Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/_bsoUYdcAgy9wzxSNsL8cGdKqZc.roa
File: _bsoUYdcAgy9wzxSNsL8cGdKqZc.roa (raw, json)
Hash identifier: JZ3jjMWnD0pHoOTcn0pvqnGeYgsUsigj3ccAFFLLfZQ=
Subject key identifier: FD:BB:28:51:87:5C:02:0C:BD:C3:3C:52:36:C2:FC:70:67:4A:A9:97
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 01944F63A9592A9458188A494A3272DE8355
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/_bsoUYdcAgy9wzxSNsL8cGdKqZc.roa
Signing time: Fri 10 Jan 2025 08:45:18 +0000
ROA not before: Fri 10 Jan 2025 08:45:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214089
IP address blocks: 45.94.100.0/22 maxlen: 22
45.94.100.0/24 maxlen: 24
193.178.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 13 Jan 2025 03:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:63:a9:59:2a:94:58:18:8a:49:4a:32:72:de:83:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Jan 10 08:45:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdbb2851875c020cbdc33c5236c2fc70674aa997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:4d:95:c7:d2:be:39:72:0d:58:78:0f:e6:
fd:f8:09:de:86:30:7f:b1:a8:72:0a:8f:a7:79:b5:
b6:b1:81:91:46:08:80:6d:93:bc:d2:f1:e1:ab:aa:
3f:2b:bd:ce:46:de:94:e7:da:99:5c:e7:76:a2:7e:
01:56:37:4b:5e:95:cb:dc:33:6c:78:3e:02:32:65:
7d:af:46:c5:a9:03:ac:39:e0:ac:f3:22:c5:31:c5:
75:29:12:46:05:d6:60:6d:db:e5:e8:45:4c:25:28:
82:4f:a9:d5:97:17:ac:14:08:e6:78:64:f6:db:c4:
0d:46:0b:eb:b3:ee:23:4e:49:ea:49:95:68:3a:7e:
03:71:fb:ea:01:b6:99:36:cb:2d:10:ca:43:18:da:
a5:e1:27:a9:c6:fc:22:ab:47:71:14:dd:e3:9a:b6:
3c:13:30:d5:27:d9:1b:3e:97:c4:61:80:37:d1:55:
1d:4f:d0:01:62:9b:02:a0:da:d7:53:35:5b:a4:c5:
25:bd:b8:b7:87:68:bd:53:de:72:6d:7b:50:a9:41:
2f:a1:c0:64:76:2a:a0:f1:1b:82:49:ca:1c:54:54:
aa:41:6e:92:9f:ac:9d:cd:75:53:25:21:11:37:0f:
85:37:88:77:e9:9f:5f:6f:2c:c7:02:0c:0a:d6:0e:
1a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BB:28:51:87:5C:02:0C:BD:C3:3C:52:36:C2:FC:70:67:4A:A9:97
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/_bsoUYdcAgy9wzxSNsL8cGdKqZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.100.0/22
193.178.44.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:b6:c9:cd:b3:56:c4:ca:0e:8c:44:99:8e:3e:0c:e7:16:e8:
1d:ed:cc:db:87:fc:0e:02:29:b1:57:37:61:eb:34:90:ba:f5:
ee:25:34:fe:b9:ec:c7:09:02:34:c7:e3:59:26:4c:8e:a2:ed:
83:04:ec:2a:97:38:d5:90:39:5a:f9:2e:6d:e5:12:a5:71:1d:
f2:28:c1:a3:16:73:25:67:d0:3f:2c:a6:60:24:0b:9c:a3:31:
a2:7a:01:ab:98:a1:1f:a7:b3:1f:9d:06:1e:29:f1:be:c6:fa:
b5:1c:94:85:a7:1f:a5:5c:da:a1:a9:96:2e:7c:ff:d3:e5:dd:
24:c2:89:c0:37:fc:ae:4c:76:af:33:2c:a0:32:10:22:39:d5:
e0:36:bd:99:9c:66:d3:18:36:54:f4:13:be:b3:26:c1:54:00:
aa:7a:63:c8:fd:b5:d0:74:52:5e:ec:de:32:84:f6:f4:d2:60:
65:3c:c7:c7:80:89:9a:6d:10:a1:f8:b2:ef:6b:db:88:af:0a:
f5:56:b3:a2:11:66:2e:e7:48:03:50:d6:cc:89:84:5e:d2:84:
0e:6e:86:62:ea:d1:7d:54:e4:b4:de:ac:d0:b9:43:27:f5:d4:
62:da:a2:0e:86:1a:46:c0:fe:e2:14:4d:7e:80:1b:6c:52:48:
4a:42:f4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:18:52 2025 by rpki-client