Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/gIDfEbb6uSeAmTtjbU1xR4lmVMM.roa
File: gIDfEbb6uSeAmTtjbU1xR4lmVMM.roa (raw, json)
Hash identifier: A9BE8ZLn/F786hzD0FqJyUC8ZL7gjzuQhxO8BTmKS1U=
Subject key identifier: 80:80:DF:11:B6:FA:B9:27:80:99:3B:63:6D:4D:71:47:89:66:54:C3
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019293D9B6ECA62EB14CCB201F73F1350497
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/gIDfEbb6uSeAmTtjbU1xR4lmVMM.roa
Signing time: Wed 16 Oct 2024 05:42:51 +0000
ROA not before: Wed 16 Oct 2024 05:42:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Oct 2024 06:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:93:d9:b6:ec:a6:2e:b1:4c:cb:20:1f:73:f1:35:04:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 16 05:42:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8080df11b6fab92780993b636d4d7147896654c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:59:6f:ca:ec:7d:d3:e6:bb:20:fd:be:d0:
f1:a2:79:fd:dc:75:9f:62:32:a0:30:82:94:bd:38:
35:78:62:b5:e7:50:79:f1:d2:77:81:c1:2d:6e:33:
34:01:15:f2:d8:cd:bc:c3:38:4b:87:18:5a:6f:28:
87:66:22:64:38:e8:a1:f0:cb:f3:61:6c:96:19:62:
94:74:9b:a6:af:b9:5f:5c:b9:4a:88:47:5b:00:42:
b0:9b:cd:12:0d:70:35:62:01:a1:c8:0c:f2:06:58:
f0:27:45:c1:04:47:db:6c:9e:5a:ef:9f:aa:3f:32:
38:3e:3a:a9:b2:ab:e1:94:bb:cc:91:88:71:fe:20:
98:52:95:72:8f:77:3f:f4:63:5c:0c:1a:5b:81:3e:
7d:f6:86:20:51:0d:07:f5:a5:7e:0d:7d:a7:6e:e9:
68:c3:25:57:4b:08:2b:ae:02:dc:a9:d9:c4:b0:9e:
41:09:c4:d3:d9:d3:49:b7:e6:53:d3:3e:2d:a4:b7:
d2:1c:68:04:bf:32:60:9f:e0:cb:f6:34:cf:0a:08:
40:fd:1d:12:0f:9c:6a:df:aa:36:09:65:cb:56:87:
ce:90:42:c0:05:b0:af:6e:ad:ed:c9:ef:75:41:d7:
91:e2:15:53:f2:75:b1:1c:20:6b:f9:d8:e7:c4:90:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:80:DF:11:B6:FA:B9:27:80:99:3B:63:6D:4D:71:47:89:66:54:C3
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/gIDfEbb6uSeAmTtjbU1xR4lmVMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd03::/32
Signature Algorithm: sha256WithRSAEncryption
38:9b:32:49:c1:46:9b:0f:f5:2a:52:ec:0c:d7:05:2f:6e:00:
0d:91:6b:a6:29:f6:de:c4:05:26:b5:1f:36:35:4e:4c:41:4f:
93:48:99:c8:3e:d1:3f:29:94:2d:22:0e:b6:c5:2e:ef:3e:c6:
86:ac:8b:f1:8b:63:18:60:8f:c5:46:b7:53:58:e4:35:53:4f:
95:84:37:f4:77:96:95:12:f5:f2:17:2f:55:a3:9f:1d:db:3d:
0a:59:d9:52:c0:bd:76:d4:a3:c3:c0:40:92:76:c8:4e:72:c7:
63:ab:19:c1:d8:9f:6c:27:ed:22:03:9a:a0:df:90:a6:a3:c0:
e7:ca:9c:58:12:6f:17:41:d8:15:63:64:e2:fa:66:cf:d1:9a:
b1:36:79:79:c3:d9:73:ae:5c:70:8e:b1:b7:d9:fd:16:40:b0:
dd:b2:15:2e:cb:83:38:82:93:42:65:11:be:7b:54:ba:84:fc:
cb:63:de:d5:77:aa:e4:f0:36:10:05:fd:a1:01:1e:26:82:22:
55:41:35:15:fa:bc:c0:1a:24:f2:55:95:f9:48:f9:4f:11:7d:
55:9a:fb:b2:3b:9b:c7:4b:b3:63:f4:e9:4a:4d:4b:44:e3:39:
11:84:ab:db:4b:57:b1:61:e0:d5:1a:4b:80:1f:56:56:c7:0b:
3f:0b:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:48:32 2025 by rpki-client