Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/TYvFFAXhC5e-CwqbxAjbKqIuYg4.roa
File: TYvFFAXhC5e-CwqbxAjbKqIuYg4.roa (raw, json)
Hash identifier: yPBgzx2m3VSPpqUXR8c4rFEK7riTwRQ7s+VbLg5K0Zg=
Subject key identifier: 4D:8B:C5:14:05:E1:0B:97:BE:0B:0A:9B:C4:08:DB:2A:A2:2E:62:0E
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 018CC80108707B6ED37341D9565503708CBF
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/TYvFFAXhC5e-CwqbxAjbKqIuYg4.roa
Signing time: Tue 02 Jan 2024 02:29:20 +0000
ROA not before: Tue 02 Jan 2024 02:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44076
IP address blocks: 45.141.72.0/22 maxlen: 24
192.214.160.0/19 maxlen: 24
45.129.40.0/21 maxlen: 24
45.135.244.0/22 maxlen: 24
45.137.172.0/22 maxlen: 24
193.148.160.0/19 maxlen: 24
45.142.4.0/22 maxlen: 24
193.19.129.0/24 maxlen: 24
193.19.130.0/24 maxlen: 24
188.34.64.0/18 maxlen: 24
213.17.0.0/18 maxlen: 24
2a05:b540::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:08:70:7b:6e:d3:73:41:d9:56:55:03:70:8c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d8bc51405e10b97be0b0a9bc408db2aa22e620e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:eb:2a:b6:78:40:55:29:7d:8e:75:6a:08:
f8:9e:74:2b:f6:92:db:f7:1d:f8:94:44:ca:53:d4:
55:97:95:77:61:bf:06:55:9b:d8:b2:27:fa:25:11:
d7:36:7b:e5:de:bf:29:ff:08:78:f5:cb:c3:16:9c:
2f:81:a6:ea:e7:2b:d4:15:65:d6:5c:f7:6b:2c:a4:
32:9f:2c:2c:39:04:29:81:3f:db:e5:65:7e:7f:e0:
d9:6b:01:b1:bb:ec:6f:ab:8c:b5:33:d7:6e:90:1e:
cd:ec:00:02:dc:04:f9:ae:22:44:4f:d3:8b:a7:78:
dc:7a:90:5d:07:2e:61:51:79:6a:44:32:b8:f5:dd:
ed:f5:74:f2:7b:1f:e7:2f:3e:6e:76:bb:7d:54:6f:
4c:06:56:a8:8a:ea:fa:99:7a:06:27:63:eb:4b:e2:
e6:74:2d:76:17:71:e1:f9:e7:76:f6:dd:62:59:67:
2d:51:64:55:fe:93:ae:e9:e5:2b:21:d2:81:e8:66:
f9:b2:b2:ab:87:29:81:1a:50:e3:32:00:8a:0f:8e:
4c:18:2c:26:2f:89:2f:28:7e:78:da:ce:58:ff:3f:
ac:b1:41:36:07:8a:51:e2:e0:f8:a1:c7:d4:86:a8:
a9:83:2d:29:44:91:86:51:e6:64:90:8b:52:41:fd:
0b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8B:C5:14:05:E1:0B:97:BE:0B:0A:9B:C4:08:DB:2A:A2:2E:62:0E
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/TYvFFAXhC5e-CwqbxAjbKqIuYg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.40.0/21
45.135.244.0/22
45.137.172.0/22
45.141.72.0/22
45.142.4.0/22
188.34.64.0/18
192.214.160.0/19
193.19.129.0-193.19.130.255
193.148.160.0/19
213.17.0.0/18
IPv6:
2a05:b540::/29
Signature Algorithm: sha256WithRSAEncryption
2d:fa:c9:79:e4:0b:18:8c:ef:89:a9:c6:0e:77:92:2c:c0:9c:
40:7b:b4:74:0c:9e:eb:22:1f:88:8a:dd:f8:c4:0c:11:67:39:
de:37:75:b7:f0:85:d5:96:7b:d2:0e:f1:d7:85:95:67:7d:8b:
f8:cc:74:2c:84:36:fc:32:4f:a0:8d:b1:ed:5c:c9:8d:78:1d:
e3:14:10:57:21:49:55:1b:de:2e:fe:0e:dd:83:e4:ce:ec:a9:
dc:e9:9c:cb:4c:26:bd:48:f4:0c:6d:dc:a3:01:02:e0:b2:77:
bc:4e:09:ef:ef:78:70:d7:ee:06:c8:0b:f5:f7:d3:72:86:98:
23:f6:0c:4d:66:17:e2:c9:58:ad:74:dd:3d:6d:9f:08:2b:18:
fd:b4:e4:64:18:49:7e:71:f0:67:ca:51:7a:e5:f0:28:a9:7d:
fd:d6:e7:43:0e:eb:75:64:d7:7e:26:a3:06:b8:8c:e8:e7:13:
d7:fb:7b:e3:a9:1a:d2:01:50:72:34:d5:b6:06:41:52:e5:ad:
7e:50:25:10:5d:91:c9:bc:d8:2d:4d:4c:a8:10:c1:a6:0e:ce:
33:30:d4:81:ce:75:59:4b:d7:da:bf:03:95:26:c8:aa:a9:62:
45:2a:45:ac:1a:d7:a3:2a:f8:b7:37:93:8b:88:f8:4d:b7:f3:
63:ca:e2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:31:11 2025 by rpki-client