Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/lfwGDU_gkC6q-dNG17IpZVHgF3E.roa
File: lfwGDU_gkC6q-dNG17IpZVHgF3E.roa (raw, json)
Hash identifier: h11vaHWKtUpdj0IRZw7a/jPcsQV+5OaOL3zgS7PcaQM=
Subject key identifier: 95:FC:06:0D:4F:E0:90:2E:AA:F9:D3:46:D7:B2:29:65:51:E0:17:71
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 018E2D50ACC436BCFFBFA0BF26EB275AA08C
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/lfwGDU_gkC6q-dNG17IpZVHgF3E.roa
Signing time: Mon 11 Mar 2024 11:40:45 +0000
ROA not before: Mon 11 Mar 2024 11:40:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.9.128.0/24 maxlen: 24
45.9.129.0/24 maxlen: 24
45.9.130.0/24 maxlen: 24
45.9.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:50:ac:c4:36:bc:ff:bf:a0:bf:26:eb:27:5a:a0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Mar 11 11:40:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95fc060d4fe0902eaaf9d346d7b2296551e01771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:81:75:ef:2a:33:00:40:fc:ba:70:06:02:
41:4b:d5:e0:38:4e:2b:54:92:e6:d6:d4:c6:f4:d3:
61:09:4c:f2:6e:db:4c:4d:ef:e7:af:b8:70:90:ad:
6f:4b:08:db:44:3d:d7:0a:76:50:6d:ed:e1:3c:eb:
2f:9f:6e:e5:4b:82:da:4b:37:23:56:a6:f0:a1:9a:
df:40:e4:be:42:27:5b:83:5c:d4:7d:e2:eb:a0:2a:
52:4d:55:3c:0b:d1:83:fe:ea:8d:fb:f2:83:e4:a9:
40:11:c6:fa:b3:2b:db:57:4d:cd:42:95:1a:e2:fe:
c5:d0:7f:28:a8:12:f1:67:bc:4a:32:33:40:09:1a:
8f:f0:33:eb:67:b3:34:26:06:61:b7:16:39:c0:7b:
2e:09:62:ea:1b:f4:0d:ca:34:07:b3:07:8f:2a:c5:
e9:53:1f:72:fd:e1:ed:5c:97:0c:24:4a:4d:3f:b8:
a0:b1:86:9b:5b:6c:33:9b:f8:cc:84:8f:c7:6a:a5:
d4:37:3f:a5:97:ac:e4:d1:21:78:9c:8a:dc:e1:c1:
03:a7:b7:8e:e2:60:d2:a8:28:b7:2d:80:ec:3f:85:
00:55:b1:3c:76:ac:a9:e6:ca:e0:4d:a4:22:e7:c0:
5f:58:5e:85:98:84:de:57:40:bd:5c:bd:78:3f:69:
2d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FC:06:0D:4F:E0:90:2E:AA:F9:D3:46:D7:B2:29:65:51:E0:17:71
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/lfwGDU_gkC6q-dNG17IpZVHgF3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.128.0/22
Signature Algorithm: sha256WithRSAEncryption
76:73:46:9a:53:bc:b0:bf:8a:ba:80:8d:c7:eb:4e:d7:82:fa:
fb:79:0e:15:ab:e3:54:e4:f0:5a:e5:79:2c:ab:c3:7b:59:97:
5b:34:aa:41:63:b9:dd:07:b3:63:4f:4a:18:79:71:74:23:7e:
3e:6e:bf:86:5d:9d:9a:46:70:fe:30:ea:b3:05:b5:b9:0c:b0:
ce:d7:10:6d:cb:dd:81:92:f4:a8:22:30:57:d6:87:85:ca:12:
2c:5c:2b:83:f1:a6:33:5d:cf:49:7b:a1:e7:0d:9d:ee:7a:c0:
46:e9:57:42:c1:d4:d7:bc:51:49:b4:b1:d5:71:f5:d2:0c:22:
17:66:69:1e:be:49:c9:11:c4:99:36:80:d3:66:be:bd:35:52:
41:fb:f8:5d:87:4e:86:da:c0:fd:92:a1:5f:d0:31:66:91:e1:
1b:ce:e6:0c:e9:84:a2:41:87:be:53:e0:01:83:bf:56:c6:4b:
cc:2c:52:86:84:79:29:48:4d:ef:47:c1:7b:96:40:2d:31:2f:
10:8f:ab:81:54:1f:06:8a:a3:c8:d2:bb:18:78:02:5c:1b:46:
91:eb:1c:ed:27:53:2a:3d:82:98:fe:7b:4c:c4:06:bb:b6:e0:
75:77:b9:66:87:37:c4:3a:f3:a8:a7:52:b2:5b:b8:4d:36:5b:
e5:60:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:15 2025 by rpki-client