Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/t4JBZXmAW_d8BSoeUOrd8Kx9UsE.roa
File: t4JBZXmAW_d8BSoeUOrd8Kx9UsE.roa (raw, json)
Hash identifier: jLWI9LG04MHbLButB8FUXC1TakRjIOUdxhwpEWLwwqw=
Subject key identifier: B7:82:41:65:79:80:5B:F7:7C:05:2A:1E:50:EA:DD:F0:AC:7D:52:C1
Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial: 0194258F465978B8AE2FB3BC3AA0F522A586
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/t4JBZXmAW_d8BSoeUOrd8Kx9UsE.roa
Signing time: Thu 02 Jan 2025 05:48:54 +0000
ROA not before: Thu 02 Jan 2025 05:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200017
IP address blocks: 45.91.33.0/24 maxlen: 24
45.91.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 12:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:46:59:78:b8:ae:2f:b3:bc:3a:a0:f5:22:a5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Validity
Not Before: Jan 2 05:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b782416579805bf77c052a1e50eaddf0ac7d52c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:ed:28:90:18:64:4f:d0:c1:0b:4a:ec:cb:
fc:8c:96:ea:89:4b:97:4e:0b:a2:ad:8e:c8:61:f2:
aa:88:20:b1:a4:99:3f:a3:7b:b2:00:7e:48:33:f9:
0a:76:6d:76:81:e8:e3:2f:46:3c:78:0a:32:15:dd:
30:e7:eb:45:f7:d4:9e:f1:4f:77:10:e7:ef:7e:6e:
e7:b4:3d:c0:6a:59:3a:31:89:53:aa:24:0f:23:70:
5f:65:d0:50:31:82:ca:c8:6d:08:80:d2:b6:6e:14:
14:78:69:53:92:78:b9:b9:f5:70:f2:4c:31:a0:cc:
0f:1c:99:7a:de:cc:d6:b4:b1:8e:f3:86:53:3b:c1:
ed:52:f7:ee:2c:42:c4:ed:78:04:67:d6:e9:a8:09:
7a:30:e9:d8:da:e9:1d:4f:23:2b:93:42:cb:17:00:
be:43:89:12:6c:81:c6:cf:f3:aa:c3:11:a0:bb:49:
a8:14:aa:9f:fa:94:55:4e:ae:34:74:97:f6:37:94:
da:85:f3:c9:10:e4:fa:dd:c4:28:99:b2:8c:ed:d9:
2c:09:a5:8e:3a:92:13:41:28:0d:83:45:61:94:0d:
9b:87:a6:d0:db:2d:c2:c9:c8:04:6d:3a:23:82:3d:
43:da:fe:a7:a9:90:c7:00:35:97:ab:8b:94:35:aa:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:82:41:65:79:80:5B:F7:7C:05:2A:1E:50:EA:DD:F0:AC:7D:52:C1
X509v3 Authority Key Identifier:
keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/t4JBZXmAW_d8BSoeUOrd8Kx9UsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.33.0/24
45.91.35.0/24
Signature Algorithm: sha256WithRSAEncryption
80:14:27:b7:d0:e2:71:2b:63:43:28:10:ba:1b:ef:11:f5:0a:
5f:e1:32:88:a9:31:aa:8a:ee:22:0a:d8:c8:13:f3:8b:a9:18:
95:a5:08:54:5c:7b:c5:46:2c:53:34:07:c1:e4:32:ed:16:78:
fc:10:c5:58:09:5a:83:08:8b:c2:f2:e2:7c:a4:b4:ae:4b:40:
b9:c3:23:2d:4d:27:bc:8e:33:ea:97:35:8e:38:06:dc:5c:f1:
5c:cc:97:e0:e7:9b:50:ca:a7:ad:1a:39:b0:3e:77:40:27:42:
84:c4:1b:17:53:2e:d7:6c:73:d6:7d:f0:5d:18:e2:6a:2a:5c:
08:78:5d:2b:f4:2c:8c:64:96:62:7a:e0:f4:99:3d:8c:63:0f:
12:b0:7d:b6:e1:d1:86:bd:ea:68:d0:f1:ed:64:1b:54:2b:f0:
26:af:2b:e4:5a:c1:ee:68:98:ac:12:f7:be:77:be:d4:b0:ad:
3b:cc:98:87:c2:29:97:3d:48:58:c9:e6:79:6b:5a:c3:e3:fa:
d0:07:46:16:13:38:ed:f1:22:e9:77:f8:6c:bd:eb:d1:13:68:
81:9d:77:c6:0e:0d:69:61:b0:c2:8d:d0:af:71:5f:52:52:1c:
b5:05:48:75:4e:fd:2b:4c:0c:28:98:4f:97:d5:68:59:c2:eb:
9c:a5:28:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:36:25 2025 by rpki-client