Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/1A5xZZjiNr0C8cpzxlveEHhgtY0.roa
File: 1A5xZZjiNr0C8cpzxlveEHhgtY0.roa (raw, json)
Hash identifier: t/JB0VJkzprbGwljwAQHB9xgghggyLX3j+rlxbthQB8=
Subject key identifier: D4:0E:71:65:98:E2:36:BD:02:F1:CA:73:C6:5B:DE:10:78:60:B5:8D
Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Certificate serial: 018D168DE3474252F2669F0BD6544C447001
Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/1A5xZZjiNr0C8cpzxlveEHhgtY0.roa
Signing time: Wed 17 Jan 2024 08:33:33 +0000
ROA not before: Wed 17 Jan 2024 08:33:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200245
IP address blocks: 45.85.44.0/22 maxlen: 22
45.85.44.0/24 maxlen: 24
45.85.45.0/24 maxlen: 24
45.85.46.0/24 maxlen: 24
45.85.47.0/24 maxlen: 24
2a13:2240::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 13 Feb 2024 19:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:16:8d:e3:47:42:52:f2:66:9f:0b:d6:54:4c:44:70:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Validity
Not Before: Jan 17 08:33:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d40e716598e236bd02f1ca73c65bde107860b58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d1:b5:49:54:37:8e:be:54:0a:6a:17:a0:49:
55:2e:80:64:3a:a3:79:e9:2c:26:7b:9f:b5:88:3c:
92:e8:ab:b8:68:1d:d8:f7:ad:35:2c:9c:83:f5:af:
44:26:f7:18:9e:ad:74:ea:9a:d7:36:ab:93:3e:74:
97:2f:1b:e3:a4:d6:bb:58:d8:7e:01:30:0b:8a:0e:
68:90:9c:da:23:d7:a4:2a:fc:18:ec:af:10:74:c1:
67:53:ef:00:a9:b0:22:56:ab:49:20:9c:c3:9b:93:
74:ea:bb:c2:dd:19:b5:f4:30:c1:6a:bc:30:d2:77:
e4:fd:f7:5c:8b:c5:9b:b0:92:5f:97:fa:56:1e:b5:
17:9b:5d:aa:42:ab:32:8e:0a:0e:93:8c:85:85:a4:
3b:b2:63:52:2d:dd:89:11:7d:45:f1:bc:58:e7:f5:
a7:1e:8e:74:47:d2:9b:aa:8f:b3:af:8a:87:f7:7f:
43:d0:35:c6:11:a9:17:91:6f:02:95:5b:9a:7a:86:
2e:0e:0f:f5:07:88:58:10:f6:a1:ac:dc:43:e9:09:
43:fd:f2:47:42:19:ee:85:05:62:b4:04:c4:4e:c9:
42:fa:25:1b:c2:a8:88:9d:47:26:6f:3b:26:dd:e4:
d3:c0:cf:1a:45:6a:49:f2:bc:bb:63:d4:d3:02:0c:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0E:71:65:98:E2:36:BD:02:F1:CA:73:C6:5B:DE:10:78:60:B5:8D
X509v3 Authority Key Identifier:
keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/1A5xZZjiNr0C8cpzxlveEHhgtY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.44.0/22
IPv6:
2a13:2240::/29
Signature Algorithm: sha256WithRSAEncryption
88:83:e0:2f:f4:d0:90:30:17:b4:b9:e2:fe:43:ca:e0:b4:ac:
5a:ae:dc:90:50:c6:5f:50:ca:52:0a:71:22:43:21:d2:d0:5b:
51:cc:e6:c7:95:ee:65:be:e5:96:20:57:3e:32:5e:6a:05:8d:
f5:34:29:c8:92:a3:00:b4:bd:f1:4f:38:18:5b:ab:dc:ba:05:
91:69:b5:0e:a2:f0:4c:82:25:61:71:53:57:bb:52:20:92:83:
de:c0:94:b2:0e:a2:1d:59:7e:a1:7b:9b:27:64:d6:41:5c:c0:
b5:a5:e0:af:61:a4:e9:40:da:0b:46:53:14:7f:e4:58:d1:b6:
cc:ec:11:d1:17:76:d0:37:8d:4b:9b:b5:38:03:c3:24:60:e9:
97:f2:85:dc:d5:52:c3:2e:4b:c7:1b:29:f5:54:74:a5:91:b2:
a9:5f:5e:dd:fc:ce:21:c2:58:81:ac:44:82:de:ae:be:9d:e3:
5f:e1:59:d8:a2:9b:f0:b2:0e:df:3a:cc:e2:b3:05:f5:92:c8:
5e:fb:e1:3b:95:be:59:01:34:38:ea:f9:f1:84:8b:41:1f:46:
70:31:e7:13:f1:bd:6b:9b:3d:26:9b:33:e1:1b:13:a4:17:84:
78:81:b7:e3:55:44:a6:01:67:46:39:23:f9:76:bb:94:35:23:
43:2d:f2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:07 2025 by rpki-client