Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/QEbG6e1cV3eMFV9DZvG5_8m9nNg.roa
File: QEbG6e1cV3eMFV9DZvG5_8m9nNg.roa (raw, json)
Hash identifier: TO9vlu7nxD1p5s8bS0q0vVYLA1cWPaflTOLYMoa+Xs8=
Subject key identifier: 40:46:C6:E9:ED:5C:57:77:8C:15:5F:43:66:F1:B9:FF:C9:BD:9C:D8
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 0194258EA7708FEA33614A63F3C93DAB99C6
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/QEbG6e1cV3eMFV9DZvG5_8m9nNg.roa
Signing time: Thu 02 Jan 2025 05:48:13 +0000
ROA not before: Thu 02 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207787
IP address blocks: 45.93.244.0/24 maxlen: 24
45.93.245.0/24 maxlen: 24
45.93.246.0/24 maxlen: 24
45.93.247.0/24 maxlen: 24
2a0e:2940::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 01 Mar 2025 20:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:a7:70:8f:ea:33:61:4a:63:f3:c9:3d:ab:99:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Jan 2 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4046c6e9ed5c57778c155f4366f1b9ffc9bd9cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:ee:a9:ce:f8:59:10:54:0c:59:b2:ae:f7:
e7:f5:53:c8:07:89:4f:ec:ba:9c:a8:c7:fa:f3:83:
f8:79:95:88:de:98:35:1e:d5:be:93:95:6c:e6:1a:
3e:5d:b5:9e:af:8e:81:e5:0f:0c:2e:05:45:17:29:
28:95:b4:26:a4:0c:c9:ad:8d:48:ab:dc:b4:a1:97:
66:88:50:37:35:00:90:5a:bc:a7:b8:50:fd:c1:1a:
51:e0:77:2a:93:2a:2c:65:cd:6b:b7:d1:3a:fe:2a:
97:91:15:59:2f:25:48:01:87:89:35:ab:56:2a:68:
3c:0a:8f:10:72:03:c5:a8:eb:a3:98:9d:de:4d:50:
67:de:4d:31:56:1a:26:c4:0b:e0:3c:38:15:02:12:
e5:9e:fb:c3:7d:0b:5a:45:e0:d0:67:1e:62:c6:2e:
0b:c9:36:1e:ca:2a:bf:74:a7:1c:35:9c:d6:d5:da:
5e:80:f9:b0:9f:2f:27:0a:d8:3c:b3:3d:f9:3b:49:
2f:e2:c3:31:b2:af:1d:68:19:af:f7:01:cf:59:07:
82:50:37:7f:1b:75:4d:da:7e:1d:7b:0c:fc:78:e9:
a5:a9:49:a9:1e:67:2c:37:9c:93:95:b5:65:53:cf:
e2:cf:07:f3:3f:8a:b4:55:d9:c5:54:d3:24:2d:b4:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:46:C6:E9:ED:5C:57:77:8C:15:5F:43:66:F1:B9:FF:C9:BD:9C:D8
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/QEbG6e1cV3eMFV9DZvG5_8m9nNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.244.0/22
IPv6:
2a0e:2940::/29
Signature Algorithm: sha256WithRSAEncryption
5d:b6:68:09:26:01:73:a1:f9:93:b1:c6:cf:df:70:3f:81:7a:
1f:95:12:00:55:a2:3b:d0:94:8e:57:6f:d4:d2:39:05:f4:34:
b0:36:a3:a9:88:c8:cf:c4:65:19:3b:a2:35:ff:60:33:a8:c7:
e0:4c:52:84:f1:9c:a9:24:c7:0e:97:5f:e0:2b:16:05:75:db:
f2:05:c4:5a:2c:81:11:6b:b7:a4:e8:e5:da:aa:d6:3c:34:4f:
9e:c5:1b:6e:8c:fd:11:b0:cd:e7:7d:3f:c1:8d:0b:53:d9:6f:
de:3c:32:48:75:f1:ca:fa:c1:1b:32:3e:ce:ac:77:4d:65:8a:
6e:6c:a7:35:19:54:ad:5d:6f:5b:29:69:46:f6:5b:0e:8f:41:
54:ed:51:c0:0e:62:f8:73:cc:35:e0:40:84:e6:31:a2:22:1d:
e1:f3:44:39:85:b2:b7:30:9d:c0:d5:49:7a:bb:a7:61:ad:e4:
13:00:1f:e9:ad:4d:76:af:a7:06:f6:ce:bf:b2:41:7a:bc:26:
67:42:d1:28:57:68:96:47:a3:75:4b:6a:ec:63:46:d0:44:06:
be:8c:68:45:d2:f7:05:62:e2:e0:42:71:b8:a9:d2:fe:aa:e7:
3b:b1:12:8d:36:8c:1b:2f:29:0b:a7:06:2b:24:87:bd:01:f6:
c2:d5:a6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:16:49 2025 by rpki-client