Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/XSl9zbeLBAPfr6xO8uQznmvV3tI.roa
File: XSl9zbeLBAPfr6xO8uQznmvV3tI.roa (raw, json)
Hash identifier: YDNm3We8T2sOnqpaSNrFyutGZxznWLLhPT3/sQNHq+0=
Subject key identifier: 5D:29:7D:CD:B7:8B:04:03:DF:AF:AC:4E:F2:E4:33:9E:6B:D5:DE:D2
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 0194079B32BFB62A4D2072522C812E4EDBE6
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/XSl9zbeLBAPfr6xO8uQznmvV3tI.roa
Signing time: Fri 27 Dec 2024 10:13:19 +0000
ROA not before: Fri 27 Dec 2024 10:13:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.12.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:9b:32:bf:b6:2a:4d:20:72:52:2c:81:2e:4e:db:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Dec 27 10:13:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d297dcdb78b0403dfafac4ef2e4339e6bd5ded2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:24:21:e0:e8:a4:73:3f:64:26:a7:e7:0b:
fd:be:db:af:8f:2b:c3:39:e9:86:a7:26:5b:39:35:
38:02:29:03:3a:66:10:74:df:97:d4:f2:66:47:8e:
65:05:7b:c3:be:e9:84:3c:1e:95:05:73:f4:3f:f2:
cb:e8:7e:4c:5a:ad:ca:dc:a2:15:63:62:13:d1:b2:
7d:5a:c4:11:2f:25:d2:6e:f3:14:d2:10:0f:89:3c:
30:bb:d0:11:1e:6c:58:91:c6:f5:7f:da:8a:27:2c:
6e:63:cb:05:08:ee:11:c8:3d:d4:c0:a3:ed:cb:2d:
a2:a6:aa:02:27:8c:f3:39:37:c7:16:27:98:83:7c:
6c:e4:b7:0e:2d:73:50:01:52:a2:d6:2c:23:df:40:
72:15:49:ba:c0:1f:2c:f7:2e:e0:e1:08:a1:f0:59:
2d:3e:8b:31:8e:9b:65:e4:05:ef:14:03:e3:f5:d6:
d4:ac:42:a9:1f:21:a1:04:f7:aa:07:67:f8:86:b0:
fe:f1:79:dd:46:f7:88:01:ac:1e:93:95:c1:81:9b:
36:1a:52:49:18:dd:eb:98:cd:ef:08:af:fb:07:a0:
11:f8:c5:3c:07:76:7a:f3:b6:72:62:41:9f:08:8b:
1a:e1:bd:78:8a:e7:5a:90:5b:74:60:46:c6:9e:d7:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:29:7D:CD:B7:8B:04:03:DF:AF:AC:4E:F2:E4:33:9E:6B:D5:DE:D2
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/XSl9zbeLBAPfr6xO8uQznmvV3tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.185.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0f:e5:8e:fa:27:cf:39:c2:46:99:34:00:99:44:71:81:ec:
da:6b:30:cd:0c:ea:7b:01:22:27:fc:06:a9:77:47:b1:b3:14:
32:4e:9f:f3:c6:53:07:a9:18:82:e4:cf:14:20:fc:b2:f9:bf:
12:c3:09:e3:a1:11:25:69:f4:9a:8c:6d:7b:be:b1:3d:e9:a5:
75:f9:ac:d8:8d:3e:ec:9e:e9:e0:25:c9:79:63:d4:29:7d:4a:
fb:02:0d:73:c2:81:01:58:0d:2e:19:0a:ef:30:6e:1c:9a:a2:
67:aa:3a:1a:19:df:11:a8:2f:e7:f2:da:c2:0b:82:c0:0a:b0:
5f:80:7c:c9:24:0b:57:62:14:32:75:d0:a8:51:ab:ab:a9:f4:
c2:d9:6d:da:cb:ad:bf:b3:9c:a9:b6:35:2b:ef:80:4c:ca:4e:
b4:9a:34:9f:69:99:57:a0:6b:9d:b6:96:91:fe:c5:b4:0a:12:
9a:d9:5d:14:b6:71:17:58:b0:e5:81:5f:c2:d8:16:c0:e7:d1:
cb:b0:01:16:50:0b:ec:64:fe:16:0c:93:38:44:7a:a2:99:d3:
20:f3:51:98:0c:07:99:3f:e6:68:08:e8:f3:a8:d4:f5:e3:c3:
78:2d:d0:18:db:bb:fc:29:84:16:60:44:5d:54:eb:82:51:21:
cb:b1:97:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:21:32 2025 by rpki-client