Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/OT4bETxBrqWEykrSJVwZR4Hh7bA.roa
File: OT4bETxBrqWEykrSJVwZR4Hh7bA.roa (raw, json)
Hash identifier: j7DR7abAMQ9F3pRwH86fyEERlsiY/YLsmG8gY7xtX74=
Subject key identifier: 39:3E:1B:11:3C:41:AE:A5:84:CA:4A:D2:25:5C:19:47:81:E1:ED:B0
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 0191C19EE9A1398F6B5F6385B95D46A59A65
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/OT4bETxBrqWEykrSJVwZR4Hh7bA.roa
Signing time: Thu 05 Sep 2024 09:58:22 +0000
ROA not before: Thu 05 Sep 2024 09:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.11.173.0/24 maxlen: 24
45.11.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:9e:e9:a1:39:8f:6b:5f:63:85:b9:5d:46:a5:9a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: Sep 5 09:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=393e1b113c41aea584ca4ad2255c194781e1edb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:c5:33:65:ba:79:78:1c:69:8a:13:3e:75:
fd:d4:8b:8c:e5:83:79:3d:1b:7d:19:2d:9e:78:e4:
e9:3a:ad:12:d0:fb:fe:86:15:07:b9:80:e0:47:13:
be:d5:50:9f:e1:35:98:ed:fc:e4:24:ab:91:53:ea:
a8:6b:e7:cb:75:f6:bb:32:a0:97:15:4d:47:d2:d3:
df:3f:aa:d9:1e:35:9c:12:d1:92:88:aa:fb:88:59:
8f:ad:38:a2:10:54:f4:87:b8:67:26:b6:39:42:94:
90:4e:70:8b:98:6e:ef:8f:76:95:1b:23:e8:5a:f3:
db:a8:ad:87:52:44:ac:2a:d5:d7:fa:f3:e3:ad:9e:
b9:2c:40:35:74:d0:d3:67:74:bb:e6:35:21:35:ce:
6b:db:4e:d9:2f:11:f7:15:97:1b:3e:b1:c8:57:5f:
6e:b0:09:ad:61:b9:eb:af:d7:6c:2e:34:fc:bb:d7:
7d:e9:b1:28:2f:ab:6f:e2:ba:50:b7:93:16:b0:01:
1c:ee:71:d7:1e:16:ef:36:66:22:a7:6c:c5:cf:30:
08:ab:c8:3c:d2:0c:20:4f:d0:19:9e:02:f5:36:11:
be:57:49:1b:53:57:f5:49:3c:45:1f:b4:2c:f0:87:
55:4a:0a:ae:e5:0e:90:0a:cf:69:44:05:5d:d5:74:
6b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3E:1B:11:3C:41:AE:A5:84:CA:4A:D2:25:5C:19:47:81:E1:ED:B0
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/OT4bETxBrqWEykrSJVwZR4Hh7bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.173.0/24
45.11.175.0/24
Signature Algorithm: sha256WithRSAEncryption
69:d6:41:52:b1:95:79:f5:06:25:d2:c8:21:1f:c0:67:1f:fb:
ed:fd:42:85:e8:37:87:5f:4b:48:95:8d:da:fd:24:4e:29:3b:
03:ba:b1:30:62:84:7e:33:68:ae:b7:24:9f:33:cb:c7:e2:c1:
54:01:35:74:8a:d3:db:c4:4c:b8:2b:d9:58:30:3a:ec:23:fd:
ac:25:e7:32:21:31:d6:27:2c:4c:f6:76:6d:20:d3:d3:04:1d:
7e:ba:88:a5:b3:45:34:32:74:c4:ee:19:9d:30:29:c2:51:2b:
a0:1d:f6:13:8f:b8:df:20:40:10:80:a4:14:2b:8a:b2:7c:14:
9a:45:d9:a1:ee:6b:db:b4:bb:76:e0:28:e8:d4:88:7d:d8:de:
cc:c3:ff:56:9e:40:11:e3:bd:03:b4:1a:be:e6:47:6f:7a:07:
ed:8d:f7:69:b5:a3:89:27:94:20:69:3c:18:cc:b3:a6:50:24:
09:a9:b1:b2:e4:e9:87:51:b2:78:81:07:db:fa:8a:13:d1:b3:
eb:e8:ee:01:b6:63:8c:dd:61:20:b0:ac:92:28:bc:36:14:d3:
fa:1a:07:65:bc:90:2f:98:51:ac:e5:73:cd:1a:eb:70:fc:9b:
f8:54:ec:df:68:43:89:7f:93:69:62:c2:ea:c3:fd:1c:cb:3c:
ba:f2:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:20 2025 by rpki-client