Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/CdQraF7f9RV1wKcU-1mzG45Rwoo.roa
File: CdQraF7f9RV1wKcU-1mzG45Rwoo.roa (raw, json)
Hash identifier: EFVWXiY6Q52Tf+Lb85LDYXThn83d3W+2WpbMXL47puw=
Subject key identifier: 09:D4:2B:68:5E:DF:F5:15:75:C0:A7:14:FB:59:B3:1B:8E:51:C2:8A
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 018E488515653A622C167919D5F30BE3236A
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/CdQraF7f9RV1wKcU-1mzG45Rwoo.roa
Signing time: Sat 16 Mar 2024 18:27:45 +0000
ROA not before: Sat 16 Mar 2024 18:27:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202316
IP address blocks: 45.128.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:48:85:15:65:3a:62:2c:16:79:19:d5:f3:0b:e3:23:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Mar 16 18:27:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09d42b685edff51575c0a714fb59b31b8e51c28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:79:ec:2a:be:89:ec:cf:ea:40:d7:cf:9c:
ca:23:9f:15:2b:a4:15:df:19:1a:5d:7f:c9:7d:4f:
b6:dc:2d:c3:3b:b9:6f:e3:3f:f4:28:2f:b4:e0:3d:
7c:4a:c7:92:d3:dd:5c:df:86:a5:4d:b6:38:c2:bc:
a0:5f:35:48:b6:45:f0:99:c4:de:e6:93:43:8a:11:
41:78:5b:5a:f8:d5:a6:15:73:4d:96:51:53:ca:4c:
35:fc:9a:67:ee:ab:a8:4c:38:f6:e5:33:42:c0:f7:
fe:2c:49:55:ea:51:74:ef:d0:ec:e9:4c:4d:8e:75:
5a:75:62:da:ca:92:ed:fe:f8:58:b6:b6:db:ef:81:
36:76:82:f9:7b:a0:53:bb:36:92:58:94:6d:26:b7:
ba:e9:67:6e:3c:b3:96:a3:b7:3c:b0:a4:9e:a8:15:
c0:9d:3e:0c:a1:f8:1e:15:cc:04:28:0a:7c:1d:e9:
ad:82:6a:0c:2a:d2:a7:d3:ab:f4:3e:20:fa:e0:8a:
42:a5:ac:eb:77:c6:31:a3:41:0d:6a:1c:d2:9c:24:
06:fa:2a:de:20:d9:25:15:be:74:e7:59:a9:80:c4:
12:83:1d:7c:e1:be:87:c3:8f:e7:c9:c3:10:fe:cd:
a7:99:1f:98:57:97:ca:2c:2e:5b:19:65:69:71:2f:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D4:2B:68:5E:DF:F5:15:75:C0:A7:14:FB:59:B3:1B:8E:51:C2:8A
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/CdQraF7f9RV1wKcU-1mzG45Rwoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.120.0/22
Signature Algorithm: sha256WithRSAEncryption
31:23:d6:b3:1f:1b:f9:e0:9a:db:cc:35:1c:a8:ed:bb:b8:0d:
03:de:4c:9e:81:a0:90:94:2f:30:91:9c:49:76:6c:ab:cd:30:
39:c9:d8:86:79:34:ee:d7:d4:04:74:ef:bd:5c:78:c6:51:34:
fd:72:dc:69:7c:ee:8c:34:de:fd:ff:40:1e:d3:a6:29:d5:2c:
26:a0:d6:ea:b5:4f:03:a8:d5:77:8c:6e:90:ca:ba:04:e0:11:
8f:91:02:38:82:4d:37:51:c6:71:82:cc:89:4a:b7:66:22:8d:
96:59:7b:e5:8b:f4:79:30:38:47:ea:80:9b:b9:2f:64:50:e8:
07:3a:d6:cf:40:d0:24:47:fc:59:3d:d9:58:9b:90:27:ee:8b:
8a:88:a3:20:b3:2c:11:98:84:fa:8c:b7:3e:6f:27:e1:f4:77:
18:29:cb:ca:06:dd:86:34:23:1d:18:cb:58:8c:63:7d:e9:ea:
b6:09:30:23:f4:71:9f:a0:88:b5:69:f2:f8:48:c2:4a:7c:bc:
ab:de:2c:20:a4:19:81:43:a0:d1:c7:c1:23:4f:5f:31:9b:66:
8f:f0:85:25:ae:f1:1a:85:f9:66:95:81:e0:85:80:d7:83:4f:
25:23:d3:c7:2a:4c:20:f3:c9:94:a3:3c:5c:a0:43:fb:f1:8d:
cf:eb:1a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:44 2025 by rpki-client