Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/U9OezEryLteUYMWWmrp_HQbZ9g0.roa
File: U9OezEryLteUYMWWmrp_HQbZ9g0.roa (raw, json)
Hash identifier: 52pOdCjlOmBdV+q+MFNsiYazI3apb2vvEg7St3fttko=
Subject key identifier: 53:D3:9E:CC:4A:F2:2E:D7:94:60:C5:96:9A:BA:7F:1D:06:D9:F6:0D
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 0191EB22C0F6094AA6B543A4085FECFFD6BF
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/U9OezEryLteUYMWWmrp_HQbZ9g0.roa
Signing time: Fri 13 Sep 2024 11:26:48 +0000
ROA not before: Fri 13 Sep 2024 11:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58612
IP address blocks: 45.8.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 10:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:eb:22:c0:f6:09:4a:a6:b5:43:a4:08:5f:ec:ff:d6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Sep 13 11:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53d39ecc4af22ed79460c5969aba7f1d06d9f60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6f:c7:7d:41:c3:2d:be:3b:a6:1e:b7:89:21:
5d:6b:dc:9d:cb:54:43:1d:b4:86:89:60:5e:73:11:
75:1e:d3:6c:f8:49:69:c1:52:18:55:5c:aa:29:6c:
26:f7:4e:87:e0:0c:56:b1:da:b7:d2:7b:0c:ca:6f:
fc:a3:ff:9e:06:06:cc:52:f6:4e:19:09:35:b5:fc:
c4:7d:2f:03:f4:29:18:f1:7b:41:7b:42:16:17:df:
dc:d7:95:58:b9:b6:46:ec:9e:72:14:9a:b1:1d:3a:
16:66:e5:37:bc:69:97:b9:c8:db:e5:b8:d6:af:a7:
37:c4:45:fa:81:2b:a3:cb:af:7c:cd:81:3c:20:52:
e6:c6:ab:29:71:85:fc:d0:22:50:16:01:e0:ab:9b:
16:ac:7d:f5:12:9c:48:9f:9a:06:db:a3:2b:40:a2:
19:ff:25:b3:0e:bc:6e:72:f7:78:7b:d7:c1:41:98:
67:2c:31:8f:57:2c:1b:d1:f6:6b:e4:a9:79:4c:ae:
0a:7c:5c:a8:8b:87:56:90:6c:87:f0:98:9a:73:f2:
e5:55:3b:91:ea:c4:27:dc:8d:4d:7e:fd:1b:94:99:
0e:e1:8b:08:39:b6:a4:7f:65:d6:70:7c:15:6f:b0:
3e:90:e1:26:50:6c:d8:e8:81:ce:9c:c6:34:b4:db:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D3:9E:CC:4A:F2:2E:D7:94:60:C5:96:9A:BA:7F:1D:06:D9:F6:0D
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/U9OezEryLteUYMWWmrp_HQbZ9g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.176.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:a3:a6:d8:d6:6b:02:0d:81:17:45:12:d4:51:2e:3f:d8:7f:
bd:4b:b3:11:01:58:55:b9:12:f7:06:3b:15:6e:9c:75:b4:20:
f6:cd:94:12:85:8e:5f:0d:d8:30:5a:0c:bf:e0:5c:92:8c:0d:
66:0d:1c:fe:a4:09:94:8b:e1:16:88:0b:80:e2:c3:37:e4:2b:
0d:6e:55:6e:fc:86:19:b4:68:79:26:54:df:5d:3b:4a:29:c7:
88:4b:c1:62:69:2b:ea:19:8a:7a:41:b9:8b:26:9f:dc:e8:b7:
f8:b2:e9:9a:37:35:1c:06:fc:ce:1a:49:86:32:c5:5f:d7:4a:
89:e8:4b:de:2d:f5:ad:03:3a:ce:f3:d8:38:f0:0e:63:ad:f3:
6e:26:28:1d:e4:78:2e:18:bb:bf:73:dd:34:37:51:5e:19:33:
d6:82:8f:31:76:2f:ae:fd:51:be:ae:a5:b4:1e:4b:e3:f7:4a:
75:79:b6:93:34:17:69:2e:5d:b3:78:d0:38:d6:46:ab:f6:9c:
82:37:c7:c0:91:2b:ae:80:37:85:c3:6a:75:1d:42:05:c6:cb:
d6:ad:59:92:bf:c8:69:54:0c:8e:cf:12:20:8b:6f:f0:50:de:
c9:9b:f2:28:69:d9:2a:33:05:d4:2d:78:aa:93:3e:24:6f:e7:
20:19:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:00 2025 by rpki-client