Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/eiKGuabjfwVkoYfAevz5SMLU0_Q.roa
File: eiKGuabjfwVkoYfAevz5SMLU0_Q.roa (raw, json)
Hash identifier: xh5aA/2IfJC/V4DWPqruqAEDi245oOL8wxF+pl2eGX8=
Subject key identifier: 7A:22:86:B9:A6:E3:7F:05:64:A1:87:C0:7A:FC:F9:48:C2:D4:D3:F4
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 0193FD09D187A05009B6EF2E95A5EB957E6C
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/eiKGuabjfwVkoYfAevz5SMLU0_Q.roa
Signing time: Wed 25 Dec 2024 08:58:19 +0000
ROA not before: Wed 25 Dec 2024 08:58:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202651
IP address blocks: 45.143.29.0/24 maxlen: 24
45.143.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fd:09:d1:87:a0:50:09:b6:ef:2e:95:a5:eb:95:7e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Dec 25 08:58:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a2286b9a6e37f0564a187c07afcf948c2d4d3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:87:61:1d:cc:2b:df:8b:7a:fb:95:71:93:f8:
e3:ad:e6:f8:25:03:8d:1c:f2:b7:33:e0:b9:f3:36:
ad:72:36:c9:cf:40:56:36:ed:2d:41:b2:77:d1:1c:
cd:8f:c5:e6:72:14:5d:8c:95:c3:7e:1f:ae:dc:eb:
49:1a:9c:d5:2d:0b:29:13:4e:cc:fd:2b:09:00:fe:
0b:a8:1e:53:19:77:4e:09:1f:55:b1:79:c6:7a:bd:
53:e6:d0:05:ac:12:18:45:26:fb:67:76:2b:9f:e7:
69:cb:f6:66:b5:37:97:3b:54:8d:e8:53:8e:bd:27:
59:ff:5b:2c:6a:31:ca:67:92:9b:62:77:82:0e:46:
20:59:20:15:da:ef:9c:3e:0f:44:91:34:54:e8:86:
8b:7c:60:00:ab:ea:f6:14:ec:e2:d8:20:71:56:2d:
3d:31:53:36:96:c7:86:07:78:9c:88:3c:60:63:8a:
0c:c1:6d:a6:8d:02:97:9b:87:b7:d3:0d:8c:f7:44:
5f:cd:bb:01:f1:37:9a:fb:fe:59:44:df:d9:8d:05:
86:98:0f:bd:d5:58:e6:66:8b:2f:50:40:26:12:64:
8f:b2:5c:57:f9:ad:f7:9b:c9:da:39:6c:04:7d:e1:
58:33:08:79:f8:ba:19:53:85:43:6c:e3:a9:30:0d:
48:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:22:86:B9:A6:E3:7F:05:64:A1:87:C0:7A:FC:F9:48:C2:D4:D3:F4
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/eiKGuabjfwVkoYfAevz5SMLU0_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.29.0-45.143.30.255
Signature Algorithm: sha256WithRSAEncryption
1e:40:07:af:9a:b2:78:51:81:66:76:ce:8c:b0:f4:da:65:c9:
5a:ed:c9:e5:06:7a:69:df:b1:9d:94:ba:bb:f5:41:c3:4a:3e:
2e:32:7d:3b:04:6c:ef:5a:1c:ec:18:7f:9e:9a:55:ef:02:60:
8c:50:c4:dd:e6:2c:4f:be:a6:27:50:bf:8a:55:9d:72:78:4e:
ed:ee:bf:4a:85:23:60:da:d6:20:b5:d8:ec:a6:05:b2:72:e8:
de:cc:d5:77:33:ca:45:f2:29:05:b9:26:20:b9:b5:7b:1b:cc:
40:97:b6:a2:92:3e:6e:6f:c9:f4:25:f1:3c:98:f5:14:18:1c:
a7:72:54:a9:f0:ad:1d:04:88:82:e0:18:34:cf:ca:c9:c0:d5:
e7:88:b5:ac:a9:b0:41:22:cf:b3:45:3f:18:8f:80:2c:f1:71:
3b:fc:f2:50:c3:a4:fb:a2:b4:17:24:3f:87:80:8a:8f:92:25:
08:e6:83:fa:02:4a:ef:a8:50:22:95:ca:70:29:3d:36:b7:45:
fd:6d:cc:a7:56:6a:f2:38:c7:09:2a:45:b7:81:1f:88:24:58:
3c:ae:c9:b3:b2:cf:9d:9a:e4:de:3e:10:f8:c9:bc:6b:da:96:
88:88:49:f7:ad:58:95:32:84:d3:eb:d2:b4:c4:06:55:ae:31:
b8:34:74:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:25:17 2025 by rpki-client