Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/nEu2jtbs4ffGYgLtsE81r2QrGzE.roa
File: nEu2jtbs4ffGYgLtsE81r2QrGzE.roa (raw, json)
Hash identifier: xQwX5FclQBynNL5Ty9HujRX0tZGw6eL425ThAK26CQw=
Subject key identifier: 9C:4B:B6:8E:D6:EC:E1:F7:C6:62:02:ED:B0:4F:35:AF:64:2B:1B:31
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 0193EE70A573E08BBC57A939F75586F1CD5F
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/nEu2jtbs4ffGYgLtsE81r2QrGzE.roa
Signing time: Sun 22 Dec 2024 12:56:19 +0000
ROA not before: Sun 22 Dec 2024 12:56:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201150
IP address blocks: 45.137.16.0/24 maxlen: 24
45.137.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ee:70:a5:73:e0:8b:bc:57:a9:39:f7:55:86:f1:cd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Dec 22 12:56:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c4bb68ed6ece1f7c66202edb04f35af642b1b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:44:2f:a4:b4:62:4a:c5:fb:91:e1:c1:a6:fc:
a3:0a:74:97:6e:4e:b1:67:0b:5f:3e:cf:44:cc:20:
54:90:f0:5d:8b:5c:31:22:1d:42:ca:25:ca:c7:dc:
14:df:22:f6:3d:d1:8f:a8:a8:3a:8e:03:33:9b:3e:
2d:d4:95:dd:88:c9:86:90:97:2b:ca:3a:14:a0:26:
66:00:ef:33:8e:8c:b8:88:6c:ca:d3:bd:48:6f:cc:
3b:e4:fb:cd:35:f0:8e:3b:ce:81:cc:52:cd:dc:e8:
8f:5a:8a:66:65:b9:a1:97:f6:2d:db:4f:9a:af:d7:
39:35:98:e4:d6:d1:87:ed:c8:e1:7e:20:68:c7:f5:
6d:52:6b:d0:33:c4:b8:4d:b7:fe:c8:87:d5:ee:43:
59:9b:b5:2b:80:d7:87:e8:66:16:1a:16:b9:78:f8:
86:0e:65:f5:eb:2c:e5:23:52:9f:f7:57:2b:89:63:
5b:00:83:c6:0e:61:88:d5:47:7f:8f:9d:46:58:d5:
a2:43:f1:6f:5f:0f:aa:bd:f6:76:4a:1f:1d:ee:ef:
34:28:95:fa:9d:6f:68:a5:d5:11:f9:1e:2b:5f:44:
13:5a:49:1a:df:eb:35:29:6c:b0:c7:86:fa:66:c8:
05:e6:a9:a7:94:d5:80:79:83:2c:ba:33:45:e4:a0:
8f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4B:B6:8E:D6:EC:E1:F7:C6:62:02:ED:B0:4F:35:AF:64:2B:1B:31
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/nEu2jtbs4ffGYgLtsE81r2QrGzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
Signature Algorithm: sha256WithRSAEncryption
38:99:71:0d:05:95:12:7f:d2:25:ee:27:5f:f5:c1:54:0d:76:
d8:41:99:24:ee:6a:06:8a:be:9b:aa:2c:06:a2:37:89:3b:fb:
d0:b5:12:c2:12:a4:c5:3a:46:78:c3:e4:e5:ce:24:93:39:b4:
80:6b:ac:72:f2:da:5e:4b:b7:49:fc:ad:fb:a3:4f:12:3d:7e:
bc:16:e0:73:8a:65:4d:3c:ee:f4:ab:36:b5:8e:71:16:cc:31:
52:92:ad:e7:fb:04:dd:ba:c5:2d:c0:4c:f8:0e:41:fa:d1:4a:
5d:a0:9f:bc:06:c3:6f:5d:4a:9c:35:d3:5e:bb:61:af:46:cf:
c9:3b:3c:88:9c:e0:18:82:d3:f2:62:95:31:a7:1f:72:18:ff:
de:a6:fc:bb:89:2f:76:14:7a:f0:75:08:0a:f2:5a:49:21:4b:
f8:58:41:ba:6a:21:f5:c2:0f:46:cc:31:00:56:89:52:4a:9d:
cd:a8:b9:d8:4f:a6:05:48:a0:c6:48:42:63:45:b5:8b:c8:4c:
9d:3e:37:b0:f5:f6:24:0d:db:35:c6:5e:a4:8f:64:4a:03:08:
f1:06:cb:82:37:f7:6d:2e:53:38:c0:9c:ef:54:11:83:92:27:
96:77:b1:a1:66:c1:2e:da:2e:eb:77:57:c4:cf:18:8a:d6:01:
3d:3c:a1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:02:58 2025 by rpki-client