Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/pu3aGSJBjMYq_oG6mxpGODLU5Pw.roa
File: pu3aGSJBjMYq_oG6mxpGODLU5Pw.roa (raw, json)
Hash identifier: HEnKPz80UQ6ZjlxRt0pIujdw2+tUjbzs9NNh4tVz958=
Subject key identifier: A6:ED:DA:19:22:41:8C:C6:2A:FE:81:BA:9B:1A:46:38:32:D4:E4:FC
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 018FA09C8289A6BBE3706C1D0BE529447938
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/pu3aGSJBjMYq_oG6mxpGODLU5Pw.roa
Signing time: Wed 22 May 2024 14:02:42 +0000
ROA not before: Wed 22 May 2024 14:02:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201115
IP address blocks: 45.157.175.0/24 maxlen: 24
2a13:3840::/39 maxlen: 39
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:9c:82:89:a6:bb:e3:70:6c:1d:0b:e5:29:44:79:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: May 22 14:02:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6edda1922418cc62afe81ba9b1a463832d4e4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e5:d0:38:69:2e:55:6a:44:a0:ef:3e:8c:ab:
d3:27:0d:f4:20:25:5e:45:bd:19:40:dc:cb:39:3c:
6e:f5:e3:53:3f:61:a0:cf:81:81:ee:4e:74:31:29:
72:36:d6:69:07:03:a2:b1:73:b1:72:bc:72:56:e2:
12:82:6a:60:45:47:b5:d0:61:54:5a:19:8d:d4:3b:
dd:c5:57:43:a4:b1:16:eb:98:78:88:6c:65:38:d1:
91:5c:e6:39:56:c9:62:1d:06:18:16:af:0f:c5:d4:
1b:17:e6:5e:89:d8:eb:fe:90:3e:05:0c:9e:fc:16:
ff:43:43:96:c3:ce:59:b2:29:99:97:9f:5d:2f:15:
e0:61:54:e7:31:de:05:20:43:4a:26:4a:fd:38:62:
75:52:79:71:a8:c8:54:e9:bd:16:15:b8:27:9d:e9:
75:3f:cf:b0:e4:60:0a:16:a2:42:9a:0c:18:97:8a:
32:b7:4a:78:ab:81:27:4f:b3:69:a7:e1:b6:f3:b1:
75:66:ee:19:94:9c:89:81:e1:68:e6:af:9a:28:b5:
4a:a1:8b:92:2b:e3:03:f7:9d:db:c3:80:8a:2a:47:
1f:63:70:2c:46:e6:b4:f9:6c:46:f7:9f:8a:8d:53:
c2:75:a6:c5:da:5e:2c:b3:dc:3a:f1:49:77:63:a9:
c6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:ED:DA:19:22:41:8C:C6:2A:FE:81:BA:9B:1A:46:38:32:D4:E4:FC
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/pu3aGSJBjMYq_oG6mxpGODLU5Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.175.0/24
IPv6:
2a13:3840::/39
Signature Algorithm: sha256WithRSAEncryption
51:66:a4:d4:ac:6a:0e:c6:f3:45:c7:75:58:c8:b6:51:dd:ba:
a8:79:1a:59:dc:ce:20:87:ed:96:c0:53:f7:b7:70:1d:80:1d:
19:07:ca:1e:e7:dc:28:1c:e7:99:f4:08:a4:93:4c:a7:e4:f5:
a4:fb:ce:a7:ff:37:04:8d:90:26:32:e5:13:f9:de:8e:34:da:
e9:09:f2:dd:69:d8:a4:7d:f0:31:ad:2e:c2:28:b8:6c:47:7b:
2b:2a:b2:f1:10:6d:18:1c:9b:25:de:2f:31:b1:67:d0:9c:43:
51:4d:14:11:71:af:31:19:eb:8c:77:23:4b:17:44:93:bc:69:
ed:18:38:c3:60:89:3b:0e:99:d7:e1:da:7c:a2:be:34:40:6d:
9e:2f:8d:72:62:c5:c8:da:5e:c4:8d:cf:5a:13:21:a1:0a:c0:
d7:53:a7:61:75:1f:a1:03:d6:c0:0a:d2:c0:12:0c:45:a2:93:
a6:d7:a3:e3:80:4d:0d:33:88:35:61:ba:fb:17:ec:73:23:52:
9f:7c:88:97:e7:18:09:cd:3f:67:0b:ce:dc:69:73:db:ac:91:
6d:8b:9a:78:ce:09:37:02:4f:53:58:a1:1c:da:12:df:53:f6:
a2:42:4b:1a:17:69:6b:1f:aa:e5:89:be:3c:97:8c:44:e4:81:
a1:1c:20:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:56 2025 by rpki-client