Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/8sjTg7TaEKMdcb2U36OvtEsO_VA.roa
File: 8sjTg7TaEKMdcb2U36OvtEsO_VA.roa (raw, json)
Hash identifier: ovDdGtU4cDf9rrRrAZcxVOl7BQc/K1jgjKS7/RILYpI=
Subject key identifier: F2:C8:D3:83:B4:DA:10:A3:1D:71:BD:94:DF:A3:AF:B4:4B:0E:FD:50
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 018DFAC766E8E49D626868D960663791F13D
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/8sjTg7TaEKMdcb2U36OvtEsO_VA.roa
Signing time: Fri 01 Mar 2024 16:09:48 +0000
ROA not before: Fri 01 Mar 2024 16:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204798
IP address blocks: 45.128.120.0/22 maxlen: 24
45.128.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:c7:66:e8:e4:9d:62:68:68:d9:60:66:37:91:f1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Mar 1 16:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2c8d383b4da10a31d71bd94dfa3afb44b0efd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4f:c7:ab:a4:0b:3c:a0:f9:61:20:96:fd:bb:
93:0f:99:37:3d:fd:87:6b:4d:a8:52:5f:22:69:f3:
92:3e:f8:2a:7d:99:c2:51:98:e8:ed:ba:14:0a:34:
d9:a9:fa:92:07:92:ea:b1:78:1c:d3:b8:50:e4:af:
08:f0:b8:6b:9a:34:59:9e:da:35:b9:9a:75:a3:58:
9c:ab:b9:ba:92:f5:0d:ff:b1:25:42:0f:9d:11:0d:
6e:ff:3d:1f:3a:08:c1:bc:9b:79:d5:ed:b9:b5:09:
aa:8f:a6:16:29:f7:74:9e:c4:12:4a:19:c5:ad:c8:
51:c4:eb:22:b7:87:c0:14:94:ef:4d:37:48:09:07:
59:bd:2c:0f:5d:d7:a5:81:a7:64:1a:92:3f:0c:95:
e6:09:65:46:67:c4:a2:80:fc:f1:78:5b:00:09:6c:
62:90:2d:d2:51:9a:2d:1f:74:3d:e3:4c:b6:09:7a:
f8:0f:d2:2b:e9:bc:18:b6:79:54:80:00:b7:f7:81:
72:36:0c:b8:60:ba:c9:db:39:37:2b:64:a9:16:b0:
67:b1:7b:7d:08:58:84:d7:62:cd:39:50:55:3b:46:
70:e0:b0:23:cc:55:6c:09:a2:30:5e:ea:dc:ed:cc:
ed:4a:c6:0a:d3:49:f0:ef:a5:47:25:d8:57:60:6b:
9f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C8:D3:83:B4:DA:10:A3:1D:71:BD:94:DF:A3:AF:B4:4B:0E:FD:50
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/8sjTg7TaEKMdcb2U36OvtEsO_VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.120.0/22
Signature Algorithm: sha256WithRSAEncryption
78:6d:f4:4c:03:c0:51:58:00:5f:66:75:fb:e7:34:d1:66:19:
eb:27:16:7c:5b:ef:4c:61:0d:ca:7e:c5:cc:78:84:cd:8f:d3:
eb:8d:a3:18:4f:85:0f:69:bf:72:c6:e7:eb:49:d7:99:32:81:
67:73:e8:a0:7b:d8:0a:f2:8c:dc:84:42:27:3c:0f:51:91:b3:
b9:8e:e1:d5:7b:3e:d4:7b:ef:05:24:3b:56:cc:b3:34:7c:f7:
4d:e2:89:ae:bc:3c:30:1a:72:80:d0:51:66:3a:fe:34:20:7a:
3c:18:91:32:2e:f6:94:bb:48:e1:fc:32:64:63:33:96:2b:7e:
e0:c2:24:7c:43:5d:01:39:af:ab:1e:9b:70:6f:de:0c:75:e1:
0c:e3:04:b2:07:21:77:49:77:79:14:f2:75:a3:83:ff:98:7a:
8f:2d:ce:bd:37:0e:63:3c:fc:14:c5:01:41:8d:07:af:3b:e0:
ea:3a:94:fb:76:fa:25:4e:84:8d:37:28:e5:16:98:48:b9:e8:
d1:d7:f5:35:da:be:75:b2:45:d8:14:7f:5a:a2:7e:d1:d8:8a:
1b:f7:d6:b9:c7:88:73:b6:5e:53:3b:02:49:74:92:66:81:d4:
d6:c2:21:82:36:32:31:55:69:be:72:b5:02:02:b2:bd:dd:7e:
8f:1d:b9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:49 2025 by rpki-client