Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sz9UsTAKYWIp16lbdMfsET4AF9E.roa
File: sz9UsTAKYWIp16lbdMfsET4AF9E.roa (raw, json)
Hash identifier: LU6Fhyfsg+06IxG8qunM+pAHsFviI/0t3bUS1qt8LhA=
Subject key identifier: B3:3F:54:B1:30:0A:61:62:29:D7:A9:5B:74:C7:EC:11:3E:00:17:D1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942673A1CD7D8B96A741BB17AD0B19CA75
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sz9UsTAKYWIp16lbdMfsET4AF9E.roa
Signing time: Thu 02 Jan 2025 09:58:19 +0000
ROA not before: Thu 02 Jan 2025 09:58:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200239
IP address blocks: 45.90.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:73:a1:cd:7d:8b:96:a7:41:bb:17:ad:0b:19:ca:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 09:58:19 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b33f54b1300a616229d7a95b74c7ec113e0017d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:f7:16:ee:b2:b1:48:68:c1:dc:75:ce:c4:
9f:0d:ee:28:78:6b:ba:b7:62:d0:02:75:d3:36:17:
2e:44:53:72:6c:09:0a:13:be:50:f2:7e:f4:09:26:
20:53:9e:9a:37:05:31:68:8e:96:dd:25:f2:73:dd:
fd:1e:cc:0f:14:df:71:5c:b7:2d:15:d2:17:97:8e:
1c:e2:7a:14:6a:ee:e0:39:87:0e:51:8e:a9:4f:ec:
4a:82:32:c5:ff:20:73:5a:a5:ba:d3:c2:ea:42:d0:
ef:07:76:71:ce:20:d2:ac:d0:d1:6c:bd:91:ed:94:
39:a0:db:43:fb:06:f7:f0:88:15:79:e4:83:6a:29:
57:10:77:62:a2:5d:f3:56:28:6f:88:00:1d:45:5d:
85:5b:07:63:ad:d7:37:16:03:2f:32:a5:67:b9:2f:
a8:6e:d9:05:ed:81:f6:31:6c:8c:54:48:57:b3:df:
52:d2:30:74:a8:7e:ca:23:ab:12:d6:66:24:87:cc:
58:ea:4b:91:f2:08:32:2c:16:35:8c:4f:21:5d:71:
97:36:53:1c:d6:21:13:12:4b:99:c2:76:f3:01:59:
0d:af:63:48:96:69:86:51:11:11:93:71:38:cd:29:
57:4a:98:e9:06:28:26:50:e3:ec:b3:16:3a:50:d3:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3F:54:B1:30:0A:61:62:29:D7:A9:5B:74:C7:EC:11:3E:00:17:D1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sz9UsTAKYWIp16lbdMfsET4AF9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.88.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:26:2d:5c:28:c5:22:50:b0:05:4c:f8:e8:46:82:a7:47:8d:
70:25:7a:9e:ce:b0:f1:db:53:b0:e0:da:11:9f:ae:ec:da:c2:
e8:9e:00:49:48:08:5d:10:ab:cf:65:e1:14:36:23:16:bb:26:
96:5f:61:90:4b:22:20:e0:69:50:51:d0:79:4f:cd:55:42:7e:
c9:e2:71:00:f9:c5:a2:3d:e8:b1:db:3e:51:17:d0:85:f4:40:
9a:0d:71:e7:55:1d:ce:9f:46:80:9e:20:16:c5:93:84:6c:1c:
6d:cf:fd:3e:45:f5:80:45:1a:56:d0:b0:31:33:9a:5d:89:7a:
81:af:79:5c:5a:a7:c5:02:75:78:a5:27:ab:be:a6:1d:da:cb:
a2:2d:79:9c:9b:90:bf:c4:b7:b7:3a:23:9d:21:1b:6e:12:58:
05:76:67:6e:87:93:ec:d2:44:0f:2c:50:88:df:92:81:0b:d0:
f5:cc:ba:97:64:be:6c:46:21:51:fe:d9:8c:1a:db:39:33:80:
54:48:71:d9:01:b2:88:9d:ea:06:7a:f2:12:49:76:c2:49:af:
77:2f:e1:9d:0d:2c:ee:47:43:ba:6b:d5:c8:4f:c1:dd:b1:2f:
4b:45:84:52:3a:cd:6e:70:68:6e:e8:2c:3b:0d:db:91:89:87:
13:82:ac:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:35:52 2025 by rpki-client