Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/2jYb--HcCGreG2vCrFuPAePBI2g.roa
File: 2jYb--HcCGreG2vCrFuPAePBI2g.roa (raw, json)
Hash identifier: G+LW8zjBPyXtcJJhgAaYBIRzlml1wGb/P5cM6dxyXnM=
Subject key identifier: DA:36:1B:FB:E1:DC:08:6A:DE:1B:6B:C2:AC:5B:8F:01:E3:C1:23:68
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 01947B4FFB5FB4C0BAEF61EB646D13602094
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/2jYb--HcCGreG2vCrFuPAePBI2g.roa
Signing time: Sat 18 Jan 2025 21:27:06 +0000
ROA not before: Sat 18 Jan 2025 21:27:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62425
IP address blocks: 45.89.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 19:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7b:4f:fb:5f:b4:c0:ba:ef:61:eb:64:6d:13:60:20:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Jan 18 21:27:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da361bfbe1dc086ade1b6bc2ac5b8f01e3c12368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:9c:df:08:55:d0:7a:96:e2:3a:26:46:43:
f5:28:26:48:f3:8e:ee:9b:0d:ac:6c:3f:68:89:04:
02:7e:5b:c1:b0:eb:8c:68:45:90:7b:6c:e2:ee:62:
ff:0f:d9:41:92:fb:63:92:de:4a:ff:4d:c1:35:06:
0a:40:95:e8:39:ce:9d:69:0d:56:28:2d:1f:e3:89:
04:47:6a:83:3c:23:4d:54:62:d9:9e:ad:c2:f9:4e:
18:db:77:a0:24:d0:23:0a:f6:88:6c:b2:26:b0:69:
61:dd:d7:fd:8d:8d:3e:18:b2:dd:e9:a5:60:50:ee:
93:f8:bd:b4:d6:40:74:2c:cf:27:32:e7:17:0a:cc:
ec:f5:90:93:b1:27:e5:18:f1:ad:27:4f:1a:4c:a8:
60:f2:19:59:9a:f7:cf:81:ff:05:bf:8e:67:44:24:
79:4c:5b:f9:83:e1:21:d7:49:af:df:e9:a7:fd:aa:
7d:b4:fe:e7:f2:04:ad:79:66:3e:a7:cd:d8:05:e0:
26:68:9b:2e:a6:fe:b2:9a:f7:1e:68:35:af:25:d9:
b4:f2:e0:81:c5:c7:d1:fb:e7:1a:c4:f9:79:70:2b:
0d:1c:e7:f0:bb:b7:38:c9:0a:e8:20:2c:29:18:b8:
7d:13:73:c6:76:ad:51:ca:2d:2b:7c:2c:c8:21:75:
de:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:36:1B:FB:E1:DC:08:6A:DE:1B:6B:C2:AC:5B:8F:01:E3:C1:23:68
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/2jYb--HcCGreG2vCrFuPAePBI2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.223.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e4:8c:39:34:0e:e2:97:2c:0e:cc:01:9c:67:23:42:45:2b:
d7:de:fa:7f:83:00:58:aa:b3:2d:d2:61:83:47:c7:e8:5d:2f:
c5:60:0f:15:76:bd:f1:1b:f5:ef:17:92:9b:ef:54:d2:2f:ec:
23:1c:d6:8a:97:84:ae:ac:ab:7a:06:37:c3:ce:e2:c9:c7:0f:
e4:ad:3a:fe:3f:3a:fc:7e:ba:de:69:63:80:4b:01:6f:ea:0c:
c7:9c:a6:8f:f3:1f:8b:cb:ea:4a:cb:db:ee:56:1d:92:4e:1a:
2d:38:1d:0a:47:84:dc:28:64:0f:b0:5c:66:eb:c8:05:d1:a2:
16:51:ad:51:be:04:cf:bb:2f:f2:28:62:51:79:13:48:31:0c:
0b:de:3e:49:7c:7d:d4:70:49:86:9c:1c:11:93:c6:92:5d:0a:
aa:f6:61:9a:41:66:92:17:0d:32:69:e9:d1:c5:67:01:94:63:
b1:9e:8b:3c:5b:8e:6a:24:ad:0c:ee:8d:92:95:d4:4b:a8:ac:
b8:ee:21:69:da:82:31:c5:9a:53:6f:ce:9e:69:fc:ef:a5:46:
7a:26:37:4f:19:18:05:44:9a:3c:83:80:43:55:fc:af:26:96:
7e:57:65:43:89:d2:58:f0:aa:4e:0e:fe:2a:ba:92:28:a5:bb:
23:ff:42:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:36:12 2025 by rpki-client