Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/5Xlf58ilKe3wMMQwDJh8rF-0sEE.roa
File: 5Xlf58ilKe3wMMQwDJh8rF-0sEE.roa (raw, json)
Hash identifier: 5c54qG0Nht0nYHafPRt6RQr5ViHcuyTeR7G0zVymn2A=
Subject key identifier: E5:79:5F:E7:C8:A5:29:ED:F0:30:C4:30:0C:98:7C:AC:5F:B4:B0:41
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019570BC3EB8A48BD38B23C087B75EE33D7E
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/5Xlf58ilKe3wMMQwDJh8rF-0sEE.roa
Signing time: Fri 07 Mar 2025 13:12:19 +0000
ROA not before: Fri 07 Mar 2025 13:12:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.65.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Mar 2025 13:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:70:bc:3e:b8:a4:8b:d3:8b:23:c0:87:b7:5e:e3:3d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 7 13:12:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5795fe7c8a529edf030c4300c987cac5fb4b041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:f6:44:2c:a4:be:08:51:0b:5c:8d:f2:3e:
a4:ef:ad:49:29:a1:f0:34:df:83:12:40:b5:8d:4f:
2e:4e:4d:1c:28:fc:32:c3:9f:5d:e4:db:32:9e:7a:
24:04:90:7e:70:96:a4:38:17:bb:97:5d:19:68:e4:
4e:91:e1:9d:a8:76:f9:3c:ff:52:da:da:71:31:db:
8a:64:f5:88:54:1e:2d:39:02:af:32:a5:94:8a:67:
bb:47:3b:2c:c3:17:4f:6a:29:2e:ee:02:47:09:99:
b3:8d:13:6d:4b:3d:2c:bd:b9:d2:b5:bf:48:e8:6f:
3f:9f:11:8d:2e:32:d4:e0:1f:60:3e:ca:5d:c4:71:
e9:d5:a6:45:2e:18:f9:f9:ab:de:d2:79:29:a5:bf:
f6:be:2f:63:34:37:7a:73:5b:b7:6c:4c:ff:14:ea:
20:7e:aa:c8:38:fa:72:fa:52:6c:a5:03:57:59:f2:
6e:71:f7:bd:cd:30:86:0b:9f:e4:49:d9:e2:6d:d6:
37:02:69:6e:c2:8c:d6:6d:93:a5:eb:5e:d4:a3:52:
b9:29:6d:8c:2c:8c:f0:74:de:cf:33:31:87:ed:b6:
b9:bb:42:a0:9b:75:2f:8a:37:08:2b:04:37:da:85:
58:e0:f5:5d:c9:0e:d9:29:d2:3b:c8:19:94:b9:17:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:79:5F:E7:C8:A5:29:ED:F0:30:C4:30:0C:98:7C:AC:5F:B4:B0:41
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/5Xlf58ilKe3wMMQwDJh8rF-0sEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.114.0/24
Signature Algorithm: sha256WithRSAEncryption
91:bb:46:d8:a6:bc:05:fc:7c:bc:04:6f:1e:bb:83:b6:50:a4:
46:f8:25:9a:8d:00:e6:99:b1:ae:0e:4b:54:45:d7:30:67:97:
4a:55:70:b6:fc:71:d9:39:db:d5:f2:25:83:66:91:ee:8e:52:
23:88:b5:9a:cc:51:01:22:e3:cf:b0:27:60:d0:f2:35:2a:a1:
7a:7e:57:9d:0d:42:1b:19:ce:25:6e:98:22:6e:8d:8d:fd:43:
d9:36:12:15:ec:e0:c6:c1:c9:cf:31:d5:86:e5:04:42:e9:f1:
8e:83:13:db:6a:1f:4e:1e:f9:b4:14:d8:3b:9f:49:b0:c1:35:
ab:b4:96:87:6a:61:4f:b6:7f:be:f1:8c:1e:9c:c8:eb:d7:62:
8d:77:d9:67:96:eb:82:ed:9a:1a:a4:dc:26:ff:ab:4b:47:9b:
cc:e1:38:36:3d:2f:ff:59:32:18:2e:56:39:82:67:0b:44:f6:
9c:44:19:37:be:1a:b4:7d:c7:1c:7f:90:17:9a:b2:f0:66:af:
76:96:54:30:c0:75:58:38:1e:58:88:ef:6c:f1:ac:c7:50:cf:
21:f9:7b:30:3a:d4:35:78:ec:f5:4c:91:f1:3e:43:46:4d:b3:
4e:56:1f:1c:a0:f3:95:e9:f7:fb:71:53:4d:fc:bb:cf:4b:c4:
dd:b0:d5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:07:20 2025 by rpki-client