Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/CXDKi0KO69CV-MtU7heu7kzWWJU.roa
File: CXDKi0KO69CV-MtU7heu7kzWWJU.roa (raw, json)
Hash identifier: 0ANJ5MQ19WJpSZ39Fn2TVYVeOoxF1ZCb7JBX/LZ7W0U=
Subject key identifier: 09:70:CA:8B:42:8E:EB:D0:95:F8:CB:54:EE:17:AE:EE:4C:D6:58:95
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 0191C19DFE44CA0CFC02D01130DBE5F095C6
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/CXDKi0KO69CV-MtU7heu7kzWWJU.roa
Signing time: Thu 05 Sep 2024 09:57:22 +0000
ROA not before: Thu 05 Sep 2024 09:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.11.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 09:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:9d:fe:44:ca:0c:fc:02:d0:11:30:db:e5:f0:95:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: Sep 5 09:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0970ca8b428eebd095f8cb54ee17aeee4cd65895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:c1:ba:5d:1b:f9:b1:18:81:68:27:ee:e3:
6b:8c:aa:33:e8:8c:6b:63:bc:ce:01:35:0c:e4:d5:
6e:fd:81:3a:51:eb:77:0b:0c:03:ef:b1:57:6b:2d:
5a:ee:6e:f9:89:08:6d:13:c0:ad:db:18:8c:e9:8d:
f0:39:f9:2b:bc:cc:a4:0a:69:01:3e:b3:91:3d:58:
71:e4:a9:35:30:7b:a9:f3:f7:45:04:b8:51:e6:4d:
29:4d:b2:59:53:d2:fd:3d:4e:5c:75:bb:f8:78:ef:
7f:49:69:0e:c7:24:dd:68:96:55:eb:9f:07:31:6e:
1d:86:2f:2a:d4:b8:55:dd:ce:83:21:8f:12:dc:5e:
2e:9f:ae:58:b1:b5:1c:73:3e:3a:ac:36:15:d4:c8:
e5:68:82:d4:ba:12:d2:17:73:90:1d:27:6c:b2:f5:
8d:fc:89:8d:8e:06:3b:e3:bd:8a:a8:4d:df:a4:ee:
92:1e:e4:04:ec:4d:12:46:7a:2e:2a:b1:88:bf:d8:
17:e5:a2:d4:24:4f:20:6c:df:a8:91:16:c8:9d:32:
31:88:82:db:94:fe:b0:7e:1b:03:66:ba:23:f9:e8:
95:41:07:d5:0a:76:2c:f9:45:71:d7:56:0d:94:9c:
e5:d3:98:e5:5e:a2:f6:f1:34:a2:e0:c6:c5:3f:f5:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:70:CA:8B:42:8E:EB:D0:95:F8:CB:54:EE:17:AE:EE:4C:D6:58:95
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/CXDKi0KO69CV-MtU7heu7kzWWJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.175.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:6d:39:32:b3:b1:3e:ac:b8:60:31:0b:a2:10:d0:1a:52:91:
14:fa:64:ed:27:29:f9:e5:a3:02:08:6a:2c:4c:5c:ce:72:39:
53:88:55:56:b2:44:da:ba:1f:7e:69:84:68:9d:74:02:80:b5:
bc:05:71:0b:08:18:40:69:1e:fc:47:3a:c5:7d:5d:99:5a:c2:
ee:c2:d3:85:7d:ef:6a:42:7a:96:b6:66:fd:78:2e:e5:04:b6:
a8:ad:39:82:f6:c4:b3:3d:26:6d:70:f0:20:aa:13:2f:13:29:
a3:0a:3f:c2:6e:ee:6e:2c:49:31:c2:90:83:26:cd:14:7a:de:
53:5a:98:2f:c1:e6:5b:b7:61:9a:80:53:c6:6d:fb:64:74:9f:
00:cd:52:1a:4b:57:57:bd:e2:0d:b9:ea:c2:73:f5:6a:5e:3c:
5c:ba:d4:cb:56:e2:ac:37:2e:6b:95:f4:9f:55:79:21:59:f2:
8b:78:ef:fb:1e:cd:63:fa:ac:27:65:bc:61:88:84:6c:c7:da:
14:21:47:cf:45:42:85:ed:89:dd:92:be:da:70:f8:0f:de:7d:
96:f6:12:ae:13:82:9e:8c:71:74:37:90:4e:27:d0:f0:a9:c0:
c1:ae:a8:93:50:5b:45:8e:8a:96:2d:09:a1:ff:70:99:97:9d:
0f:eb:de:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:32:46 2025 by rpki-client