Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/aR7lbvsTkyREqgkAplpOC95SbRk.roa
File: aR7lbvsTkyREqgkAplpOC95SbRk.roa (raw, json)
Hash identifier: +rIpgoMD1dSvit+Ovfg2sHgm+fmPYzg7J648LEgsh1k=
Subject key identifier: 69:1E:E5:6E:FB:13:93:24:44:AA:09:00:A6:5A:4E:0B:DE:52:6D:19
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 0192B4ACCF59ACF2F22152BCC2A346263EF4
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/aR7lbvsTkyREqgkAplpOC95SbRk.roa
Signing time: Tue 22 Oct 2024 14:41:17 +0000
ROA not before: Tue 22 Oct 2024 14:41:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 45.134.20.0/24 maxlen: 24
2a0e:d787::/32 maxlen: 32
2a11:f885::/32 maxlen: 48
2a11:f886::/32 maxlen: 48
2a11:f887::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Nov 2024 11:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:ac:cf:59:ac:f2:f2:21:52:bc:c2:a3:46:26:3e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Oct 22 14:41:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=691ee56efb13932444aa0900a65a4e0bde526d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:31:47:2c:43:d7:ca:ed:bd:44:49:d7:a8:e0:
f1:af:52:21:9b:82:24:e4:6b:af:6d:86:fc:47:40:
e0:e0:17:2a:f0:f9:1f:9f:9f:d9:b4:ad:db:17:8b:
1d:b0:11:a8:c5:09:64:31:2a:c6:50:24:25:85:f2:
b6:98:1e:7e:40:37:23:80:9c:52:78:ed:a6:36:51:
9f:69:71:e3:82:25:17:62:ab:cb:00:00:0c:91:e8:
49:d0:22:96:88:ed:14:84:f2:5f:b3:70:5d:f6:a1:
0d:79:c2:35:d4:95:c1:10:3e:0f:8d:3a:c2:dd:e2:
bc:cf:7f:b1:3f:60:26:07:36:05:f9:b3:f7:6e:d1:
32:36:64:d5:ed:79:2a:7d:d4:65:92:ba:7e:db:70:
b8:8e:61:b7:dc:b9:76:86:04:b2:a7:69:be:c6:e6:
4e:06:16:d4:cd:77:0a:e4:a1:d2:6f:44:08:0f:ca:
0d:b3:84:13:45:5c:40:e3:ba:c4:0b:b1:4a:29:1c:
27:82:ad:90:66:39:e2:eb:87:b7:2e:41:53:b7:3b:
b7:4c:88:12:a4:53:57:21:7c:13:e7:11:a4:05:df:
95:84:99:bb:0e:01:06:a3:95:f1:0e:77:ce:94:a7:
45:57:6e:5e:f8:d9:a0:da:1a:73:c3:98:0a:fc:24:
db:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1E:E5:6E:FB:13:93:24:44:AA:09:00:A6:5A:4E:0B:DE:52:6D:19
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/aR7lbvsTkyREqgkAplpOC95SbRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.20.0/24
IPv6:
2a0e:d787::/32
2a11:f885::-2a11:f887:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8a:6a:71:74:cb:69:a8:f2:2c:4a:3f:cd:69:2d:e6:a3:0e:d9:
62:c8:71:0a:92:5f:7d:62:1b:0e:8f:82:43:fb:20:1d:e1:ec:
82:71:87:f9:66:c1:82:a5:40:47:f0:8d:0c:79:b1:4a:c4:3e:
2c:5d:55:9d:40:04:c2:0f:2c:0a:b9:3c:9f:0c:a6:99:db:a7:
b3:93:18:d0:de:2d:6a:c1:03:f0:6b:cf:e4:53:33:02:f3:28:
77:9d:8a:c0:ff:bc:20:da:46:0a:1c:68:65:fd:d1:1a:1f:96:
42:14:d1:cd:86:20:19:48:ab:2a:ef:bb:98:a3:3b:04:a7:89:
ea:b4:9c:15:ea:32:fb:a3:ef:4c:35:2d:59:3e:1b:17:0d:69:
62:64:b1:5b:5c:62:ca:52:61:1d:00:89:49:51:7d:2b:d4:f7:
af:ae:db:96:4d:3c:3f:20:9c:4d:cc:f8:e4:b4:fe:f2:a3:43:
af:11:79:87:e1:c5:a5:98:ec:b3:eb:df:e5:6a:ff:5b:47:3c:
70:df:68:a2:c4:66:34:87:c9:9d:e1:82:14:79:11:52:83:0a:
d0:51:a4:f1:85:3b:9a:8a:4f:d2:40:48:e0:a8:22:3b:5e:79:
cb:12:b1:09:a7:a6:c8:26:79:71:99:59:29:3a:cc:42:28:0e:
1e:b0:e2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:31 2025 by rpki-client