Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/UsB9voIvW-QQi4I5dzOHDizGkaE.roa
File: UsB9voIvW-QQi4I5dzOHDizGkaE.roa (raw, json)
Hash identifier: rZwgPkjAlJaCjquAs4bKI4f91EWwvGlUtbFH3cBpfD8=
Subject key identifier: 52:C0:7D:BE:82:2F:5B:E4:10:8B:82:39:77:33:87:0E:2C:C6:91:A1
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 019373CE2519110717D1CB739FA8820C1FB4
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/UsB9voIvW-QQi4I5dzOHDizGkaE.roa
Signing time: Thu 28 Nov 2024 17:25:09 +0000
ROA not before: Thu 28 Nov 2024 17:25:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39238
IP address blocks: 45.153.72.0/23 maxlen: 23
185.183.160.0/22 maxlen: 22
193.109.217.0/24 maxlen: 24
2a05:541:1a1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:ce:25:19:11:07:17:d1:cb:73:9f:a8:82:0c:1f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Nov 28 17:25:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52c07dbe822f5be4108b82397733870e2cc691a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4d:30:62:af:e1:85:78:79:71:df:15:bc:38:
22:13:8a:c3:16:69:bf:10:b1:3e:e6:49:59:ed:bb:
04:ca:53:9f:50:79:55:09:e2:b4:a9:7d:a8:b0:e0:
04:bc:a1:c9:e2:39:87:ba:19:3b:06:10:af:66:85:
4e:9c:cd:ba:38:58:de:45:69:d0:fb:2f:72:0c:83:
9e:3b:62:59:e9:2f:5c:cc:1a:6b:10:61:84:76:d9:
73:e5:b2:d9:07:47:a5:bd:f9:48:df:c2:6a:f5:63:
1d:b5:8c:4a:a9:67:3d:07:ab:01:f7:9e:eb:66:1c:
84:85:7e:f4:34:69:b2:b7:72:f4:d6:0c:9e:de:0b:
46:83:b5:15:36:c3:89:63:da:2f:8f:f8:f2:ec:b7:
f7:a7:a6:7d:5a:f1:68:57:38:62:ab:21:37:b4:0d:
1e:be:64:68:81:98:e3:9b:5c:c6:fc:a8:4e:a7:e2:
dd:e2:8b:fe:d6:f7:c3:0e:2a:a4:6c:6d:01:43:84:
bd:07:08:65:6b:9e:e0:ef:97:15:3d:25:b9:64:28:
b6:77:c8:9a:b9:12:92:e6:78:36:35:28:61:a7:01:
a9:b7:c3:31:9d:9b:87:8e:55:01:6f:e9:2b:3e:ae:
4a:56:fa:65:c8:dc:33:c7:db:a0:5f:a8:66:5f:41:
d0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C0:7D:BE:82:2F:5B:E4:10:8B:82:39:77:33:87:0E:2C:C6:91:A1
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/UsB9voIvW-QQi4I5dzOHDizGkaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.72.0/23
185.183.160.0/22
193.109.217.0/24
IPv6:
2a05:541:1a1::/48
Signature Algorithm: sha256WithRSAEncryption
3f:1d:0e:4d:f8:75:f5:45:4e:ef:b5:08:95:3c:59:b6:65:90:
44:35:0e:7d:7d:fa:c0:b6:93:6b:93:31:52:7d:83:a6:08:01:
08:27:63:ee:f2:71:30:0b:45:f6:55:76:e0:6d:9c:bc:fb:3f:
c5:54:4b:67:d0:b8:7a:bf:69:c4:1a:2b:66:b0:92:3f:5e:1b:
c0:ac:2f:89:4b:14:15:b5:5f:c1:12:ad:85:c7:15:45:d6:fb:
22:e0:ce:56:f1:cb:bf:98:a6:71:ee:6c:d3:c8:57:e1:d9:dd:
8a:2d:57:cf:d7:8f:97:a1:18:4b:9e:67:f1:c3:ad:9b:f9:45:
34:73:57:dc:ed:39:6e:e4:fc:e7:07:e8:98:53:0c:72:bd:92:
6a:c7:23:bb:d3:d4:60:07:64:12:19:f0:93:c7:b3:09:88:5a:
8f:57:75:d0:d8:8f:fb:3d:e2:b6:d7:1b:07:ef:86:aa:68:9f:
ec:a3:83:94:c9:3b:e0:62:ea:30:86:97:59:bb:ad:ec:a2:2c:
07:04:9f:f3:91:e1:06:41:60:a0:5e:5c:2e:9c:97:63:40:41:
74:3c:cb:29:cb:c3:f3:3d:26:ab:31:ad:33:be:b2:03:5b:8c:
16:93:7d:69:6a:a1:69:23:5f:66:1e:96:a6:33:92:48:34:70:
7b:c8:dc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:04:34 2025 by rpki-client