Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/cxZg42QnO64mkCE94_G9gTzuIzc.roa
File: cxZg42QnO64mkCE94_G9gTzuIzc.roa (raw, json)
Hash identifier: aBnjJ1s6+gfG/7plZKf8DZKeUF/cafMukXmmXg1+EDE=
Subject key identifier: 73:16:60:E3:64:27:3B:AE:26:90:21:3D:E3:F1:BD:81:3C:EE:23:37
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01961ADC10DCC8207A579A13752FF35FFC31
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/cxZg42QnO64mkCE94_G9gTzuIzc.roa
Signing time: Wed 09 Apr 2025 14:02:31 +0000
ROA not before: Wed 09 Apr 2025 14:02:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.65.113.0/24 maxlen: 24
45.154.159.0/24 maxlen: 24
188.209.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:dc:10:dc:c8:20:7a:57:9a:13:75:2f:f3:5f:fc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Apr 9 14:02:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=731660e364273bae2690213de3f1bd813cee2337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:f2:00:20:42:bc:9b:b0:a8:4b:39:df:99:
dc:32:e1:24:0b:af:8f:37:9e:d4:03:41:45:5b:45:
f5:5b:f5:93:86:96:d4:c9:7f:3e:f0:5f:c8:75:c2:
6e:09:1e:bf:65:71:14:da:ec:66:42:84:61:8d:22:
79:31:5a:00:16:95:d5:d8:85:70:63:4b:dd:31:94:
68:c6:80:0f:13:68:b4:29:b1:9c:f7:e5:b5:0a:d2:
8f:8c:8c:ae:be:6f:5a:76:a4:3a:e5:b2:4e:ce:fa:
d9:52:cf:17:69:bf:06:91:b0:a5:85:27:dd:cb:2d:
df:94:0a:79:af:61:d3:28:9d:42:af:be:68:bb:0e:
f0:f0:40:6b:87:05:4a:c8:ba:cf:c3:12:9e:0e:ff:
72:96:1f:47:63:8f:44:50:3a:2c:45:a9:54:33:ff:
cf:7a:ed:9d:f3:04:72:05:e5:6e:3d:da:20:9f:39:
aa:89:f8:82:0c:68:e2:5f:cc:67:f5:d4:94:00:fb:
62:7a:9a:cc:9b:dc:78:d0:42:5d:c7:17:05:65:94:
29:e3:75:77:f7:32:11:f7:c5:31:12:54:f5:2a:4f:
75:ca:7a:b8:98:bf:13:c2:4f:1f:07:8a:46:f4:20:
f8:ee:db:6c:d0:0d:d3:99:4a:18:ed:0e:fd:49:29:
e3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:16:60:E3:64:27:3B:AE:26:90:21:3D:E3:F1:BD:81:3C:EE:23:37
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/cxZg42QnO64mkCE94_G9gTzuIzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
45.154.159.0/24
188.209.131.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:55:88:f2:2e:4c:5b:a5:87:5f:eb:0e:e1:0c:8a:52:71:e2:
ea:a1:79:a9:4d:ca:8b:1f:e0:98:2f:25:62:fe:18:e2:54:d6:
41:0f:00:16:5b:d9:b8:e9:c1:c1:04:84:0f:c8:99:48:98:e6:
2a:cd:b4:37:0c:ab:bd:4d:ad:02:d7:2d:4d:52:6f:3b:6b:c2:
58:ac:d5:53:91:0b:44:51:45:5a:eb:3a:d6:85:57:39:6c:2b:
fb:78:e0:84:8d:0c:2c:a2:68:d3:89:cb:f8:7f:a5:33:cb:c9:
84:f0:77:1c:5f:43:4d:af:8c:ff:75:57:96:bb:d2:32:dc:90:
75:12:90:d1:9a:58:6d:b9:29:4d:52:c1:8c:9b:20:1c:91:e2:
e2:85:17:d2:49:20:86:de:3e:fc:cc:cc:01:6c:a4:10:de:fd:
a2:2c:af:3c:6b:be:18:fb:6c:88:e2:53:84:b5:88:cd:56:58:
42:c2:8a:c3:54:4f:3e:2f:35:6b:9b:0f:f3:b9:83:55:0f:fe:
8f:2d:13:e8:b8:9c:18:1b:1c:20:57:69:79:12:0e:57:99:4a:
dc:92:0d:09:7c:1d:68:43:a3:1f:9f:89:5d:de:72:47:b6:07:
2f:3e:1e:96:31:18:94:ff:5b:0c:36:fd:ed:8e:06:ba:cc:c5:
19:e8:61:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:41:07 2025 by rpki-client