Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/EaYbtvgAxC5woqEEVAOpbufum4I.roa
File: EaYbtvgAxC5woqEEVAOpbufum4I.roa (raw, json)
Hash identifier: 9yX+JRXc/o6dluIoM2HRuHDiv/h/ulHJufCzoxv25mY=
Subject key identifier: 11:A6:1B:B6:F8:00:C4:2E:70:A2:A1:04:54:03:A9:6E:E7:EE:9B:82
Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial: 01941FFA76DBB026D4BD02C343000AA25E29
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/EaYbtvgAxC5woqEEVAOpbufum4I.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 45.87.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 02:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:76:db:b0:26:d4:bd:02:c3:43:00:0a:a2:5e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11a61bb6f800c42e70a2a1045403a96ee7ee9b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:5e:90:46:87:4e:6f:e7:3f:f5:a5:71:a6:
18:96:21:97:f5:9c:98:f6:72:dc:8b:ac:16:41:78:
52:39:47:10:63:4a:42:aa:0e:a3:8d:df:df:ea:0b:
f4:51:82:8e:e0:ea:de:ce:b6:0d:3a:1d:dc:b2:50:
2b:29:c6:b1:9d:b6:67:bf:6f:df:15:a2:43:d0:02:
ed:66:02:18:a8:42:b9:6f:21:35:95:ee:3a:8f:b3:
eb:21:9f:f0:c4:7b:b7:b2:cb:00:06:44:5a:f9:aa:
d2:38:6b:5f:9d:a8:fe:d7:78:2b:fe:54:f9:da:5d:
2f:45:5c:24:00:dc:03:41:1a:d7:6b:7e:50:f4:cc:
6d:6a:7d:f2:8b:1d:4f:52:d2:9f:d4:51:95:87:c5:
50:e5:55:a0:cb:52:23:03:05:a3:b0:1d:39:09:0b:
fb:10:77:23:32:96:fb:0d:c5:51:30:df:d9:66:39:
2c:63:9f:06:fa:91:b9:c3:b0:7d:07:02:01:76:26:
99:52:5f:35:9e:7d:25:c9:2f:a9:32:4d:ae:5e:88:
a7:1d:32:f5:a1:99:38:93:1e:5a:5b:7c:52:c3:00:
4e:88:01:84:8b:53:11:fd:e3:ea:5a:c6:0d:4a:f7:
89:e2:65:9b:e7:b8:88:31:b6:47:be:dd:2e:7b:6d:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A6:1B:B6:F8:00:C4:2E:70:A2:A1:04:54:03:A9:6E:E7:EE:9B:82
X509v3 Authority Key Identifier:
keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/EaYbtvgAxC5woqEEVAOpbufum4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.101.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ca:8e:fa:67:9f:d4:1f:17:78:cf:3c:60:17:c3:2d:7c:78:
a3:33:68:f9:36:19:b6:2e:97:66:d1:62:81:fd:db:62:4f:82:
59:98:85:97:40:e3:cd:8b:22:1d:f1:36:29:25:92:7a:f2:19:
a4:2b:97:aa:73:72:d9:aa:bc:af:2d:cf:ae:db:14:31:2a:f1:
95:96:b6:96:08:7b:cd:b6:6e:b8:2a:84:82:3c:d6:1e:0e:e1:
59:b3:03:15:68:3a:96:87:c8:89:14:0f:92:29:af:d8:1b:98:
4d:cd:4f:14:8a:c0:65:cb:e7:84:91:84:c3:de:45:b0:e5:53:
56:eb:12:c9:39:d2:96:53:a4:de:fb:19:af:5e:ee:c9:23:d0:
dd:76:04:f1:aa:19:9b:5d:11:1a:71:05:8b:01:de:25:63:b7:
95:0f:56:63:c4:2c:30:c4:73:78:44:ca:93:2a:63:5d:98:c8:
09:47:ab:32:ac:30:76:94:b5:c7:ff:49:1b:bc:a5:a8:88:7e:
e1:35:54:5c:5e:05:03:fc:0c:05:ac:04:a7:c3:53:b3:c4:ca:
34:79:c2:4a:7e:af:a4:4a:3f:b9:43:40:93:c6:f4:1c:f5:43:
e0:33:be:8d:68:ff:85:24:ab:fe:d1:05:d6:eb:42:89:bf:83:
73:39:5b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:33:45 2025 by rpki-client