Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/CEMiZLR1R_DZ23XsWZN6xsvOjkg.roa
File: CEMiZLR1R_DZ23XsWZN6xsvOjkg.roa (raw, json)
Hash identifier: 01QGHOr/tTVr7LHXtGSQtxFOCcYLeg5ViSxyNQrBr4E=
Subject key identifier: 08:43:22:64:B4:75:47:F0:D9:DB:75:EC:59:93:7A:C6:CB:CE:8E:48
Certificate issuer: /CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Certificate serial: 018CC79429A8A1C78719B2BAFE53F433741A
Authority key identifier: 73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/CEMiZLR1R_DZ23XsWZN6xsvOjkg.roa
Signing time: Tue 02 Jan 2024 00:30:25 +0000
ROA not before: Tue 02 Jan 2024 00:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208200
IP address blocks: 45.154.72.0/23 maxlen: 24
2a0f:b300:1000::/36 maxlen: 48
2a0f:b300::/36 maxlen: 48
2a0f:b300:b300::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:29:a8:a1:c7:87:19:b2:ba:fe:53:f4:33:74:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Validity
Not Before: Jan 2 00:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08432264b47547f0d9db75ec59937ac6cbce8e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:ee:86:78:f8:16:d3:ad:96:f8:88:85:0c:
b4:d3:7b:a0:10:ab:74:c6:ca:68:d6:48:1d:27:76:
ae:99:dc:01:0a:31:66:54:c4:55:22:83:3e:21:96:
dd:be:22:00:92:9b:e3:a1:23:2c:03:e4:80:49:1b:
bb:59:b8:5c:a1:0c:01:1a:35:8d:08:73:49:7a:bb:
3c:b1:90:93:e5:8f:38:4f:5c:7c:34:df:61:7c:c1:
22:ac:1b:13:d1:fa:2d:db:2d:4f:14:fc:f3:5d:02:
88:8c:90:b5:65:39:20:e1:13:7e:71:4c:ae:29:77:
1e:7f:23:86:66:4e:d7:d2:86:59:9f:90:32:d4:6c:
a6:b3:d2:f7:94:1a:8e:e4:47:85:40:15:e5:71:a3:
68:67:3c:d6:c9:a6:ce:f6:75:9b:32:da:3c:b8:f6:
2f:cc:b3:d5:55:dc:5e:ee:d3:98:dc:7e:3d:2d:b6:
3b:80:6c:64:47:1b:73:96:e5:79:61:79:89:56:0a:
cc:58:97:cb:d8:c0:d0:dd:3c:2e:54:69:a8:be:d2:
27:5b:f9:ce:87:04:33:30:38:9d:f5:92:1f:58:01:
ab:90:52:b2:ff:b8:3c:2b:97:bd:ad:cb:2b:93:c9:
58:3d:2b:e1:f4:09:40:5c:74:52:c9:9d:e8:3a:1e:
68:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:43:22:64:B4:75:47:F0:D9:DB:75:EC:59:93:7A:C6:CB:CE:8E:48
X509v3 Authority Key Identifier:
keyid:73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/CEMiZLR1R_DZ23XsWZN6xsvOjkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.72.0/23
IPv6:
2a0f:b300::/35
2a0f:b300:b300::/48
Signature Algorithm: sha256WithRSAEncryption
8c:df:7f:76:a6:29:c2:da:64:c8:99:62:7a:b5:43:20:26:d0:
42:e9:26:89:bc:06:91:e7:44:34:cf:73:27:e8:0d:7b:2d:09:
45:99:7b:54:72:eb:2b:4b:e1:c0:b2:83:94:ed:b5:a2:66:3e:
59:d8:af:30:07:89:f8:0e:59:30:53:9a:c8:15:1f:05:6d:f6:
85:60:ee:e3:40:08:7e:59:a2:47:ba:d5:0a:bd:35:7f:9f:27:
0d:5d:cd:25:31:96:55:15:9c:ac:4f:68:fd:fa:e5:3a:d6:4a:
37:71:3d:96:3a:64:37:fe:d1:37:e2:e3:6f:2c:db:93:f7:13:
0b:62:bc:f7:41:77:13:7e:3e:4d:3a:74:ac:5d:f2:7f:c5:69:
00:31:c3:ce:4f:5f:78:16:dd:30:99:64:54:bf:53:35:e2:81:
e1:08:23:f2:13:64:38:c2:7a:cb:8f:d9:e1:29:c2:93:3b:ac:
59:0c:c1:49:8e:35:5e:4e:0d:77:31:90:c4:f9:31:4d:b4:65:
fd:e3:ad:4b:f6:93:2a:54:e9:ab:0c:d0:db:71:c7:b7:fd:57:
e1:74:07:11:86:76:fc:e9:2a:96:f1:b5:3a:f5:d2:bf:02:0e:
dd:84:e3:0f:62:48:bb:1f:93:64:d2:00:be:31:b1:92:38:ac:
49:a6:b0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:50 2025 by rpki-client