Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/a3ueRhvTbSK-uglGDirbW9AP4E0.roa
File: a3ueRhvTbSK-uglGDirbW9AP4E0.roa (raw, json)
Hash identifier: RQOSkqjXZ4y7huP5QsHKSPLHjcFZ67qqOR2urPOPRyU=
Subject key identifier: 6B:7B:9E:46:1B:D3:6D:22:BE:BA:09:46:0E:2A:DB:5B:D0:0F:E0:4D
Certificate issuer: /CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Certificate serial: 018CC6B7B9C1F6F03D21A4CE60EB1B8F5B3D
Authority key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/a3ueRhvTbSK-uglGDirbW9AP4E0.roa
Signing time: Mon 01 Jan 2024 20:29:38 +0000
ROA not before: Mon 01 Jan 2024 20:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59645
IP address blocks: 45.91.12.0/22 maxlen: 24
2a0e:a40::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b9:c1:f6:f0:3d:21:a4:ce:60:eb:1b:8f:5b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Validity
Not Before: Jan 1 20:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b7b9e461bd36d22beba09460e2adb5bd00fe04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:8d:7a:b4:6a:05:64:34:2f:71:bb:56:54:
2a:c2:39:5e:88:09:b2:8a:40:b1:a9:7b:53:81:10:
c0:d8:a8:a8:ea:86:50:e9:e4:96:d1:40:05:6b:2b:
fa:d1:5c:d3:42:43:31:73:13:ee:64:07:f4:3e:67:
71:6f:c5:2b:d2:69:20:a3:ca:51:04:75:8f:b1:c9:
13:3e:c8:77:21:59:3d:a9:67:f7:f5:26:f4:02:c7:
91:93:29:73:d9:2b:42:4f:a3:85:8b:f9:6d:2b:d4:
91:e0:f4:f0:47:48:b5:a5:cf:45:dd:5d:ed:ca:30:
6a:93:31:67:7b:12:80:cd:c8:3c:8c:fc:8a:a4:bc:
c1:13:75:10:6e:67:31:4c:4a:c5:5b:dd:cf:09:be:
29:f9:d9:4d:76:65:31:93:22:ee:db:52:e0:ac:8f:
56:84:5f:c8:8b:74:0d:44:fd:b8:d9:60:ee:f4:79:
27:11:ce:84:77:5a:c4:f3:9e:ef:5b:49:99:c9:89:
6d:f3:56:f7:20:fb:23:b5:b8:36:54:54:ff:23:83:
e1:c2:5b:2a:4c:6e:25:55:03:9b:18:d6:61:8f:d6:
aa:cb:29:9f:d0:7e:24:2c:70:a5:1a:ae:74:b5:a4:
68:cb:a5:75:e5:e2:cf:c0:9d:cc:44:c6:06:94:cd:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7B:9E:46:1B:D3:6D:22:BE:BA:09:46:0E:2A:DB:5B:D0:0F:E0:4D
X509v3 Authority Key Identifier:
keyid:5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/a3ueRhvTbSK-uglGDirbW9AP4E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.12.0/22
IPv6:
2a0e:a40::/29
Signature Algorithm: sha256WithRSAEncryption
2e:ca:04:16:62:96:45:55:8c:79:e3:67:07:3e:cd:9e:23:b9:
f3:9b:ff:50:f7:33:72:4c:20:f5:2d:e8:49:8e:ab:5e:69:b7:
15:01:2a:ca:bf:d7:49:a9:84:e8:b8:bc:5c:06:7a:1b:78:94:
80:6f:ff:96:ca:aa:ce:dd:ca:9c:d7:7f:a2:a1:22:a3:45:a0:
85:44:b6:6c:8d:6e:84:2e:71:64:9e:4f:01:80:2d:44:c7:bd:
8f:4c:78:e4:8f:cd:20:c8:92:00:77:9b:67:87:bf:20:2a:b7:
75:ce:ad:42:dc:ef:0c:bd:6e:0a:91:25:8c:0b:2d:c4:b6:5c:
8e:b0:b5:56:50:92:bd:31:d8:af:c8:2b:d9:43:36:7b:28:60:
b1:11:fa:d9:1b:91:1b:fd:20:3d:0d:85:be:e9:39:c1:ad:6b:
d4:70:83:44:07:56:f1:cf:aa:ef:4e:50:bc:27:bc:bc:5b:3c:
82:6b:c6:9c:c5:6f:90:45:9b:68:5e:db:bf:cb:86:43:5d:5d:
02:8e:30:b6:c2:75:79:a9:65:d7:f3:48:2a:58:08:85:37:54:
b2:ee:39:c6:68:22:2a:51:bc:06:73:4c:af:40:1c:45:29:d3:
ff:64:30:8e:d8:53:7c:42:ad:cc:e2:6a:91:92:1a:bf:5d:ff:
e8:ad:1e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:45:04 2025 by rpki-client