Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/llseW1mriqOzx2uo730LgUPVQvA.roa
File: llseW1mriqOzx2uo730LgUPVQvA.roa (raw, json)
Hash identifier: wNliLtuA6Hj6THyO8skGTDy2et18Z9ii4y2kWL5+xgE=
Subject key identifier: 96:5B:1E:5B:59:AB:8A:A3:B3:C7:6B:A8:EF:7D:0B:81:43:D5:42:F0
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01936E841632EC2FEB8F62938E6D87698793
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/llseW1mriqOzx2uo730LgUPVQvA.roa
Signing time: Wed 27 Nov 2024 16:46:10 +0000
ROA not before: Wed 27 Nov 2024 16:46:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215826
IP address blocks: 45.150.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:84:16:32:ec:2f:eb:8f:62:93:8e:6d:87:69:87:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Nov 27 16:46:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=965b1e5b59ab8aa3b3c76ba8ef7d0b8143d542f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:12:61:88:0e:10:d5:e5:90:38:d3:b0:bd:f2:
d7:f9:b0:b4:f4:c7:b2:d2:5a:01:9e:7a:ae:d5:90:
a6:aa:ef:a1:2d:1a:5f:01:28:f2:88:e0:b3:c0:54:
6c:63:32:45:88:00:d0:c8:16:1c:84:0f:f7:8d:52:
6b:2d:4f:fd:5f:43:99:a2:4e:65:90:2c:fc:d9:4c:
05:5b:fe:e4:0a:15:d2:6d:0b:bf:69:96:10:b7:7f:
97:3e:66:2a:b5:9b:92:1b:84:64:3b:42:ef:f7:18:
36:86:a4:01:13:3d:a3:12:f9:bb:14:c3:84:6d:4f:
ed:5a:90:54:f4:0f:62:86:67:aa:7d:f7:9e:b7:64:
2e:3a:35:99:05:12:ba:36:d2:52:49:2f:49:8d:51:
4a:44:c9:fd:6a:c9:ba:3a:e1:fa:94:0c:4d:34:32:
38:e2:67:78:97:d5:d7:8a:c9:9b:e6:9f:30:a6:ec:
d5:0c:3a:70:5e:8f:b4:0f:79:21:45:3c:b4:e4:02:
81:a4:4c:10:cc:87:78:72:af:f5:7f:f4:fd:dd:10:
ef:96:41:53:43:41:63:96:63:14:16:55:4b:56:2d:
49:c5:51:f0:1d:cb:e2:1e:de:39:fb:ad:47:2b:44:
d1:5b:da:d1:de:27:94:25:aa:0b:eb:71:fd:ab:02:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5B:1E:5B:59:AB:8A:A3:B3:C7:6B:A8:EF:7D:0B:81:43:D5:42:F0
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/llseW1mriqOzx2uo730LgUPVQvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.34.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6b:78:6d:dc:b7:1c:43:78:41:43:ab:aa:7f:d8:0a:fa:65:
d1:ea:4c:79:9d:88:56:a9:a8:e0:d7:87:db:66:3f:de:a8:63:
da:a5:ed:ae:85:ec:ba:54:c5:36:f9:46:50:a3:26:71:21:0a:
a7:c0:17:bc:5e:12:47:6a:2f:ef:a0:30:47:f9:74:8e:72:67:
20:b5:63:82:e5:4c:95:00:2f:44:26:cc:d9:81:c6:e9:8e:61:
aa:78:20:59:ee:e3:16:80:fd:ec:9c:a9:6e:c2:b8:9e:63:e8:
db:27:ae:33:2d:06:b2:9e:de:41:e9:aa:09:f9:c0:aa:5d:30:
e3:b5:00:c9:08:74:a1:9c:10:69:3f:5c:f0:2f:0d:ec:d7:ff:
f8:de:57:b8:77:b7:1b:0b:e3:9b:0a:2c:92:72:3a:5c:09:9c:
03:4c:46:2b:b0:d2:49:e8:4f:39:e1:98:dc:fb:55:68:08:59:
54:88:6d:55:cd:e3:ba:71:a0:d1:ab:c9:1c:5b:ca:8b:59:c2:
66:bb:94:93:d9:34:98:e5:6f:ed:2d:ba:eb:12:e6:de:d5:9e:
e4:61:c2:94:33:9d:83:f7:d8:61:42:6f:91:42:11:36:11:70:
04:30:18:48:1a:30:8e:66:ba:60:c1:cc:1d:0d:78:1d:4d:1b:
57:08:08:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:32:25 2025 by rpki-client