Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/sAx_Ju5767suip7jpzl43BgFVCc.roa
File: sAx_Ju5767suip7jpzl43BgFVCc.roa (raw, json)
Hash identifier: fnOVTCCK+DlL9Xv4i+1A6AQZ21yt7ERWM3laKoYRWus=
Subject key identifier: B0:0C:7F:26:EE:7B:EB:BB:2E:8A:9E:E3:A7:39:78:DC:18:05:54:27
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 0193D6C03B35E088A2BA72A40AB74AF7E8DA
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/sAx_Ju5767suip7jpzl43BgFVCc.roa
Signing time: Tue 17 Dec 2024 22:32:22 +0000
ROA not before: Tue 17 Dec 2024 22:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49468
IP address blocks: 45.13.36.0/24 maxlen: 24
45.13.215.0/24 maxlen: 24
45.129.12.0/24 maxlen: 24
45.134.49.0/24 maxlen: 24
45.134.50.0/24 maxlen: 24
45.148.8.0/24 maxlen: 24
193.29.12.0/24 maxlen: 24
193.32.160.0/24 maxlen: 24
193.32.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Dec 2024 21:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d6:c0:3b:35:e0:88:a2:ba:72:a4:0a:b7:4a:f7:e8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Dec 17 22:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b00c7f26ee7bebbb2e8a9ee3a73978dc18055427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:f2:95:92:18:eb:b5:20:12:a1:a8:d1:b8:
94:cc:6b:56:23:34:54:9a:5b:58:b6:00:78:9b:91:
78:88:fc:ce:4d:b3:5f:72:f1:67:25:e2:1c:22:6e:
16:90:c9:82:df:80:38:ad:10:51:87:c2:49:27:7c:
3e:e7:cf:b8:d8:95:ef:2c:06:9b:c3:bf:b1:61:f6:
68:09:9f:25:89:af:2f:86:3d:64:32:fe:5d:98:03:
a4:c7:d5:40:c0:ba:10:b2:40:98:72:02:fe:bb:c1:
09:24:7b:0c:78:29:92:73:46:50:24:12:a6:d2:fc:
dd:ef:92:96:06:c9:8e:fe:9b:de:5e:f8:8e:55:39:
ad:fc:e8:34:34:b8:18:c0:e1:a3:e0:0f:5c:2d:e6:
af:7f:22:75:f7:0e:96:9b:66:a5:68:ad:b8:80:5a:
48:56:63:61:e3:6f:d6:a7:68:fb:0f:5a:1e:40:65:
ab:05:fd:a5:c9:4e:4e:2c:f2:32:de:21:8a:ad:8f:
9e:ee:98:9c:9d:4d:32:5c:70:8d:c0:db:0c:41:be:
79:83:9d:be:0f:06:6e:2e:6d:f2:5f:38:80:23:37:
6a:a9:7f:2a:0f:ac:2a:74:4a:d4:d5:c2:67:e2:43:
e7:b9:e8:21:e0:24:26:cd:ce:47:67:40:47:ab:72:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0C:7F:26:EE:7B:EB:BB:2E:8A:9E:E3:A7:39:78:DC:18:05:54:27
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/sAx_Ju5767suip7jpzl43BgFVCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.36.0/24
45.13.215.0/24
45.129.12.0/24
45.134.49.0-45.134.50.255
45.148.8.0/24
193.29.12.0/24
193.32.160.0/23
Signature Algorithm: sha256WithRSAEncryption
46:f4:8b:5f:fd:a9:df:a6:1b:b9:e1:a8:68:db:ca:53:06:65:
49:3f:e1:96:62:2e:78:8a:a1:d1:23:e7:51:2d:46:b6:b9:af:
9c:73:45:ce:4f:4f:e7:35:75:46:45:1a:54:e4:81:b7:a8:0f:
50:35:bb:4b:8b:8d:01:37:09:30:54:6a:45:0e:8f:71:b5:a1:
d8:a7:d6:dd:a2:58:fc:0e:d0:b6:93:bb:e1:41:e6:7e:c7:c5:
52:f7:70:a7:de:ef:f1:ba:e8:91:64:9a:79:f9:f9:64:99:a9:
86:78:cb:6b:0d:85:80:20:e0:16:77:b8:bd:2c:80:08:16:da:
a3:30:5f:a1:48:b1:ef:98:90:02:4c:b0:ef:38:8a:2a:50:21:
d4:97:41:6f:d6:48:85:72:65:6b:84:06:e6:2b:53:6d:87:ba:
79:47:2b:34:56:a1:df:17:07:e3:d4:52:7f:58:8c:42:05:88:
bf:c3:a8:5d:69:5b:cf:8a:f8:59:68:5f:2c:13:b8:36:89:66:
73:f4:ae:f6:ba:c2:c3:96:e8:fd:c8:6b:a6:50:e4:20:85:52:
92:16:aa:fe:1e:ce:79:08:29:93:ab:30:1d:58:bc:62:02:58:
d3:d5:19:8d:e9:c2:2d:67:58:3f:00:1d:56:3d:25:2d:8a:88:
33:89:b7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:15 2025 by rpki-client