Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/1tmZfPhdPWTHdQP4xAfdV4rYg94.roa
File: 1tmZfPhdPWTHdQP4xAfdV4rYg94.roa (raw, json)
Hash identifier: s0Hqct09noPsWDIAPRibw/FkD7H+kLsuJcKrgQxjOYI=
Subject key identifier: D6:D9:99:7C:F8:5D:3D:64:C7:75:03:F8:C4:07:DD:57:8A:D8:83:DE
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019290E667EFAE61F796E4DF300E40F01545
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/1tmZfPhdPWTHdQP4xAfdV4rYg94.roa
Signing time: Tue 15 Oct 2024 15:57:51 +0000
ROA not before: Tue 15 Oct 2024 15:57:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd00::/29 maxlen: 48
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 15 Oct 2024 17:12:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:e6:67:ef:ae:61:f7:96:e4:df:30:0e:40:f0:15:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 15 15:57:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6d9997cf85d3d64c77503f8c407dd578ad883de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:f0:4e:ee:62:60:ab:76:ba:72:9f:32:51:
eb:1f:31:08:4c:26:87:c4:3b:e8:80:92:53:ea:dd:
7a:c4:80:90:ff:ae:64:02:28:2f:08:df:9a:dc:e3:
4b:c5:d1:3d:f2:4f:07:6a:e0:26:c1:67:cc:e5:56:
6d:87:66:11:21:a6:51:20:8b:90:3b:27:e2:c0:a1:
8b:47:f2:90:88:79:de:05:3e:94:92:9d:56:9b:12:
c8:cb:99:ec:66:ff:4f:0e:d6:b2:00:7c:2c:e7:26:
0d:1b:97:27:23:e0:42:d7:72:1c:86:66:42:e7:4b:
e7:dc:cd:44:5f:f6:9e:24:d6:64:98:cb:dc:d4:aa:
98:c2:d8:c0:f2:fe:f5:59:b0:7a:d1:58:56:0a:d7:
cc:20:1a:be:d4:f1:cf:14:70:46:89:27:bb:e2:55:
37:26:e7:7c:13:5d:25:12:38:5b:5e:e2:46:17:e9:
d4:02:c1:fc:51:2d:c8:57:ed:f9:1b:15:b2:f7:ee:
50:25:70:65:72:0d:4c:bb:30:be:99:50:40:c1:90:
64:5b:1f:35:59:cf:e8:bd:c7:ae:be:c0:19:fa:fb:
37:00:eb:da:5a:9a:a3:80:b4:96:f8:a6:56:c5:97:
4a:68:56:59:fe:f3:a5:c3:0d:21:ee:2e:37:d6:a9:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D9:99:7C:F8:5D:3D:64:C7:75:03:F8:C4:07:DD:57:8A:D8:83:DE
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/1tmZfPhdPWTHdQP4xAfdV4rYg94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
66:ce:2a:22:8b:26:6d:60:65:e5:1e:c4:58:52:c6:e0:9d:05:
8f:fa:8c:c8:e9:f7:e6:1e:8a:03:d0:f2:2c:11:0b:d6:62:ab:
9a:cb:41:e2:18:50:e0:c3:73:07:54:62:06:1c:fd:4c:51:60:
07:17:47:12:dc:0d:d7:3b:50:a9:b7:e8:52:54:47:fd:1a:dc:
a6:c1:8b:18:60:0c:cd:3e:f4:86:56:8e:ed:ac:1e:e3:c2:02:
4d:77:f0:b9:28:83:17:48:d2:da:4a:b0:51:77:92:13:e5:40:
91:bf:61:4e:95:38:68:62:3c:88:d6:88:14:e8:68:a8:cc:6d:
1c:44:35:09:9c:6f:2d:e2:56:e0:d5:34:04:b4:d2:64:ee:5b:
7a:69:69:25:96:39:f9:53:58:c4:5d:d7:c7:65:02:74:60:7e:
09:87:bc:75:0e:60:f4:da:dc:c4:46:41:36:37:22:4e:f6:f9:
b5:58:51:23:7b:6d:53:8f:47:81:13:b8:63:8b:b3:a9:6d:6f:
59:a6:16:f8:58:3c:9e:5a:73:f7:9e:74:27:08:1f:d7:f0:1a:
c1:2f:b8:bf:ca:3a:32:f7:b4:c2:d1:ff:2d:90:79:ff:3c:6d:
21:7e:1f:a7:b6:d9:8d:6d:3f:a4:b4:bb:77:29:55:84:b9:41:
f9:4b:af:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:03:04 2025 by rpki-client