Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/2DNBMlN-6qYs6nSWj6By96xVRVk.roa
File: 2DNBMlN-6qYs6nSWj6By96xVRVk.roa (raw, json)
Hash identifier: h/S79XgMHRzDHEK4hulP5xiMPFC6jvsQbBt0dt8Bjac=
Subject key identifier: D8:33:41:32:53:7E:EA:A6:2C:EA:74:96:8F:A0:72:F7:AC:55:45:59
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0190EF0425C6E6ECD7901C59CA8C1D8AF52F
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/2DNBMlN-6qYs6nSWj6By96xVRVk.roa
Signing time: Fri 26 Jul 2024 12:29:04 +0000
ROA not before: Fri 26 Jul 2024 12:29:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.140.59.0/24 maxlen: 24
45.149.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 13:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:04:25:c6:e6:ec:d7:90:1c:59:ca:8c:1d:8a:f5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jul 26 12:29:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8334132537eeaa62cea74968fa072f7ac554559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:df:dd:ac:8a:05:dc:29:34:d5:ba:d5:b8:e1:
d0:f0:f1:57:a9:07:16:e3:06:fc:74:c2:c2:df:6c:
67:f4:7b:54:33:58:0d:e3:42:6a:7b:71:7f:7e:f2:
6a:34:b1:c5:31:15:e3:87:5a:a4:6c:1c:49:20:0e:
d4:e9:0f:32:9e:66:23:dd:17:4d:cd:35:c7:78:29:
43:d9:a5:c2:11:32:0e:da:de:cb:d8:53:a8:69:4a:
64:c8:76:2b:38:2a:ee:aa:e4:f2:d2:74:81:0e:1b:
5a:77:22:74:e3:19:73:a0:3e:65:c2:db:98:90:1f:
05:ff:9c:b6:bc:07:dc:ac:a4:a8:c0:20:fd:0b:ca:
0e:3e:15:b3:b0:e2:b5:42:d3:c1:8e:52:bb:8c:1d:
36:31:a1:7f:61:9d:9c:2a:6e:a1:70:23:5d:e6:5c:
e9:a7:b3:6a:ed:48:3f:96:f2:b5:4e:b4:d4:7b:f8:
13:56:97:2e:b7:77:eb:5d:f6:53:40:1d:b9:b9:e1:
70:c8:40:02:51:ef:36:94:77:d4:e9:f6:10:aa:c2:
e3:f1:87:66:16:bf:98:9d:70:2d:70:8f:97:6f:c0:
47:70:2c:52:96:3c:02:77:22:e3:76:02:6d:eb:de:
17:e6:44:78:dc:6d:9e:ce:f1:86:13:11:7d:55:ea:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:33:41:32:53:7E:EA:A6:2C:EA:74:96:8F:A0:72:F7:AC:55:45:59
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/2DNBMlN-6qYs6nSWj6By96xVRVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.59.0/24
45.149.5.0/24
Signature Algorithm: sha256WithRSAEncryption
05:3f:09:e3:bc:c7:bf:30:83:23:af:c8:09:d7:53:7c:71:28:
f2:f5:30:fe:4f:53:b3:a4:1f:bd:dc:ca:e0:f2:d9:d3:34:0d:
b4:a1:be:5c:a6:11:3c:e3:89:44:a2:70:9e:c3:fa:7b:60:13:
28:1a:a9:e4:9b:c0:85:ab:2b:69:63:c4:fc:05:d2:97:7e:57:
fe:df:c2:a2:ee:45:51:7f:3e:13:0e:bd:ea:f9:5e:57:e4:7b:
6c:33:60:ba:dd:00:96:9d:3f:70:de:bf:03:ea:11:0b:0d:c9:
0b:bc:f7:ae:aa:81:df:0b:47:fe:21:65:67:b1:aa:34:a3:b4:
79:fc:e3:e4:f2:0e:84:7b:79:60:3e:47:27:46:b6:9f:9f:0f:
f4:6a:a9:9f:e7:0a:16:08:68:79:9c:4b:d1:49:c4:03:fa:fd:
b7:86:50:8d:f2:4f:39:77:c8:54:df:55:7b:7e:57:a0:9c:90:
42:9b:cf:96:c4:62:92:73:5d:46:7e:cf:14:7c:7c:1e:8f:d3:
84:d4:90:c6:05:b8:ef:8f:2c:f0:a2:fd:78:6c:3f:d3:66:d5:
f3:ff:46:76:12:32:f6:0b:ad:76:ca:9a:39:62:69:f1:61:57:
70:1b:08:0e:6f:56:e7:d6:de:96:bf:4e:28:03:6d:1e:8f:1c:
b8:56:ea:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:25:07 2025 by rpki-client