Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/QsH_PaivXCDzuZ7DaTOireC18xk.roa
File: QsH_PaivXCDzuZ7DaTOireC18xk.roa (raw, json)
Hash identifier: B5/MBYrj6dK1XJPUxHDzDhNQlm2vcgQjtt97asmoI3M=
Subject key identifier: 42:C1:FF:3D:A8:AF:5C:20:F3:B9:9E:C3:69:33:A2:AD:E0:B5:F3:19
Certificate issuer: /CN=e8564a4b5fef4444477df0da5b19924d52d10094
Certificate serial: 018CC94E2277004B6669409B8807F0A53C34
Authority key identifier: E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/QsH_PaivXCDzuZ7DaTOireC18xk.roa
Signing time: Tue 02 Jan 2024 08:33:10 +0000
ROA not before: Tue 02 Jan 2024 08:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47373
IP address blocks: 45.134.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:22:77:00:4b:66:69:40:9b:88:07:f0:a5:3c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8564a4b5fef4444477df0da5b19924d52d10094
Validity
Not Before: Jan 2 08:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42c1ff3da8af5c20f3b99ec36933a2ade0b5f319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:52:be:f7:da:6a:79:a9:fc:f5:e7:c6:a5:ca:
a4:07:4c:3f:0d:69:4d:8b:79:ce:0d:72:01:ab:d3:
42:f3:31:28:27:57:d9:e3:0a:ec:63:2b:fb:b8:15:
2f:6d:f5:15:4a:9f:4d:37:52:54:70:7f:7f:69:f1:
6f:35:02:3b:05:98:d8:8f:87:39:05:63:13:b6:8d:
b9:b2:43:cb:18:87:e2:31:3b:55:a1:e7:21:8e:73:
f8:a5:b2:46:d5:63:27:45:25:07:f5:74:62:49:9b:
83:2a:37:1e:dc:00:45:30:61:49:11:ce:13:77:3c:
f2:f2:51:c2:47:e2:3b:2f:d5:12:8e:82:17:6f:39:
cc:d6:bf:b4:9f:40:39:e3:2a:1c:4e:ff:5c:3b:bd:
c5:87:54:b3:39:31:15:fa:da:39:75:2a:61:e6:ae:
4a:46:7d:12:5e:1f:8f:3b:dd:aa:5d:a7:5b:23:64:
da:c4:b2:5a:6f:b8:0b:4c:f0:88:33:78:34:c1:1d:
cd:20:8d:52:3e:52:08:36:11:7e:da:51:c6:42:85:
1e:5b:bf:e1:7c:5d:48:d7:89:d0:60:d4:e8:b1:02:
b4:b4:92:11:90:b6:72:b2:e1:20:4e:ef:2f:f9:09:
49:7e:cf:48:ba:6a:1b:db:3a:5e:08:61:f4:c6:73:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C1:FF:3D:A8:AF:5C:20:F3:B9:9E:C3:69:33:A2:AD:E0:B5:F3:19
X509v3 Authority Key Identifier:
keyid:E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/QsH_PaivXCDzuZ7DaTOireC18xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.244.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:27:02:21:95:3e:5b:1f:46:6f:c2:c1:18:18:ef:8d:48:ed:
45:e7:62:64:46:53:5c:3e:3d:e0:c4:f2:ca:67:e4:31:cb:4f:
31:18:43:f6:b9:8c:a0:b0:c9:47:40:9e:b1:ba:5e:87:ec:3a:
96:46:0f:65:0e:98:08:ec:91:82:7e:6d:94:66:49:88:19:ef:
a3:25:c1:3a:d8:74:f7:f1:df:55:0b:15:aa:6d:13:dc:ae:35:
a4:39:b4:d7:1b:e3:b9:72:43:ef:cd:f4:e2:92:71:11:ea:e1:
01:ae:5d:df:99:7f:29:73:67:1a:3b:26:67:1e:43:b4:5c:9e:
14:e9:71:1b:42:1e:f1:ef:ea:75:cf:0c:d2:87:3b:ce:27:f5:
c2:e9:5e:8d:66:75:9f:d7:52:4d:74:ba:31:de:e5:07:81:a2:
eb:a9:33:35:b5:80:6d:93:d9:a6:55:37:0d:91:99:65:3f:12:
33:61:65:16:d3:3c:47:af:2d:e3:c6:c9:27:ef:fb:c4:13:f4:
ca:29:42:ac:8c:ca:fb:c0:00:66:4c:80:4b:27:94:e8:81:22:
78:9a:02:a9:ec:42:a9:46:a5:4f:35:a4:5d:56:49:eb:cc:ad:
0d:b6:c7:0c:ef:05:e7:61:28:90:b2:68:f0:8d:ed:90:fc:37:
81:e1:77:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:48 2025 by rpki-client