Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/3yFNyHgLhDWf4AkGEPDv8nitqiM.roa
File: 3yFNyHgLhDWf4AkGEPDv8nitqiM.roa (raw, json)
Hash identifier: FixuJt1Efz4Ak3z30VURF1OCfZE8eMe4igyUnSzLOH0=
Subject key identifier: DF:21:4D:C8:78:0B:84:35:9F:E0:09:06:10:F0:EF:F2:78:AD:AA:23
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747E6097AAF8999814BA048A6794DCB
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/3yFNyHgLhDWf4AkGEPDv8nitqiM.roa
Signing time: Thu 02 Jan 2025 13:50:10 +0000
ROA not before: Thu 02 Jan 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209594
IP address blocks: 45.90.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Jan 2025 17:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e6:09:7a:af:89:99:81:4b:a0:48:a6:79:4d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df214dc8780b84359fe0090610f0eff278adaa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:49:9d:22:50:b6:76:cc:35:01:d7:ea:98:93:
8f:48:85:cb:d1:69:db:f6:a6:98:f1:3d:39:41:65:
7b:3f:f1:9e:25:3e:8b:7a:09:5c:c6:d9:e5:29:d2:
83:92:f5:91:96:d0:67:5b:7d:61:1f:28:68:33:6d:
4e:60:a3:e4:94:5d:78:d3:8d:2e:3b:e5:2e:99:7e:
c4:de:74:e9:5b:4a:4a:e3:f1:06:da:03:d7:49:b3:
3f:61:60:db:97:46:0f:5f:80:5e:87:b9:62:76:62:
49:62:0f:44:47:47:bc:4e:b4:93:62:cc:fa:48:42:
d8:e1:4f:cf:c5:41:c5:bd:d4:b8:50:6c:7b:58:ad:
f3:39:ad:35:fe:1d:5a:72:5b:7d:a3:85:b4:13:45:
cf:99:b7:07:6e:a5:5e:d2:26:fa:d8:f0:54:4b:9d:
4f:e4:35:d0:d2:76:da:72:06:5f:b2:96:b2:e7:87:
a0:2e:91:1b:99:4c:da:71:55:be:9f:de:b3:e2:56:
95:39:35:3b:63:18:d2:e4:da:56:ad:4c:d5:2b:d3:
94:28:5f:bc:8e:08:8c:39:0e:79:fb:5c:96:44:a7:
20:ca:a7:0c:bd:a6:fd:b3:26:77:39:b1:98:a9:81:
bf:87:af:f8:4e:3e:37:dd:93:fc:91:bc:ab:f8:5b:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:21:4D:C8:78:0B:84:35:9F:E0:09:06:10:F0:EF:F2:78:AD:AA:23
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/3yFNyHgLhDWf4AkGEPDv8nitqiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.146.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:8e:f1:e7:7b:d8:65:53:4c:04:5f:50:e2:9a:25:44:94:b9:
2a:3a:1c:6f:bc:c2:96:59:a8:ad:d8:55:e9:74:a3:3a:3b:ab:
87:38:25:80:3c:79:0a:13:37:3b:a7:9c:dc:bb:a7:fe:ae:2d:
1d:61:5e:f6:48:1a:08:87:70:c0:b9:1e:31:f1:70:dd:5a:85:
8f:4d:c2:3d:b1:52:12:bc:7f:2b:e7:f0:2c:bd:49:b3:e9:82:
2c:64:25:03:50:cd:20:37:ec:fa:74:78:fe:a0:22:43:6f:f9:
57:4c:9b:53:7c:6e:33:09:39:63:22:af:db:19:ae:85:da:23:
61:4a:72:cf:06:9e:ee:ca:55:ab:72:91:2d:42:72:e9:de:ac:
10:3d:79:01:c9:6a:3c:03:a4:58:c4:74:3a:7a:2f:70:9c:08:
80:08:f4:94:4f:6b:08:ae:6e:42:bc:62:ea:37:e9:26:16:32:
d6:ab:2f:6d:5b:e2:17:c7:50:f4:e7:fe:c1:79:1a:6e:35:7e:
44:35:34:ac:7b:2d:0d:93:62:f3:f8:4d:45:60:24:7e:a9:25:
1e:b8:b0:d3:9f:c0:7c:bf:12:ec:ad:41:ed:f5:60:4e:bf:2a:
cf:ad:78:f4:be:cc:34:28:68:e1:e6:62:08:25:5d:4c:d1:f8:
d0:5b:fd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:26:25 2025 by rpki-client