Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/TvyesZ-9InGqf8PMfo2_bA1Bb74.roa
File: TvyesZ-9InGqf8PMfo2_bA1Bb74.roa (raw, json)
Hash identifier: Yye5C4YYLaryrcfs0lfVY+3kNg/BELS+hH32nQVz3t0=
Subject key identifier: 4E:FC:9E:B1:9F:BD:22:71:AA:7F:C3:CC:7E:8D:BF:6C:0D:41:6F:BE
Certificate issuer: /CN=72df697430cbb57c49a0a1993024d6d329f7e565
Certificate serial: 018CC42544FF9FB33A7F6E7286B596001DD4
Authority key identifier: 72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/TvyesZ-9InGqf8PMfo2_bA1Bb74.roa
Signing time: Mon 01 Jan 2024 08:30:25 +0000
ROA not before: Mon 01 Jan 2024 08:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211222
IP address blocks: 45.95.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:44:ff:9f:b3:3a:7f:6e:72:86:b5:96:00:1d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72df697430cbb57c49a0a1993024d6d329f7e565
Validity
Not Before: Jan 1 08:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4efc9eb19fbd2271aa7fc3cc7e8dbf6c0d416fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:24:71:e3:62:67:b6:77:31:f4:d9:50:b6:59:
ca:d3:61:d4:d3:13:7a:2b:9e:23:76:fa:bf:f5:6a:
aa:ba:ef:0c:35:c8:97:5b:a9:b6:e7:cb:b3:a6:40:
e0:7a:75:94:97:a0:32:6c:a6:70:2d:4a:a7:70:8d:
9b:71:27:59:29:b9:37:54:19:3f:5e:df:fd:54:d6:
96:3e:2c:4c:da:83:d9:be:bc:26:47:9f:5b:9a:db:
55:74:ca:d4:1e:78:f7:3b:8d:f4:52:3e:5e:f4:8d:
23:d3:3f:35:9f:02:df:84:f3:d9:24:8e:27:9a:8a:
ed:4c:ec:51:94:c2:d3:d2:a2:05:8a:a2:a5:89:1d:
89:56:67:ee:b6:2b:18:63:a2:d3:4a:57:c8:12:20:
1b:95:84:9f:e0:c6:d6:51:47:79:dc:05:22:98:e7:
b8:b1:5d:d2:b0:5e:ea:37:f2:cd:62:a0:30:22:33:
0e:56:ef:4f:c5:6c:43:81:d8:8c:8a:ae:98:4f:12:
83:b5:ba:92:37:f2:f3:1c:3b:cd:a7:da:41:e9:68:
1f:9e:e4:70:ac:5a:48:ec:7a:26:7e:76:28:b4:d9:
58:dc:12:c8:ba:79:53:01:8e:40:28:c6:11:d2:7b:
38:0e:c5:f9:e3:45:b2:16:33:37:e9:ff:bf:fb:c0:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FC:9E:B1:9F:BD:22:71:AA:7F:C3:CC:7E:8D:BF:6C:0D:41:6F:BE
X509v3 Authority Key Identifier:
keyid:72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/TvyesZ-9InGqf8PMfo2_bA1Bb74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:53:de:5b:de:24:40:5d:85:ba:d2:45:b3:5e:04:c1:8f:31:
15:29:99:83:64:f5:c7:e7:7b:88:ab:41:b7:3d:68:4a:cf:43:
52:7d:a3:96:03:d2:d2:fd:70:ff:59:03:cd:77:6a:8b:2f:d4:
30:9f:d6:a9:dc:43:f7:86:a6:5f:fc:d0:cb:55:fe:52:49:f2:
c9:87:ed:c0:11:ab:e8:22:ff:07:3a:20:5a:c2:dc:8f:c2:4b:
10:13:f1:ef:2b:56:64:06:e7:0e:a6:ca:78:ad:97:ac:4f:4e:
42:ab:e0:a7:33:11:f1:8c:f3:6d:ab:bf:66:52:ae:a9:c1:d9:
1f:40:8c:69:d9:42:58:b8:0f:d5:d6:5f:31:fa:8f:e5:b6:06:
a8:a1:31:4d:09:06:9b:83:f7:28:4b:3d:bb:87:4e:eb:43:36:
83:c3:0a:13:6f:0a:0c:b9:51:9f:98:d7:2b:c0:d7:ae:ec:a7:
fd:11:1c:58:f1:76:62:c9:f0:e0:ae:a1:c2:f9:5b:a5:55:2a:
55:eb:ea:5a:d0:56:8c:42:86:4c:03:03:44:2f:88:84:df:86:
e4:f7:c9:3b:17:16:ce:ee:be:9a:bc:53:d7:a3:4c:c9:68:8b:
14:37:04:9f:f5:54:10:f1:1b:b7:dc:c2:ec:69:4e:58:75:76:
26:8d:2e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:20:41 2025 by rpki-client