Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BeYtdbunAF2GcGUfN8gbjXMVt7E.roa
File: BeYtdbunAF2GcGUfN8gbjXMVt7E.roa (raw, json)
Hash identifier: AzLWvG++fo/VCBCm6V+BHiegn1QT+O8ggoVY0kI1AUc=
Subject key identifier: 05:E6:2D:75:BB:A7:00:5D:86:70:65:1F:37:C8:1B:8D:73:15:B7:B1
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427488F9A199B6FD7E96137C8FBDD3F0C
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BeYtdbunAF2GcGUfN8gbjXMVt7E.roa
Signing time: Thu 02 Jan 2025 13:50:54 +0000
ROA not before: Thu 02 Jan 2025 13:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61112
IP address blocks: 45.92.218.0/23 maxlen: 23
45.92.218.0/24 maxlen: 24
45.92.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Jan 2025 09:45:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8f:9a:19:9b:6f:d7:e9:61:37:c8:fb:dd:3f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05e62d75bba7005d8670651f37c81b8d7315b7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:04:0a:33:ec:2f:6b:49:6e:3a:16:da:8f:
74:77:20:fd:6e:97:02:8b:6a:c6:7f:27:2e:fc:89:
cb:3c:d8:f3:47:4e:d0:5c:5b:9b:77:2c:98:0f:d5:
f2:63:5d:1c:e1:a7:63:b8:ac:08:55:b9:84:7b:e2:
a9:a7:70:cf:ce:a2:9b:78:56:99:8f:4d:ce:e8:db:
85:3f:a0:cd:b7:69:4a:49:7d:77:11:87:d8:6c:b1:
93:e1:5b:27:cc:e4:de:8e:80:f5:02:e8:08:31:90:
88:e9:0a:5e:ee:db:33:fd:e3:8e:bb:a7:a3:eb:3f:
70:22:a0:1a:68:e3:5e:a0:ba:98:40:f0:47:55:26:
c6:6e:5e:93:8f:8f:b3:8d:b7:e2:8a:74:21:4e:1b:
18:b3:ef:2d:a4:4e:4e:55:7c:be:fe:c8:15:65:2b:
69:03:9a:bf:d9:f0:60:5c:4c:5e:f3:29:60:5e:ab:
d9:fb:ee:88:37:f9:bc:8d:62:52:1a:a8:59:63:27:
0a:7a:b3:fb:91:2d:16:6c:2d:56:dc:f3:75:c2:12:
2c:d3:97:79:41:50:5c:cf:97:c0:d0:cb:2d:3f:54:
57:ba:cb:d9:d1:b7:70:36:c7:7a:d4:3c:29:ec:72:
e6:80:f7:e0:71:81:08:93:d7:d5:9f:ca:2d:60:c0:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E6:2D:75:BB:A7:00:5D:86:70:65:1F:37:C8:1B:8D:73:15:B7:B1
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BeYtdbunAF2GcGUfN8gbjXMVt7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.218.0/23
Signature Algorithm: sha256WithRSAEncryption
65:60:e0:73:b1:d4:12:15:bf:7b:f4:9b:74:ec:dc:cd:e7:64:
79:93:e8:23:33:f4:3d:e7:17:da:5c:cb:83:3f:42:ae:d9:fb:
07:f6:85:24:00:8c:e8:c8:3f:3e:44:a6:e9:a3:4b:65:38:c5:
47:92:13:53:6b:15:d3:a8:db:08:fe:bd:63:20:09:75:e2:71:
a8:2f:e2:18:09:2f:d3:70:92:32:6a:1a:cd:20:4c:eb:f0:dd:
82:1e:08:67:4f:22:1d:be:82:b5:91:cd:26:51:3f:e8:3b:74:
6a:c4:6c:34:59:76:c0:c8:ff:cf:1f:7b:6d:1e:e9:20:07:1c:
ee:19:51:5c:3b:42:f8:9a:04:b4:d4:c8:fb:7f:3d:40:aa:f6:
40:10:e1:4a:46:6c:f8:3a:13:55:c7:3c:ac:c3:7d:3e:ea:e6:
78:81:d5:b2:0f:0f:3a:c4:b9:48:09:d9:39:1d:1b:d6:00:3b:
31:35:d9:6d:d5:21:14:24:1f:dc:f6:5e:b7:51:61:7e:0f:90:
51:c8:cb:18:46:67:f5:e2:0b:d0:1a:c0:14:9c:bc:7b:a2:18:
06:c2:54:b6:6a:ea:6c:0f:35:a8:34:d5:86:43:06:26:78:9f:
8d:3f:cf:60:1e:b0:0b:79:1b:ce:35:45:34:00:36:5f:83:c3:
14:19:a9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:00:19 2025 by rpki-client