Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/h5BYEWL0RA6_fqzY1nzqzI4_Wyc.roa
File: h5BYEWL0RA6_fqzY1nzqzI4_Wyc.roa (raw, json)
Hash identifier: Z9gyuA6kyyq7KHEH+xNjxy2XNuEaMoFJxNM46RJpQaA=
Subject key identifier: 87:90:58:11:62:F4:44:0E:BF:7E:AC:D8:D6:7C:EA:CC:8E:3F:5B:27
Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial: 019470630A9C95F846EC347C0542B21F8747
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/h5BYEWL0RA6_fqzY1nzqzI4_Wyc.roa
Signing time: Thu 16 Jan 2025 18:32:06 +0000
ROA not before: Thu 16 Jan 2025 18:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 45.87.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 02:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:63:0a:9c:95:f8:46:ec:34:7c:05:42:b2:1f:87:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Validity
Not Before: Jan 16 18:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8790581162f4440ebf7eacd8d67ceacc8e3f5b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3d:33:a4:4b:1e:b6:39:7f:f3:82:da:05:a3:
0a:eb:6b:f1:50:e3:f6:a8:5e:0e:e1:b2:f7:7b:62:
88:7e:68:41:fb:e2:23:66:d9:74:51:06:b4:7a:89:
c7:79:45:4f:2c:e0:a2:e5:92:2b:4e:0c:36:45:97:
7e:3a:d3:d1:ed:78:66:a6:b7:26:03:72:8c:41:28:
db:1b:0c:43:bc:ae:6f:6e:ef:4e:2c:ce:ae:72:71:
56:ac:67:01:69:13:b2:ef:a0:a6:0d:4f:96:df:4a:
09:59:b7:1b:40:98:34:1b:ed:84:a0:e9:55:5c:76:
3e:fe:2d:75:dd:8f:4a:8c:9f:89:01:01:76:8d:54:
b7:bf:bd:a6:cd:35:66:db:32:b1:35:ab:f4:a5:6d:
9f:b7:ed:a8:54:9f:47:1d:ba:81:e8:ef:f7:8a:41:
94:2b:7f:9e:d8:f6:bc:de:68:ec:b8:0a:cc:0a:d1:
9e:8d:35:22:93:79:b9:90:04:f7:54:8f:61:9d:d3:
8a:08:d6:66:d3:45:d5:7e:a4:fd:72:96:bd:b0:43:
38:80:ec:fc:fd:63:43:5e:53:6e:86:a9:ff:21:31:
8f:90:32:83:62:87:0d:0f:b1:68:f3:88:9d:17:04:
7a:88:31:af:ab:c9:39:95:eb:fa:42:14:c0:57:22:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:90:58:11:62:F4:44:0E:BF:7E:AC:D8:D6:7C:EA:CC:8E:3F:5B:27
X509v3 Authority Key Identifier:
keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/h5BYEWL0RA6_fqzY1nzqzI4_Wyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.101.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a7:69:1e:56:30:ee:39:a0:c0:52:34:de:84:70:23:29:b8:
b5:e2:72:61:11:f1:cc:4b:8f:99:95:7b:af:16:73:31:cb:d6:
73:b4:65:98:bf:fb:28:01:94:d7:91:0b:a5:45:45:7b:27:fe:
ad:2d:fd:e2:dc:57:c9:ab:29:02:c0:e3:75:5f:df:31:70:f4:
f4:6e:0c:a9:02:7f:fe:61:6f:54:03:1f:4b:29:fe:99:d5:49:
f3:6e:61:fd:76:ea:58:14:4b:e5:9d:c2:29:a0:e6:3f:58:4f:
61:d5:3c:cd:40:5f:41:12:48:83:ee:e6:c8:7d:ae:25:c6:f2:
38:e5:56:cf:58:fa:8b:3a:a2:fb:cd:9c:4a:f7:9f:12:92:3e:
c6:05:54:fd:94:7d:3b:08:18:76:a0:02:e8:64:5f:ec:7a:8e:
6a:7a:b7:fa:d0:63:49:7d:65:0f:17:a7:bf:ce:4f:19:b6:50:
9c:8d:74:b3:aa:7d:c0:96:43:ba:08:41:40:d6:6b:90:8c:05:
b1:20:38:63:1e:4e:91:6d:0c:17:a1:68:96:5e:87:ab:30:41:
2c:68:5c:c9:9e:4c:da:e3:f6:f0:09:9a:83:14:60:d4:de:22:
8a:30:90:ed:71:75:df:cd:f7:72:83:e7:d0:3f:10:0b:56:88:
33:bb:30:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:59:58 2025 by rpki-client