Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/xeRQVS-ZtLiTtbWyIXbpclBfva8.roa
File: xeRQVS-ZtLiTtbWyIXbpclBfva8.roa (raw, json)
Hash identifier: 7kzjCoRcWv4AYFtStH7ycW1iLIAL8e62zRhdtIPDPEQ=
Subject key identifier: C5:E4:50:55:2F:99:B4:B8:93:B5:B5:B2:21:76:E9:72:50:5F:BD:AF
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018FB88EE217D2D513105A2B8B19514772D2
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/xeRQVS-ZtLiTtbWyIXbpclBfva8.roa
Signing time: Mon 27 May 2024 05:38:42 +0000
ROA not before: Mon 27 May 2024 05:38:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.15.211.0/24 maxlen: 24
62.68.76.0/24 maxlen: 24
80.94.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:8e:e2:17:d2:d5:13:10:5a:2b:8b:19:51:47:72:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: May 27 05:38:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5e450552f99b4b893b5b5b22176e972505fbdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:08:64:d7:73:58:2b:74:86:55:5c:14:59:40:
e9:64:1f:28:cd:15:cd:2f:12:5d:d4:be:a4:cb:55:
c5:02:15:5e:1b:40:c6:f2:ca:d9:85:73:62:89:0a:
de:15:a1:62:c2:60:2e:f8:39:18:a2:21:b7:e0:a9:
48:27:2b:0d:97:48:03:b7:2a:27:bd:33:89:8a:99:
16:14:96:93:e4:a0:9c:0e:c7:2d:07:ec:13:c1:e1:
d7:0a:16:4f:30:46:1e:60:7f:18:90:5b:e1:14:de:
64:2a:89:db:f0:f4:2d:22:0e:9b:d8:de:bf:da:e9:
c3:bb:d4:8d:fa:26:11:f8:19:2f:d7:5b:42:70:8d:
dc:d7:b6:af:a7:dc:6d:ce:39:fc:ef:f9:ea:84:1c:
c4:62:10:3c:50:c9:b0:4f:14:60:74:cc:10:28:41:
e4:cb:d1:d1:b1:7c:c1:4f:17:96:82:48:12:5b:76:
b2:3e:28:01:39:06:83:90:8e:7e:2e:cb:41:7e:35:
60:a5:70:97:68:81:ce:21:04:45:f2:47:2f:6d:4a:
29:38:0a:87:66:64:26:8b:bc:8b:95:9b:39:cb:07:
59:77:03:60:c0:39:84:c6:9a:01:20:20:e1:51:12:
6c:25:14:1c:59:39:f9:28:da:81:a2:7c:7d:ab:cf:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E4:50:55:2F:99:B4:B8:93:B5:B5:B2:21:76:E9:72:50:5F:BD:AF
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/xeRQVS-ZtLiTtbWyIXbpclBfva8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.211.0/24
62.68.76.0/24
80.94.88.0/24
Signature Algorithm: sha256WithRSAEncryption
20:1b:e9:79:87:34:4a:fe:7c:dc:cd:cb:08:99:31:0b:40:c5:
30:35:d7:25:8a:e2:b4:1b:22:ec:6e:c1:f4:09:00:bd:2b:6a:
a2:68:a9:57:8d:5d:a1:15:50:d8:d1:5c:65:a0:b5:83:c1:11:
84:57:b4:ba:b7:1d:ee:98:0f:ca:05:0f:d8:43:ff:36:6d:c9:
3e:d3:7d:2b:28:d5:9c:c2:c7:71:ad:0a:fc:44:16:85:b2:3c:
9d:18:11:a1:73:9d:24:46:08:a9:78:53:65:44:71:40:13:25:
a7:51:c2:74:44:a9:96:9c:44:19:d8:9b:5f:aa:1e:48:74:2e:
99:55:61:e2:5c:dd:9f:74:8a:5a:3b:94:83:cf:13:e1:19:4a:
61:db:21:93:c6:f3:bf:4a:9c:32:73:1b:3f:32:49:64:4d:53:
79:92:70:88:08:c5:68:06:ee:70:60:e8:76:22:86:62:b9:b5:
14:e5:67:7c:16:61:04:b8:fa:47:af:78:9a:8f:6f:26:93:82:
3e:27:b4:30:46:37:5b:4d:c1:ca:42:7c:7f:9e:62:7b:dc:00:
3b:e3:d9:8a:c4:3b:4b:58:46:88:ba:4f:86:e6:4f:9c:1a:8c:
9a:3b:94:8d:65:5a:57:f5:eb:ae:c2:56:22:96:fb:73:ac:1a:
ec:70:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:09:02 2025 by rpki-client