Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/26UVBofgdxEQ3z-mbP4Lm2UwH0Q.roa
File: 26UVBofgdxEQ3z-mbP4Lm2UwH0Q.roa (raw, json)
Hash identifier: bl4MqUepM0ji76guRYfFhQ/ZA3JMR6YMKzI+VZB8nmU=
Subject key identifier: DB:A5:15:06:87:E0:77:11:10:DF:3F:A6:6C:FE:0B:9B:65:30:1F:44
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 0192338E2E3A6D92B7AF59B2E24BB66C9091
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/26UVBofgdxEQ3z-mbP4Lm2UwH0Q.roa
Signing time: Fri 27 Sep 2024 12:56:48 +0000
ROA not before: Fri 27 Sep 2024 12:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5398
IP address blocks: 45.90.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:33:8e:2e:3a:6d:92:b7:af:59:b2:e2:4b:b6:6c:90:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Sep 27 12:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dba5150687e0771110df3fa66cfe0b9b65301f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:2b:ac:fa:70:2f:7c:d5:9f:cc:ea:f7:80:
da:f1:93:7e:80:b8:ea:12:4a:7f:3a:2b:76:52:6e:
58:2f:ba:7b:95:c8:a0:86:cf:06:c4:1a:d5:3b:88:
33:02:ee:a7:ce:be:47:f8:68:3d:a9:60:7b:cb:45:
b0:00:b2:46:c9:0c:a3:54:bc:0f:5d:c9:86:16:d5:
49:cf:0c:a1:88:f5:ca:49:c5:3c:29:13:bf:bd:47:
75:7b:75:ff:cb:68:8f:5b:8c:90:c2:e9:56:f9:d8:
7f:d8:13:73:7e:3b:c8:9e:9b:bc:dd:38:bf:fd:a3:
7f:74:0d:56:8f:c6:ea:c6:cb:cf:4b:3a:e9:d4:38:
9a:7f:17:38:b7:f6:f5:31:30:5d:19:37:cf:64:2d:
fb:44:51:b9:b0:e9:35:e1:0e:06:a1:bd:2f:8a:6f:
77:9f:d2:3b:f0:8a:6a:c1:ae:e8:d5:e4:1a:5c:1c:
81:43:8e:d9:c3:51:da:bc:0a:2b:e5:fa:b8:d6:6e:
62:39:2d:92:70:48:bf:d6:d8:73:23:e0:e2:0a:da:
26:c9:17:ca:99:0e:e1:af:2f:af:0b:0e:a5:36:d4:
a5:c4:ae:29:25:33:00:83:48:6a:f9:2f:40:74:43:
c1:63:2f:e8:a9:e2:bb:29:94:cf:f3:3f:96:32:95:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A5:15:06:87:E0:77:11:10:DF:3F:A6:6C:FE:0B:9B:65:30:1F:44
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/26UVBofgdxEQ3z-mbP4Lm2UwH0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.156.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:3c:5c:1c:ad:a3:c8:ab:55:91:53:fe:51:64:81:21:7e:71:
20:0f:55:e3:e5:36:41:80:fd:cb:4a:f5:8f:b8:bf:49:d2:3f:
a6:5a:3b:38:a1:09:d1:da:86:26:f7:23:53:fe:b0:6c:77:a6:
92:7a:1a:e0:92:c4:97:79:e9:84:f9:d6:10:26:2b:34:e5:a7:
f4:04:0a:51:0c:e1:d5:85:9a:47:fc:ff:fc:67:05:d0:f5:86:
25:59:3e:2a:97:91:b1:e9:ff:52:71:8e:4f:05:e1:20:96:02:
e1:6d:24:d0:e7:96:42:d1:a7:5a:35:05:b0:35:f1:a1:6c:7f:
88:7f:a2:24:a9:3f:41:42:a2:61:d2:b0:86:ab:d6:a9:24:0e:
75:93:22:f4:5d:8e:af:49:84:59:e1:89:d1:17:c4:95:8b:9a:
5f:91:9e:2a:79:2f:dc:22:47:29:09:d1:e4:1a:a3:86:b8:aa:
9b:df:ac:8b:63:6e:f4:8f:47:3a:ef:8a:83:39:28:72:d1:a8:
1d:bf:b0:06:08:92:24:77:85:b1:24:ba:bc:ec:55:4d:8c:fb:
ee:0e:59:7b:2a:81:3c:f7:dc:7a:4e:f8:40:ea:30:7c:7f:c4:
8a:fe:71:bc:c3:07:00:1b:bf:fe:4f:68:fc:65:5b:73:bd:f8:
da:7f:db:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:36 2025 by rpki-client