Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/SE7KCFAwjqZTo57-5z973j1F5Ws.roa
File: SE7KCFAwjqZTo57-5z973j1F5Ws.roa (raw, json)
Hash identifier: hNEybu77Qepu7dlyvc/CBpzDwRhT7uHYDW3Fmdp89x4=
Subject key identifier: 48:4E:CA:08:50:30:8E:A6:53:A3:9E:FE:E7:3F:7B:DE:3D:45:E5:6B
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 018E8048E7128A481FD6BA78E5D6E7AA5113
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/SE7KCFAwjqZTo57-5z973j1F5Ws.roa
Signing time: Wed 27 Mar 2024 14:20:45 +0000
ROA not before: Wed 27 Mar 2024 14:20:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212669
IP address blocks: 45.11.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:48:e7:12:8a:48:1f:d6:ba:78:e5:d6:e7:aa:51:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: Mar 27 14:20:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=484eca0850308ea653a39efee73f7bde3d45e56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bd:51:7b:01:a2:95:c1:43:d8:4d:75:e2:a0:
38:7f:00:df:a9:cf:7a:b1:09:1f:32:54:4e:b3:66:
39:43:aa:11:9c:c8:05:86:f6:71:ee:b4:61:a0:ca:
bd:0b:c2:3d:55:44:21:62:9e:0c:9f:ca:e6:18:ec:
c2:ce:24:31:19:fb:58:d1:1e:22:a9:6f:b4:92:66:
36:a4:fe:e2:dc:f7:1a:2e:0b:c9:5e:e0:23:c7:74:
ca:22:da:ff:ea:ac:b8:27:af:77:e2:18:9f:7c:07:
0e:2f:f6:25:ff:d6:11:90:9f:9e:25:c9:31:f6:89:
c8:64:c4:e3:08:ea:45:fc:d1:58:6d:6a:12:9f:34:
1c:e1:9a:da:0c:12:9c:09:bd:66:46:8b:f2:35:c7:
f3:14:5d:c2:77:31:c5:e9:2c:6c:df:9f:3a:1b:bb:
31:0b:18:49:09:96:1e:31:94:85:77:67:fb:a2:dc:
50:16:04:e1:65:0d:3e:da:97:92:90:cb:88:93:ef:
04:7b:a6:60:9b:6f:a1:3f:d7:97:80:17:4f:bc:04:
86:04:37:31:c7:7c:20:5e:79:0f:41:05:71:0e:79:
a5:cf:3a:7c:bb:2f:87:58:74:67:d2:9d:de:2a:21:
4e:fb:54:f1:42:5c:86:8b:65:55:49:c4:8a:61:8b:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4E:CA:08:50:30:8E:A6:53:A3:9E:FE:E7:3F:7B:DE:3D:45:E5:6B
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/SE7KCFAwjqZTo57-5z973j1F5Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c9:67:5f:4f:59:89:37:a4:d2:b1:70:d0:73:88:56:ed:09:
19:c6:c8:13:dc:56:d6:9e:ac:a0:89:a0:de:cd:09:de:d4:c1:
e6:4f:45:47:16:85:b5:ed:31:2d:ed:7b:17:90:b6:cf:5a:37:
81:1e:a5:93:8e:28:e7:05:66:69:23:97:0a:41:fc:74:ed:1a:
bc:08:52:61:7d:67:9b:d7:68:d7:9d:dd:ab:d0:35:d2:0b:5d:
aa:c9:c4:19:49:58:f6:2b:10:71:df:f2:e7:ba:7e:04:31:b1:
e4:07:9f:4d:b1:f9:43:a5:12:db:dc:5d:31:1f:18:7f:c4:03:
bc:3b:0b:4a:02:ee:32:7a:55:be:67:b8:83:6d:7b:2b:26:b8:
b0:b8:03:e9:2d:a8:cf:09:67:ce:12:eb:63:9b:8e:60:29:67:
ac:77:e4:9d:cf:4f:bc:0b:9a:fb:c5:ac:ea:ef:95:70:2d:f8:
ea:8c:ab:ff:1f:ed:7d:bb:c6:64:27:18:d3:32:19:2b:b3:40:
a3:4c:ee:3a:44:f5:1e:a1:e8:dd:19:42:7a:67:c6:10:13:6a:
81:f6:2d:3a:92:c9:e6:f6:b6:26:c5:9d:3a:28:03:bb:5b:4f:
0d:ee:a6:f2:d9:63:80:b3:e3:80:a3:9f:ac:37:9c:90:32:d1:
7d:e7:e4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:33 2025 by rpki-client