Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/cN6S53rgknaezXSvwBHU3v6ABLk.roa
File: cN6S53rgknaezXSvwBHU3v6ABLk.roa (raw, json)
Hash identifier: fNnXiuijaAYuON/PC/lpz+jQnPMWbV2Be017GVIKhdU=
Subject key identifier: 70:DE:92:E7:7A:E0:92:76:9E:CD:74:AF:C0:11:D4:DE:FE:80:04:B9
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 0191040B72447E4DDDD934ED2A1F86064882
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/cN6S53rgknaezXSvwBHU3v6ABLk.roa
Signing time: Tue 30 Jul 2024 14:29:04 +0000
ROA not before: Tue 30 Jul 2024 14:29:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211381
IP address blocks: 45.132.107.0/24 maxlen: 24
77.83.175.0/24 maxlen: 24
92.119.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Aug 2024 17:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:04:0b:72:44:7e:4d:dd:d9:34:ed:2a:1f:86:06:48:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Jul 30 14:29:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70de92e77ae092769ecd74afc011d4defe8004b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:69:29:80:b9:e4:60:3e:7c:db:25:95:ee:
ed:f0:cc:69:22:bc:ed:41:e7:d8:b9:3b:bb:aa:51:
56:40:ec:6b:c8:c8:10:ce:61:0d:b6:21:26:90:e5:
af:b9:45:c4:7a:be:e1:fe:d7:33:67:81:75:22:16:
12:cf:a9:09:8b:b8:16:54:3d:ef:bc:40:db:5b:6c:
ea:4f:78:3c:63:7e:24:2b:ab:13:77:20:a2:a9:48:
6f:26:04:17:2b:0e:ce:f6:75:da:98:0c:4e:28:75:
ef:05:f3:52:3a:9d:df:bf:c1:b1:26:6f:37:61:a4:
3d:98:3b:92:88:b3:5d:f0:6d:3f:42:cd:7a:5e:44:
eb:35:b4:19:2f:01:93:6e:8c:8a:ea:66:f5:e8:b7:
84:d2:a4:6a:31:36:c7:58:3b:fb:65:98:dd:fa:00:
12:64:83:e9:60:60:19:a0:fa:79:79:0b:97:81:63:
0e:7a:5a:61:68:2f:69:82:eb:de:d0:82:9a:20:76:
d6:83:83:18:31:82:24:f3:da:78:e4:ce:a5:df:e4:
a2:28:82:fb:96:07:20:01:c6:9b:c5:6a:e2:ec:24:
9d:81:d1:7b:28:99:63:0d:36:30:1b:d1:91:f7:44:
91:ad:f6:fc:59:9c:66:15:90:92:b2:ac:0c:f0:36:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DE:92:E7:7A:E0:92:76:9E:CD:74:AF:C0:11:D4:DE:FE:80:04:B9
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/cN6S53rgknaezXSvwBHU3v6ABLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.107.0/24
77.83.175.0/24
92.119.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:60:c6:f3:3e:6d:a8:7e:6f:bf:95:44:80:33:d2:2f:b8:09:
76:71:8e:67:e6:d9:0a:d4:65:06:64:ad:e6:dc:0e:0b:9e:43:
78:ea:67:65:cc:a3:3d:9d:3a:fd:98:be:bd:68:0d:67:e4:46:
69:52:cc:33:00:a6:02:65:e2:d5:d0:6c:03:b6:19:9c:b3:1b:
52:68:70:5e:c9:76:d9:46:39:fc:8f:ac:95:27:58:78:08:e1:
33:1b:2c:05:02:f1:0e:53:7c:84:f6:af:1c:35:81:9a:d8:a0:
92:2b:58:98:6b:ba:7e:fa:11:10:ce:23:f8:86:54:4c:04:ae:
cd:3b:0b:12:18:82:01:76:82:e3:94:7f:b2:64:6c:ba:5e:27:
b4:1d:16:cb:69:9a:7b:47:38:40:39:af:3e:f9:96:3a:d2:c6:
25:69:95:00:bd:00:94:d6:d4:fe:8f:02:49:95:de:39:a5:da:
04:f5:36:57:24:5a:a4:b5:ac:08:5c:be:52:e6:ae:59:90:80:
3c:76:25:a7:90:f1:52:d1:13:56:d6:48:aa:b3:9b:8c:cc:7f:
ee:70:fc:e4:35:3c:3b:ff:f2:31:63:5c:97:bb:eb:53:20:6e:
05:cf:07:7f:33:ab:19:24:27:e8:4a:ac:3c:b5:97:34:69:87:
19:ff:49:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:37:54 2025 by rpki-client