Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/SSDrXASvKvIdyZVYe-VBMJ8761U.roa
File: SSDrXASvKvIdyZVYe-VBMJ8761U.roa (raw, json)
Hash identifier: 4wjD4c6fESMJGuLirelkieaTPZfOMCEmizgzOqk82rg=
Subject key identifier: 49:20:EB:5C:04:AF:2A:F2:1D:C9:95:58:7B:E5:41:30:9F:3B:EB:55
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 019422FB4780EB100E2A5807040C64DD968E
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/SSDrXASvKvIdyZVYe-VBMJ8761U.roa
Signing time: Wed 01 Jan 2025 17:48:00 +0000
ROA not before: Wed 01 Jan 2025 17:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215267
IP address blocks: 45.89.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Mar 2025 12:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:47:80:eb:10:0e:2a:58:07:04:0c:64:dd:96:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 1 17:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4920eb5c04af2af21dc995587be541309f3beb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:7c:27:d2:39:1f:55:93:1f:d9:19:63:65:
b0:da:85:65:13:b6:42:55:b2:a3:b4:e7:db:09:c6:
1a:f5:b6:b6:7f:f8:22:4f:92:b8:cb:b7:82:2c:b4:
0d:35:fe:03:69:75:10:6e:55:37:51:48:3b:e5:ee:
d8:7d:07:91:e9:31:6a:c3:42:e3:9d:82:f0:1e:f8:
2a:40:e0:42:b5:bf:5c:9a:d3:4c:f5:47:62:49:92:
50:a9:d4:a2:39:16:f8:34:0d:d1:10:36:e0:c4:d1:
4f:81:30:54:83:1c:fd:ac:e3:33:29:2d:b7:1f:28:
60:fe:1d:2a:47:cb:64:e4:07:fa:4d:d1:8f:4b:01:
52:49:c0:75:47:10:8c:f3:da:a6:f9:7c:32:5c:96:
19:bf:56:47:d2:a7:4b:4d:ff:a3:7c:a3:04:23:7c:
3b:af:00:ef:83:aa:95:7f:72:9b:e4:7d:69:cf:e5:
81:fc:c3:d7:57:06:2b:43:83:85:ee:d3:a0:dd:44:
ec:fa:8d:7f:df:e6:71:c9:0e:21:89:e4:1e:e9:25:
4f:e9:a4:3a:e1:0f:b4:81:3f:71:cf:3c:6f:87:7f:
93:68:17:b6:36:16:85:59:d1:8b:ac:31:6a:a6:06:
d5:8c:13:70:4e:52:27:99:e4:6a:b2:13:96:6e:dc:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:20:EB:5C:04:AF:2A:F2:1D:C9:95:58:7B:E5:41:30:9F:3B:EB:55
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/SSDrXASvKvIdyZVYe-VBMJ8761U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e7:8f:1f:d2:3a:d9:0b:67:1c:04:59:ed:d1:55:34:96:f7:
42:4d:29:d3:7f:e1:d3:24:59:66:f0:87:03:79:a3:4a:5b:2a:
56:72:5b:0a:25:30:31:d5:6a:cc:33:71:a2:78:3d:12:58:ad:
22:ab:a4:df:b2:ee:ed:2c:03:9e:c4:f5:d9:ee:c5:b9:53:db:
72:6e:00:7e:38:cb:e6:cd:7d:9c:24:71:c7:92:80:bd:10:4d:
ae:5b:91:f1:0f:ab:0b:ca:c6:a4:48:ee:6f:c8:20:2c:5a:55:
c2:95:9b:86:0a:44:dd:ab:c6:4d:09:df:8a:5f:0e:75:40:70:
d5:91:2f:27:28:6b:dd:cb:1c:70:10:4a:10:df:0c:13:4e:83:
64:d5:3f:3c:85:ed:ab:6c:5d:87:44:ea:2a:ff:e1:9f:fe:79:
81:58:83:28:f3:af:54:fd:8e:96:13:25:0e:9c:7c:5a:5c:94:
46:01:ee:94:35:30:37:e9:ef:47:8b:5f:ea:68:9e:37:f6:47:
9a:d7:d8:e2:40:a0:26:69:0f:cb:8a:a1:a8:7d:d8:22:55:cc:
27:3f:20:43:8a:08:4a:ad:96:60:ca:73:b8:f1:50:33:5e:54:
cc:6e:9f:df:20:cf:31:b5:5e:5f:a4:00:d8:52:2a:0d:19:7c:
cb:16:c3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:28:53 2025 by rpki-client