Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/eP6ttyEwdu-vuqXGmSro1sJiDYI.roa
File: eP6ttyEwdu-vuqXGmSro1sJiDYI.roa (raw, json)
Hash identifier: p2pmi8/eHMTFqS2D+03/t9H9/khYe6lng4VyYo2vQ+s=
Subject key identifier: 78:FE:AD:B7:21:30:76:EF:AF:BA:A5:C6:99:2A:E8:D6:C2:62:0D:82
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 019425213D022A02A6999404E161FA106763
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/eP6ttyEwdu-vuqXGmSro1sJiDYI.roa
Signing time: Thu 02 Jan 2025 03:48:42 +0000
ROA not before: Thu 02 Jan 2025 03:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32167
IP address blocks: 45.148.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 11:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:3d:02:2a:02:a6:99:94:04:e1:61:fa:10:67:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jan 2 03:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78feadb7213076efafbaa5c6992ae8d6c2620d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c6:20:6f:7f:de:cd:11:e8:90:df:5f:63:d5:
be:22:3a:fc:c8:aa:d1:f7:d8:1d:68:f5:85:8b:d9:
de:3e:7e:96:3c:01:b3:eb:3c:c4:72:90:3b:e1:01:
a7:92:d5:32:12:30:4d:2a:ad:dc:d1:52:50:f3:2a:
dc:f8:84:21:d3:be:eb:9c:13:62:1c:3c:d3:a7:4e:
fb:61:c0:96:39:b9:4e:ed:cc:f4:68:b0:ad:16:e4:
5d:8c:6d:9f:81:0b:ee:85:6a:45:ca:0c:5f:f9:cf:
67:de:ef:6f:a2:b8:3c:ab:82:b7:33:17:b6:5f:de:
46:4d:65:5f:aa:ea:a3:3a:3d:3c:2a:c2:8c:c1:91:
0f:c3:16:03:03:36:1c:98:16:38:8e:3f:d6:7c:e8:
82:40:37:e6:ac:d8:5e:90:3c:bb:a6:de:ed:0e:c3:
c9:60:1e:18:49:48:00:c7:01:a6:5c:17:0c:f8:15:
c2:14:8b:de:28:92:38:a5:59:30:d2:50:a1:09:ad:
c7:3a:0d:c2:da:de:09:ed:49:ce:86:b0:74:e5:97:
11:e2:53:e4:11:50:6d:a6:e4:8b:50:73:c9:ac:f6:
09:e5:dd:cc:6e:65:25:e2:0e:43:71:15:e6:6d:16:
e1:47:01:d2:01:da:7a:d1:a5:2e:8f:62:95:7d:36:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FE:AD:B7:21:30:76:EF:AF:BA:A5:C6:99:2A:E8:D6:C2:62:0D:82
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/eP6ttyEwdu-vuqXGmSro1sJiDYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.132.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b4:46:0c:c0:99:95:2b:c8:60:ff:f9:bd:4c:c3:98:19:c6:
fe:33:9f:6e:c7:19:50:9e:47:87:a3:73:21:f5:1b:65:9a:09:
4c:ba:b9:41:3e:6d:a2:7b:27:69:42:26:32:74:74:a5:58:1f:
db:e8:88:3d:77:81:b9:57:fd:11:48:62:7e:b0:68:b8:6e:7a:
68:ad:de:d8:f9:40:64:4a:e0:08:5d:1e:8c:9a:d2:7c:1e:37:
cf:1b:0d:94:65:73:dc:67:af:c3:67:d7:cc:b0:5c:e9:20:c8:
08:73:94:b8:f2:5c:6b:f8:5c:ea:bc:cb:85:ac:43:69:3a:9a:
f5:4c:95:f0:50:78:0a:f7:62:26:ce:35:ee:2b:42:87:45:d9:
ac:c6:5f:15:45:69:8a:6a:fb:9c:45:5f:37:dc:49:c7:46:94:
02:f5:89:04:e6:fc:b5:89:89:c4:ab:fb:58:f1:70:b3:15:0b:
05:0f:af:52:9f:44:fa:c0:60:8f:7b:08:f9:58:41:25:38:10:
7b:b4:3b:ae:d3:89:e0:0d:62:32:18:9f:4a:8a:79:81:68:ce:
de:a5:39:a7:da:2f:b7:3a:7b:69:ad:cf:28:cd:e2:4d:26:2b:
e4:f3:01:f5:7d:65:f2:3c:46:8f:dc:a1:8b:1e:4d:a0:32:35:
81:b7:88:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:09 2025 by rpki-client