Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/6v9X71RonvE3jE-B3WSiairMZ-Q.roa
File: 6v9X71RonvE3jE-B3WSiairMZ-Q.roa (raw, json)
Hash identifier: /jeBQf6qPpi//Fxl6Xm0OziQZh9DONd519MNAr2LQxk=
Subject key identifier: EA:FF:57:EF:54:68:9E:F1:37:8C:4F:81:DD:64:A2:6A:2A:CC:67:E4
Certificate issuer: /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Certificate serial: 018CC26D79B9655A6544D416E56C265C2AEB
Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/6v9X71RonvE3jE-B3WSiairMZ-Q.roa
Signing time: Mon 01 Jan 2024 00:30:03 +0000
ROA not before: Mon 01 Jan 2024 00:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208313
IP address blocks: 45.146.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:79:b9:65:5a:65:44:d4:16:e5:6c:26:5c:2a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Validity
Not Before: Jan 1 00:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaff57ef54689ef1378c4f81dd64a26a2acc67e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:63:26:bf:70:a0:4f:85:28:92:2d:6a:35:
5f:97:fd:e8:80:40:b2:15:1c:40:e9:3f:0c:84:de:
45:cc:fc:7c:5d:1b:b8:cc:5b:76:d5:20:ac:7f:f0:
1f:8c:f6:6e:57:a5:35:00:cb:db:81:58:4c:89:e6:
e4:8a:e3:f0:69:9b:73:9a:98:ed:fe:26:95:46:30:
38:17:50:91:1e:76:23:01:94:ca:5d:71:e7:d4:a8:
b5:7f:a4:d0:ae:c5:7d:63:33:ba:90:09:4d:d2:9a:
d4:6c:f6:24:cd:46:e7:b1:39:8c:ec:87:62:a6:65:
cc:64:55:c5:6f:e6:ca:0f:e0:bc:4b:5c:c6:e3:a4:
48:5e:7b:ad:97:0d:24:69:a5:f0:ea:60:a1:aa:48:
62:b6:b1:b9:2f:1f:cf:78:52:ac:de:88:e7:b2:fc:
62:bf:2c:42:09:be:53:06:65:75:73:dd:13:61:82:
0d:11:ba:7e:e3:cc:fe:94:04:2f:25:cd:76:a5:30:
e8:14:50:61:ea:5b:f1:f0:86:3d:55:99:f7:e6:65:
c9:bc:29:cc:cf:5d:f1:49:7f:24:74:28:75:8a:2e:
3e:81:83:b1:f9:35:9e:f3:8b:04:8e:d5:7a:13:8b:
b5:12:02:21:73:6d:2d:c1:6b:76:60:9f:37:68:28:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FF:57:EF:54:68:9E:F1:37:8C:4F:81:DD:64:A2:6A:2A:CC:67:E4
X509v3 Authority Key Identifier:
keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/6v9X71RonvE3jE-B3WSiairMZ-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.148.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:04:88:26:00:38:04:f1:39:57:fc:5e:26:23:23:c2:44:cb:
34:9f:bc:47:1d:ea:a2:e1:29:e9:da:ea:f1:30:7e:90:f1:94:
c3:53:54:32:0a:a2:ac:2d:ff:ed:ba:5d:78:1c:c3:fd:a7:20:
86:b7:14:51:d0:a5:4e:e2:d5:a2:18:7d:06:c1:27:73:21:35:
90:ac:d6:ca:ab:89:72:84:a4:ca:3a:fb:31:b0:77:19:04:5f:
a3:de:70:b6:78:4c:c8:f5:a2:0c:51:74:01:2b:24:f1:82:62:
80:91:5c:88:f1:99:7b:2f:e9:d6:07:c5:33:59:13:21:53:c9:
07:e0:f6:6d:30:f6:e1:58:f7:4a:e2:75:7b:68:7b:22:9c:23:
b1:25:28:87:0c:52:f9:75:33:60:5c:9e:bc:59:f1:d5:17:42:
35:ea:ab:dc:8f:4d:da:b5:bf:5c:2d:1b:f0:db:60:df:a4:4d:
20:38:be:4a:20:27:4d:6b:f3:1c:2d:be:7c:8c:5f:c5:f6:de:
4d:98:e9:60:60:38:72:87:93:e4:e4:50:70:00:57:59:f5:4a:
9f:62:5e:5d:26:b4:87:21:cc:3e:06:0b:3a:6c:4b:98:6d:8d:
64:0e:3c:fc:6b:f4:30:cb:58:ef:b2:4c:df:9e:ff:a8:e3:97:
b6:79:30:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:42 2025 by rpki-client