Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/R1pvVspBCnQQB1EQS-Aa_Zsgdog.roa
File: R1pvVspBCnQQB1EQS-Aa_Zsgdog.roa (raw, json)
Hash identifier: tegM4CB3zZFEWmMaME/EiJ0JpqBK8y2qMgXxPKU8ZQo=
Subject key identifier: 47:5A:6F:56:CA:41:0A:74:10:07:51:10:4B:E0:1A:FD:9B:20:76:88
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 0193A4824B1385DCED63885BD89355224367
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/R1pvVspBCnQQB1EQS-Aa_Zsgdog.roa
Signing time: Sun 08 Dec 2024 04:23:42 +0000
ROA not before: Sun 08 Dec 2024 04:23:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132839
IP address blocks: 45.156.169.0/24 maxlen: 24
45.156.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Dec 2024 04:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a4:82:4b:13:85:dc:ed:63:88:5b:d8:93:55:22:43:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Dec 8 04:23:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=475a6f56ca410a74100751104be01afd9b207688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:13:3e:03:17:e7:ff:da:c9:05:45:16:b8:
c2:33:d6:b1:bb:38:15:19:5f:e4:75:c4:c9:95:63:
c0:60:a8:40:e4:c7:1f:9b:a5:4a:22:9a:48:c2:6a:
54:be:97:f6:03:3a:95:a0:b5:5c:c0:ca:2b:6a:f4:
c5:63:3f:bc:4c:61:27:1c:2b:d0:62:89:71:7b:ec:
79:31:2c:2e:2d:f3:12:39:dc:8a:56:44:cf:56:7d:
4e:9e:1e:19:b6:cd:91:d0:0a:80:35:db:c7:2b:b3:
e4:6f:04:83:a0:5b:0f:92:8f:96:52:c7:92:62:04:
d8:4d:6a:ce:7d:58:3f:88:56:c0:a9:5b:8b:ce:44:
74:82:5f:5c:1a:7f:94:86:d6:0f:22:78:c5:65:d9:
e5:db:a9:1f:cb:33:ea:cf:03:ba:97:3a:8b:75:41:
3b:05:f4:fb:dc:80:50:fe:54:4f:cf:11:c9:5d:0c:
76:f8:e1:fa:f5:e3:e4:89:e8:80:56:88:b8:f7:92:
09:b1:12:6a:90:5a:ac:2a:ef:9e:9c:1f:0a:35:2f:
58:d7:54:9e:d6:ae:38:5c:40:84:c9:1c:e3:4f:0e:
1f:78:38:72:3d:3f:bb:4b:fa:88:dc:de:93:60:94:
74:76:7c:46:98:55:bc:43:47:8e:2d:6a:ec:b7:f4:
18:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5A:6F:56:CA:41:0A:74:10:07:51:10:4B:E0:1A:FD:9B:20:76:88
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/R1pvVspBCnQQB1EQS-Aa_Zsgdog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.169.0/24
45.156.171.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:3f:65:7d:23:e5:10:49:15:fe:a3:de:8b:a9:ce:20:4e:24:
92:58:20:59:6c:f2:0f:44:2a:08:b1:b5:96:d9:1c:39:f8:66:
35:03:8d:74:85:95:9a:44:e3:d6:77:6b:c7:21:25:60:68:72:
ab:97:0f:5f:f5:d9:e4:f8:45:a8:c0:b9:31:a5:8c:4a:18:c2:
4a:12:73:d0:ee:ad:60:0d:b2:91:93:44:4e:30:a6:38:d9:c0:
14:23:47:b2:e3:d6:8b:53:79:51:46:a7:7c:cb:1c:5f:9a:8b:
56:c9:a6:e3:94:1b:41:21:d6:08:b4:7f:7d:49:96:06:5a:74:
e5:31:ef:0a:5a:51:0f:66:eb:1e:f9:9c:e4:bc:be:90:3f:a9:
67:53:f2:df:22:8d:09:2b:a3:51:2d:fe:a3:3f:b7:3e:83:5e:
22:35:a9:01:71:09:db:5a:e6:81:53:48:3b:66:f7:51:d7:6f:
86:cc:f4:b9:1e:d5:c5:c4:44:0d:ec:40:d8:44:a0:24:a6:d1:
66:c0:ac:c6:e7:18:83:cd:d7:60:82:a7:50:b7:55:43:d9:d6:
fa:55:eb:fa:25:e9:a6:9c:fa:39:7d:d6:c4:eb:74:51:63:0a:
e6:e6:8b:67:e2:a5:75:7d:df:77:9c:84:d4:8b:7c:b0:22:cc:
fb:47:89:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:28:48 2025 by rpki-client