Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/aHZbEQpjkqmZxh6SIUbqbyhefXw.roa
File: aHZbEQpjkqmZxh6SIUbqbyhefXw.roa (raw, json)
Hash identifier: CebWxjaZ5eGoXF++xFW+9I4YzTiZp7U6gyYf3DeiZ7A=
Subject key identifier: 68:76:5B:11:0A:63:92:A9:99:C6:1E:92:21:46:EA:6F:28:5E:7D:7C
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019290A1BD982EF7F9A1DDA2135D70A44DEC
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/aHZbEQpjkqmZxh6SIUbqbyhefXw.roa
Signing time: Tue 15 Oct 2024 14:42:51 +0000
ROA not before: Tue 15 Oct 2024 14:42:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 15 Oct 2024 15:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:a1:bd:98:2e:f7:f9:a1:dd:a2:13:5d:70:a4:4d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 15 14:42:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68765b110a6392a999c61e922146ea6f285e7d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:1e:62:91:cd:ce:d7:63:f1:8a:09:48:1f:
a5:32:a0:e4:5c:7b:c4:7d:01:c0:6d:60:1e:af:b5:
47:ae:b5:09:85:0b:c4:21:39:24:77:7c:c0:1b:7e:
0f:3e:6a:6c:c2:01:9a:70:e6:33:91:c7:2d:0e:10:
a8:35:d6:2e:27:28:8f:60:24:ae:cc:86:13:ce:71:
1a:2e:2f:80:0e:27:56:34:0d:2c:ea:23:70:06:77:
82:30:bd:61:78:94:4a:b8:02:39:95:7d:b6:32:91:
c3:96:cc:9b:85:f2:42:2c:4a:e6:42:4e:07:76:56:
b2:b4:66:73:d3:b9:b1:52:1c:fc:95:31:3f:62:01:
80:36:2f:53:fa:a0:41:36:e8:ad:9f:3d:59:2d:13:
20:89:b5:c9:74:0c:f0:48:76:76:4f:0c:46:41:a3:
97:1f:e6:45:22:54:cf:7e:72:f9:2d:37:fc:e0:e4:
78:16:fa:1d:d7:55:30:5e:81:f2:27:17:29:c5:f0:
22:21:9e:2c:85:c9:c5:0f:c6:80:1b:92:05:32:57:
c9:4a:f8:5a:41:15:3c:e2:77:45:0d:fc:71:01:4b:
ad:6b:f9:f3:33:0c:28:68:10:15:ec:1b:59:52:68:
c5:07:4d:6b:83:20:b8:e1:fa:9d:fb:c2:a4:54:f0:
5e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:76:5B:11:0A:63:92:A9:99:C6:1E:92:21:46:EA:6F:28:5E:7D:7C
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/aHZbEQpjkqmZxh6SIUbqbyhefXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd03::/32
Signature Algorithm: sha256WithRSAEncryption
50:9b:93:cc:b9:6a:fb:43:4a:14:86:be:29:de:41:5c:94:e1:
cb:14:09:6a:50:6d:71:5f:0c:27:aa:f5:7c:63:2a:b2:ca:69:
bb:11:9b:1b:a6:c9:8d:07:30:61:36:1e:78:19:02:16:4a:c7:
5a:53:3a:0a:69:29:ad:cd:3b:90:04:ea:35:7e:d5:eb:f5:57:
82:3e:d0:fe:a2:31:39:a9:14:d4:0e:93:a8:fd:df:1f:f2:39:
e0:63:8b:7a:13:ec:41:3d:ee:ee:94:5c:d1:c1:fd:1e:1e:bc:
19:cf:ca:5a:d1:d3:93:56:4a:60:24:17:7d:dc:ef:60:43:f2:
fd:82:c0:41:6a:56:3e:8c:d8:78:80:38:74:e4:47:9b:8b:f5:
f9:71:d7:ed:3c:7b:78:52:f3:7c:31:8f:3d:13:bc:37:ea:13:
75:c2:bf:98:ae:f9:78:be:ae:3f:96:12:5b:89:1c:18:4d:a7:
24:a4:94:96:5b:14:72:95:0d:b4:24:ee:0f:8e:5c:b6:74:99:
8a:4f:29:d7:d3:a9:c3:e4:64:96:15:1d:87:3a:ac:5a:c1:ff:
cf:fa:43:7f:71:6d:6d:a9:c4:b3:92:d4:d1:ad:7e:65:6f:60:
c8:4e:f0:47:d6:0e:91:a3:ac:58:27:6b:bb:f4:9d:46:91:87:
a7:dc:63:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:34:31 2025 by rpki-client