Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/H4csY2driwOmAEW2fLY0mgpxPEc.roa
File: H4csY2driwOmAEW2fLY0mgpxPEc.roa (raw, json)
Hash identifier: +cyKCoWbh1NNaysRGYZfyzqSBjFOQ+Lsk+IUNwH2BLg=
Subject key identifier: 1F:87:2C:63:67:6B:8B:03:A6:00:45:B6:7C:B6:34:9A:0A:71:3C:47
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A0A2B964D5596130FE1A6F7505F3
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/H4csY2driwOmAEW2fLY0mgpxPEc.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139880
IP address blocks: 45.135.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 03:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a0:a2:b9:64:d5:59:61:30:fe:1a:6f:75:05:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f872c63676b8b03a60045b67cb6349a0a713c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:22:47:d3:fd:68:60:e7:33:4f:83:ee:c5:6e:
18:38:9a:d7:3d:7a:bc:9e:0e:77:be:88:a1:0c:41:
35:43:0a:af:c7:3b:08:8d:9f:9c:d5:d8:62:a5:f4:
b2:df:da:1d:79:d8:bf:a7:a8:c3:1c:19:fd:b6:a1:
82:2f:ed:1d:9c:60:b2:b3:54:1a:02:cf:77:40:c2:
af:e4:6f:48:69:d8:93:5b:0d:d0:52:d1:32:66:6b:
aa:ba:33:24:12:94:5a:9f:aa:f0:47:f7:4d:82:9e:
67:00:35:c3:f0:23:05:24:e0:0b:21:dd:40:a1:63:
d9:64:22:d6:77:1b:c0:b0:bf:37:65:7e:99:b4:09:
4c:52:b1:14:96:21:4b:db:8b:db:61:32:be:d8:be:
a0:7e:e7:b2:61:73:4b:a8:8d:b2:99:37:1e:7f:1b:
a8:73:69:bb:07:92:f5:d2:21:22:0a:7b:18:6a:fc:
10:09:46:b7:10:a0:10:cb:e4:71:4c:72:ca:9b:38:
7d:f4:3c:e3:a8:ed:19:32:ac:01:6f:26:6d:f7:fc:
1f:33:47:ef:8e:6d:27:9c:61:d3:05:bd:d9:19:66:
d1:94:fb:32:7a:1c:f9:9f:95:90:c7:91:22:50:e7:
01:c6:29:a6:50:59:63:06:7d:5d:fe:10:d1:72:91:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:87:2C:63:67:6B:8B:03:A6:00:45:B6:7C:B6:34:9A:0A:71:3C:47
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/H4csY2driwOmAEW2fLY0mgpxPEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.237.0/24
Signature Algorithm: sha256WithRSAEncryption
78:56:1a:77:64:a7:e8:d8:2a:93:22:3b:ec:b2:11:c6:e1:af:
d7:3f:01:dd:f1:7c:14:21:e0:ad:bc:47:79:e6:ce:dc:7a:ba:
fd:1d:a5:61:48:2e:27:5c:d0:ea:c3:18:93:ae:22:d4:02:fe:
0f:f7:f1:a2:e6:4b:3a:45:eb:7d:b5:17:cd:a4:38:e0:6b:22:
40:1d:92:26:f1:0d:98:32:70:11:46:fb:ec:8d:8f:4a:07:d9:
a5:f9:35:34:45:85:43:91:dd:14:9c:cc:a8:f7:23:03:b9:66:
6a:91:f0:e5:a2:01:90:f1:f3:d0:dd:e4:43:f8:34:3f:27:bc:
b3:83:5e:91:0c:c6:8e:91:b7:16:cd:c4:a0:c9:ca:39:2c:3b:
e0:48:0e:29:38:50:18:7d:0a:7d:24:8c:79:32:69:bb:33:2a:
d7:47:94:51:67:e7:b2:ef:ca:62:73:6f:44:8e:43:70:54:e1:
e8:93:82:80:c7:ab:2c:66:e9:3f:90:91:01:9e:4e:da:84:51:
fe:b2:a8:0e:20:8c:b6:73:ca:dc:2d:98:e7:0a:9a:2f:57:5a:
6e:13:d9:76:1a:bb:30:b5:a6:6d:3b:20:87:8a:ae:9e:a6:62:
1c:a8:be:6b:51:f7:e1:b9:d5:3e:91:d9:38:48:05:1a:6a:c3:
be:30:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:03 2025 by rpki-client