Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Tvv36tMzRTWF7J7n33yXRd3LE4M.roa
File: Tvv36tMzRTWF7J7n33yXRd3LE4M.roa (raw, json)
Hash identifier: k82nNYZjmsizjkwYtczr90tmbMnrJlrQLdAg+PnM8o8=
Subject key identifier: 4E:FB:F7:EA:D3:33:45:35:85:EC:9E:E7:DF:7C:97:45:DD:CB:13:83
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019417A8227B5F35D0360649468648437B28
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Tvv36tMzRTWF7J7n33yXRd3LE4M.roa
Signing time: Mon 30 Dec 2024 13:01:22 +0000
ROA not before: Mon 30 Dec 2024 13:01:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49791
IP address blocks: 45.43.137.0/24 maxlen: 24
64.137.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:a8:22:7b:5f:35:d0:36:06:49:46:86:48:43:7b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Dec 30 13:01:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4efbf7ead333453585ec9ee7df7c9745ddcb1383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:11:7e:ab:01:2a:3d:2c:37:fe:a2:d3:b6:
de:bf:f5:8b:04:23:77:7b:a6:21:f2:e7:23:bc:c2:
fb:1d:42:99:2d:7d:60:88:1f:1e:93:b1:3e:3e:6a:
39:7d:8a:19:42:df:a6:c5:cf:ba:52:7d:a6:02:a8:
46:00:8b:d4:d2:40:c8:64:fa:c4:ac:ba:25:4b:52:
7b:4f:ca:53:18:29:67:77:0e:18:fc:f4:cc:87:1a:
32:72:db:e0:83:0b:27:c2:ec:8c:54:f9:9d:21:89:
ed:5c:71:99:51:18:95:59:61:ba:54:31:86:db:f9:
ef:ec:0b:a7:4d:7e:b1:19:d9:27:64:22:17:62:5b:
b6:d0:56:bb:89:63:d4:54:46:fe:95:c0:96:e1:6e:
3f:fb:bc:8b:e3:c1:2a:61:2b:78:bd:b1:71:08:42:
ee:7c:ae:07:43:f7:1f:43:8c:79:36:2e:23:24:5c:
65:de:66:bf:75:07:20:d2:54:46:c3:47:02:aa:e8:
ea:4f:16:81:6c:5a:de:8a:42:e6:70:2d:54:e1:0b:
e2:ea:f8:62:40:ef:1a:6c:c7:18:bb:fc:f2:15:1e:
3e:5a:9c:fe:07:34:9c:2b:6c:6c:91:3c:02:1f:e7:
59:7e:b4:98:e2:0f:ee:d3:a1:03:9e:50:4c:c5:f1:
65:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FB:F7:EA:D3:33:45:35:85:EC:9E:E7:DF:7C:97:45:DD:CB:13:83
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Tvv36tMzRTWF7J7n33yXRd3LE4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.137.0/24
64.137.9.0/24
Signature Algorithm: sha256WithRSAEncryption
28:12:24:68:8b:88:ea:d2:3c:ee:42:23:95:80:45:48:7d:aa:
08:a1:f3:43:92:9c:91:28:72:7b:78:60:70:ca:8a:92:09:49:
06:04:62:53:8a:81:75:2b:bf:47:9c:ac:21:b6:13:07:2d:29:
53:25:d9:31:5f:70:57:a6:49:b4:3b:8e:61:33:17:56:63:64:
ed:c5:90:4b:65:a5:d0:91:83:9a:22:c8:fa:44:9b:b9:d3:7d:
a9:dd:08:0e:f2:18:68:56:c4:70:20:c8:17:b9:d2:d9:4a:23:
19:55:17:22:f3:02:fe:f4:32:85:96:2b:0f:cb:6f:40:be:f2:
ea:7c:91:66:97:ec:2e:1a:8f:82:16:d9:14:a8:1f:99:9d:8c:
05:15:69:88:7f:e1:46:9f:b5:b9:dc:16:81:d1:c2:08:b0:30:
09:9f:c6:83:c3:14:7a:2d:1f:e4:52:24:29:2d:85:80:e7:ce:
62:09:48:76:87:0d:44:76:c9:d4:a7:ec:4c:f5:e6:8f:7d:58:
ad:56:df:4b:1e:ff:3b:7f:c2:2e:f5:4f:36:be:6f:f9:98:65:
90:8f:d6:78:89:8c:b8:24:51:5d:3a:c8:21:fb:2a:5c:1e:4c:
86:a3:90:fa:d8:de:e9:94:42:43:91:57:5f:5f:de:ae:77:13:
3f:91:3e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:57:53 2025 by rpki-client