b9:4b:4e:55:40:9e:82:5c:80:f6:fa:e9:4e:25:76:
db:40:f0:e7:52:f5:02:24:a5:48:99:64:2f:87:86:1a:d9:51:
9d:2b:58:89:de:4f:2f:ba:8b:78:51:a6:49:8a:bc:b5:76:49:
48:05:c2:1e:6c:db:1e:50:95:a1:4b:b8:e3:5c:62:ba:79:f1:
2b:f0:0c:36:d1:7a:2d:92:38:b0:d6:d3:8a:af:33:e2:77:6f:
18:f4:e0:5d:f1:a0:1e:71:3d:16:38:2a:a2:46:f5:f3:83:37:
0d:fc:db:60:00:85:98:ed:77:53:87:36:a2:35:3b:a7:53:ad:
c0:f3:9f:69:3e:e8:80:02:64:93:72:20:ed:3a:3e:96:e0:b0:
26:46:fc:52:f5:77:37:51:68:b4:80:37:b5:d3:7d:bc:08:33:
e2:6e:b8:d7:a3:66:1b:9d:da:20:15:22:0b:52:5f:40:59:66:
10:b3:59:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:28:23 2025 by rpki-client