Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/S3427Ij04j7UgHd5TO5qNmmJsF8.roa
File: S3427Ij04j7UgHd5TO5qNmmJsF8.roa (raw, json)
Hash identifier: /jwbvONLbZgSMgmu3F4ocyZScMjAwTwSO4CoqEkPSe0=
Subject key identifier: 4B:7E:36:EC:88:F4:E2:3E:D4:80:77:79:4C:EE:6A:36:69:89:B0:5F
Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial: 01941FFA44C54C633C5425D35E70B39161C3
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/S3427Ij04j7UgHd5TO5qNmmJsF8.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50575
IP address blocks: 45.147.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 14 Mar 2025 09:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:44:c5:4c:63:3c:54:25:d3:5e:70:b3:91:61:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b7e36ec88f4e23ed48077794cee6a366989b05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:45:ae:39:66:b0:17:a5:c6:c7:1a:fd:56:
2d:9f:d0:3f:78:af:46:46:d2:6a:e8:22:91:32:40:
fb:7d:2b:49:0f:26:72:2b:9c:48:85:c8:fe:35:af:
f2:98:ba:27:7c:ae:06:4a:18:90:1c:4f:27:ce:bc:
c2:8c:02:3a:a6:4e:38:c6:a4:d0:26:50:31:51:20:
5f:97:c4:1d:db:a0:7b:d9:22:6d:fe:93:55:98:07:
7d:28:56:37:73:3a:80:a1:60:46:35:66:43:75:ac:
7a:6d:ad:e8:e6:8f:6d:c9:b3:40:c1:d4:0c:d3:1e:
e4:d8:35:6d:38:45:6e:9c:6b:74:53:ba:68:44:30:
fd:97:8e:06:f3:ad:00:6a:2d:ff:f1:2d:3e:97:c7:
69:74:d4:bd:d7:a9:40:55:66:80:75:a9:e2:a9:3c:
7e:37:73:97:df:f6:24:1d:25:cc:83:b3:19:00:70:
47:13:47:28:95:f2:6b:40:db:62:c1:d2:3a:da:2c:
70:48:4c:da:37:67:ae:a6:6f:8b:fe:70:8b:7d:c6:
8e:7e:0e:67:d5:99:e7:82:5c:c2:be:45:79:e0:2d:
e9:cf:d6:1e:6d:c8:6c:44:85:51:65:35:50:b9:15:
89:9f:5f:d4:b8:ca:6c:a9:bb:93:31:a8:87:20:fe:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7E:36:EC:88:F4:E2:3E:D4:80:77:79:4C:EE:6A:36:69:89:B0:5F
X509v3 Authority Key Identifier:
keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/S3427Ij04j7UgHd5TO5qNmmJsF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.220.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:a1:74:f5:1d:f5:ec:44:db:9f:5d:aa:6e:66:a0:a5:b5:a7:
30:3b:d7:04:26:7d:ea:7c:97:cc:ed:e8:4e:ba:b9:f7:a9:20:
1f:c8:c0:63:8f:d6:10:fe:22:35:ac:a9:ec:8c:59:4a:27:f7:
b6:09:29:81:9a:83:30:29:82:28:2a:2c:c9:9d:44:57:cd:38:
60:5a:c6:1b:72:0b:87:24:a2:50:a7:b9:07:c4:cc:d4:4b:2a:
6c:6c:36:c8:1a:55:56:74:bc:d4:d5:be:1a:e0:5f:0b:98:44:
4f:dd:30:3e:8e:49:37:51:c8:c3:b9:19:6e:dc:77:5a:c3:1d:
50:71:e8:0b:5a:74:50:b9:c8:61:a3:a7:29:1f:55:29:10:02:
22:51:b8:0e:75:59:eb:b0:58:b5:ec:2f:8d:01:96:16:81:d0:
1b:7c:45:88:e4:a0:8e:e9:42:e5:a5:d0:9c:00:40:13:db:8e:
60:4f:e1:ca:74:05:54:7b:35:f8:60:02:84:e0:d7:3e:a1:86:
f8:e4:e3:31:0e:6a:d5:19:4b:3c:1d:9a:26:a4:20:a1:d6:9e:
78:3f:33:4d:e3:a0:b2:f8:8d:39:5c:36:84:07:ac:3d:a2:5b:
9e:b7:54:8c:1f:9a:57:58:47:b4:14:ca:12:76:94:21:f4:f7:
d5:de:0e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:48:01 2025 by rpki-client