Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/JkX7B9d2DqDYDfaJpzB9n1kJgKA.roa
File: JkX7B9d2DqDYDfaJpzB9n1kJgKA.roa (raw, json)
Hash identifier: bFCK64iq7YtTmsqSanHZPu6aCuLdbccSg7G+l2F/FxY=
Subject key identifier: 26:45:FB:07:D7:76:0E:A0:D8:0D:F6:89:A7:30:7D:9F:59:09:80:A0
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019575AD81C80B7E998C794CF8C1A1E15BD5
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/JkX7B9d2DqDYDfaJpzB9n1kJgKA.roa
Signing time: Sat 08 Mar 2025 12:14:19 +0000
ROA not before: Sat 08 Mar 2025 12:14:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.65.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 15:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:75:ad:81:c8:0b:7e:99:8c:79:4c:f8:c1:a1:e1:5b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 8 12:14:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2645fb07d7760ea0d80df689a7307d9f590980a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:8b:6c:03:98:ad:7c:8c:15:e5:73:0e:cc:
d0:23:9b:07:88:dc:5b:25:cd:41:e4:38:8f:f7:be:
fc:d3:23:25:da:d6:35:39:fd:69:8b:fa:df:e1:12:
e9:46:60:a0:fa:46:4e:65:07:5a:63:dd:30:6c:b4:
55:c3:ff:d8:2f:6a:b6:72:6e:94:8a:98:30:7f:cb:
4d:21:49:89:fc:96:23:2a:2b:de:4e:47:58:8a:80:
2c:18:ba:ae:b3:85:9b:50:a3:1c:74:54:fe:45:a3:
c6:89:c6:2f:9d:69:6f:96:59:d3:fc:26:7a:d7:45:
1d:80:96:76:65:a7:c9:67:1f:5f:7c:cc:ae:00:74:
a7:7f:67:2b:f5:d6:92:48:89:cb:68:81:3a:9b:ba:
0d:6b:89:55:52:8d:b6:b3:35:fe:d0:f8:78:68:f8:
f8:8e:35:cf:42:25:60:4f:90:77:bf:2f:65:90:5d:
79:50:57:e3:87:9f:1e:03:b9:c2:02:62:e5:42:9d:
f5:18:49:1e:c9:5b:ba:20:89:59:b3:87:43:18:6e:
d3:74:76:68:ba:97:39:c9:2f:60:3b:63:28:20:e1:
34:5a:cc:22:87:e3:8e:ff:9b:97:d3:95:36:70:36:
6e:a3:6e:3b:70:ba:74:29:77:2f:a5:7a:86:eb:51:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:45:FB:07:D7:76:0E:A0:D8:0D:F6:89:A7:30:7D:9F:59:09:80:A0
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/JkX7B9d2DqDYDfaJpzB9n1kJgKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f0:96:1b:68:0c:f3:cb:4f:88:89:f9:49:50:ed:00:b1:a3:
9b:a4:a5:b3:07:54:b2:38:1f:08:bb:16:ee:7a:63:84:5c:74:
a1:9e:9c:8f:72:6b:ba:1b:f5:f8:4d:6d:eb:02:d3:e8:59:86:
6a:81:85:51:a6:1c:9c:54:d9:1d:6a:45:1d:a6:17:b1:71:12:
1a:3b:02:f4:f1:8b:52:60:42:0b:f7:9b:cb:af:fe:49:e3:85:
c9:49:98:f7:a8:5f:36:8c:08:b1:c9:dd:b9:23:4c:b6:4e:b7:
8f:bc:8e:d1:3d:8a:12:5b:df:1a:7c:ad:02:ea:d0:4d:41:59:
62:82:8a:28:7f:8c:33:a9:06:fe:4c:2b:5a:c0:24:2f:b7:d0:
b4:d0:0e:09:91:70:63:ec:ad:5a:63:dd:45:02:c9:07:5a:3a:
b6:3a:9f:d7:2e:b4:af:3e:08:ed:16:e1:3c:6e:cf:2d:ed:91:
74:66:9d:94:86:36:e2:ce:e4:a1:23:43:3a:da:81:b3:75:5b:
99:f2:de:f1:44:21:c9:2f:38:45:0f:09:f5:e3:50:8b:13:fd:
20:9d:e3:75:e3:eb:e2:19:b4:25:37:27:0c:28:63:7f:66:83:
fd:10:70:7b:1c:74:9c:d1:19:2e:02:4b:10:e2:91:14:87:26:
ec:01:49:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:28:31 2025 by rpki-client