Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/r-m_8LKnNq84VbvzLye_S6ae8Tc.roa
File: r-m_8LKnNq84VbvzLye_S6ae8Tc.roa (raw, json)
Hash identifier: C6hsQlrxTKSfZNVNbUKibO2NTzQOJbEf63GYItP1wfc=
Subject key identifier: AF:E9:BF:F0:B2:A7:36:AF:38:55:BB:F3:2F:27:BF:4B:A6:9E:F1:37
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0191E4F4B9A2F6839AE670D64B7084D40C8C
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/r-m_8LKnNq84VbvzLye_S6ae8Tc.roa
Signing time: Thu 12 Sep 2024 06:38:49 +0000
ROA not before: Thu 12 Sep 2024 06:38:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.129.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:f4:b9:a2:f6:83:9a:e6:70:d6:4b:70:84:d4:0c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Sep 12 06:38:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afe9bff0b2a736af3855bbf32f27bf4ba69ef137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:b6:55:bd:2a:56:5b:a9:ca:a0:72:53:2e:
76:fa:08:4b:f8:7d:00:8b:07:d4:b9:4a:55:12:cd:
21:b9:43:ef:66:6a:2e:4b:d5:3e:89:9a:56:b3:e6:
96:af:5c:f9:9c:c2:15:9a:cb:cb:46:01:5a:1d:ee:
20:a3:aa:7f:08:08:cb:e4:94:70:30:46:0d:52:1e:
26:43:00:41:c8:c6:ad:31:f6:21:8b:bd:a1:2b:a0:
a8:f9:9a:2c:ad:22:be:d1:80:06:e9:cf:ad:3f:ff:
04:78:3a:63:f0:5e:86:ee:e3:24:d4:f8:cd:19:82:
8b:bb:ad:3e:1f:6c:e8:31:8d:ff:ba:2c:93:90:90:
7f:06:df:b6:0a:df:bc:ae:1a:cb:29:f2:0d:50:fb:
13:07:fd:dd:e3:13:4b:91:e9:80:ae:3c:5e:ba:33:
92:7d:ea:70:60:d5:6a:db:0b:56:3e:c4:61:04:92:
f0:d2:e2:80:1f:cb:54:be:f7:fd:85:62:51:90:22:
af:c0:a7:99:75:bd:92:60:9c:90:5b:04:40:15:cf:
fa:e8:af:96:da:c4:ae:eb:85:66:55:44:4a:e5:e1:
14:95:5b:79:cf:cd:6f:a8:5e:60:46:8f:78:a1:d5:
0f:99:33:2d:d9:04:08:92:12:54:44:26:84:4e:b2:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E9:BF:F0:B2:A7:36:AF:38:55:BB:F3:2F:27:BF:4B:A6:9E:F1:37
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/r-m_8LKnNq84VbvzLye_S6ae8Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.242.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:91:0e:c3:15:0b:8d:af:90:dd:fc:7e:9b:e5:fd:8e:3c:53:
e5:27:bf:9f:57:8f:d8:f2:7f:ae:ad:ca:6a:65:c6:45:fb:a8:
24:09:78:c4:74:df:c8:7c:4d:a7:e5:e7:21:69:d6:d1:43:5d:
93:0c:2c:0f:28:46:74:57:42:fe:f8:90:9e:db:91:a1:36:cc:
87:0e:7b:5b:0c:73:95:8b:3f:76:fe:e4:29:14:b6:51:56:62:
c4:84:90:27:6d:c7:d8:73:43:35:5c:17:6e:9f:1c:66:e4:0c:
7f:1f:f9:84:8b:2c:c6:76:ca:ba:9e:36:9e:2f:8d:6d:36:f1:
f0:73:b2:e3:bf:0a:fa:2f:86:2d:a1:82:8c:a5:bc:25:12:f4:
89:d7:67:1a:42:31:8b:1e:15:02:9d:9c:8e:d8:d4:cb:2b:b9:
fc:5b:02:05:2d:4d:e8:1a:9d:a4:ef:c2:4b:be:8a:2b:d8:15:
ea:ab:df:fd:1d:a7:09:d5:dc:81:5d:c1:c5:26:e6:ce:2a:72:
c4:f2:64:2a:35:f0:2d:5b:69:30:e4:c7:5c:29:06:e6:1c:ed:
22:82:d7:3b:82:c9:70:76:ee:13:84:d2:19:2e:cc:c9:14:34:
e4:34:d7:a7:81:20:bd:f1:5e:45:80:33:bc:f4:eb:46:d4:df:
14:58:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:00 2025 by rpki-client