Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/q_9RZlSZYwVVjsxsYA-5ZZzXgig.roa
File: q_9RZlSZYwVVjsxsYA-5ZZzXgig.roa (raw, json)
Hash identifier: c25APMy32P5nHfRn9CKWNeEpBx3WcpW6y9W0PnCtp7s=
Subject key identifier: AB:FF:51:66:54:99:63:05:55:8E:CC:6C:60:0F:B9:65:9C:D7:82:28
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 018E148B0E7051A4605C619D0F6C664E5245
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/q_9RZlSZYwVVjsxsYA-5ZZzXgig.roa
Signing time: Wed 06 Mar 2024 16:14:01 +0000
ROA not before: Wed 06 Mar 2024 16:14:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.9.128.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 07 Mar 2024 12:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:8b:0e:70:51:a4:60:5c:61:9d:0f:6c:66:4e:52:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Mar 6 16:14:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abff516654996305558ecc6c600fb9659cd78228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:7d:c8:63:03:77:c4:ea:0f:ac:b8:af:ff:
97:99:05:0e:53:1c:75:e7:68:c9:5e:99:0a:3a:43:
0b:85:ba:f1:86:63:bb:25:a4:02:db:43:d0:e8:99:
ee:03:7b:2c:c3:e0:42:66:49:19:7f:5f:dc:a1:c4:
c8:a6:38:b8:55:f7:41:4a:39:ee:a5:d6:8b:2f:bd:
28:ea:fb:3e:85:f5:d1:3e:cf:fd:cd:a7:de:b3:ea:
ef:8f:32:36:60:46:fb:f9:b1:c7:ab:49:4a:1a:b4:
bb:f2:40:e4:be:45:ba:52:5c:8c:45:b3:16:b8:3c:
3f:11:a1:5d:0c:74:67:36:53:1c:d5:82:c8:84:f6:
0c:01:c3:e9:09:6d:20:7d:4a:a4:79:31:03:85:13:
22:b5:96:ee:4c:03:42:aa:6f:77:c7:04:70:08:33:
5d:62:e2:b5:4c:33:dc:bf:65:ce:e9:65:0c:1c:25:
90:a8:3b:8b:b5:f4:20:80:39:01:03:73:0d:e6:a6:
e3:b5:7f:65:1e:5b:f7:e8:ac:75:e7:ac:77:2f:29:
09:fa:47:83:cb:05:31:47:f2:2f:20:2b:23:60:e1:
7f:bf:25:fe:21:e7:ba:ee:b5:e9:bc:53:fc:89:37:
0b:b2:23:62:83:8c:88:02:80:83:62:ac:9a:27:5e:
6f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FF:51:66:54:99:63:05:55:8E:CC:6C:60:0F:B9:65:9C:D7:82:28
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/q_9RZlSZYwVVjsxsYA-5ZZzXgig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.128.0/23
Signature Algorithm: sha256WithRSAEncryption
10:a2:15:60:ce:cc:6d:88:23:a2:f9:31:dd:d4:7c:41:16:fc:
25:51:32:65:cc:ee:53:b8:83:de:5b:89:8f:e2:52:a0:5c:b5:
7c:dc:09:fd:9c:b9:a9:1e:1e:d1:f3:96:57:c1:ee:91:2b:35:
16:af:d2:a2:3d:f0:5d:c4:b5:c1:4d:07:f8:22:38:5b:83:f3:
e8:9b:a3:4d:42:e3:18:e8:07:34:66:5a:1a:d5:8b:fe:d2:43:
09:f0:37:d2:3e:9f:ca:e3:a4:d0:b4:7a:cd:9c:9b:a7:74:48:
df:ed:93:6a:79:d5:1f:a3:79:f2:02:de:81:b8:2b:1c:cc:04:
e6:2d:cd:4e:b6:25:0c:a3:c0:2b:d7:2c:72:68:84:95:c8:5b:
cb:50:75:90:5a:d2:72:dd:1c:ea:11:02:2f:2b:64:6a:92:25:
02:96:ed:a0:07:d1:1c:86:fb:7f:81:90:82:b2:f1:d1:4d:4c:
84:0b:1c:80:ed:4d:fe:52:34:30:4a:1d:fd:26:24:95:63:a0:
d2:23:ad:80:35:b7:7f:43:a0:94:18:9c:97:7f:8c:2e:67:08:
aa:93:94:54:02:62:22:a5:f5:7d:30:f1:6d:95:65:e8:c6:b8:
10:61:2e:74:f2:6d:c2:e0:fe:70:47:9c:34:f2:6d:f5:36:91:
18:12:47:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:38 2025 by rpki-client