Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/UwFGfVqpRxKgqtX2E9wl8vJcUsE.roa
File: UwFGfVqpRxKgqtX2E9wl8vJcUsE.roa (raw, json)
Hash identifier: OEmkqi/sx2wo8yV34m4u3FiJelazEtFznLGDZGgLutY=
Subject key identifier: 53:01:46:7D:5A:A9:47:12:A0:AA:D5:F6:13:DC:25:F2:F2:5C:52:C1
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 0191303376C7A1C7789FFC8A91E5F673C57E
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/UwFGfVqpRxKgqtX2E9wl8vJcUsE.roa
Signing time: Thu 08 Aug 2024 04:16:04 +0000
ROA not before: Thu 08 Aug 2024 04:16:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208411
IP address blocks: 45.137.252.0/22 maxlen: 22
45.137.252.0/24 maxlen: 24
45.137.253.0/24 maxlen: 24
45.137.254.0/24 maxlen: 24
45.137.255.0/24 maxlen: 24
2a0e:b2c0::/30 maxlen: 30
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:30:33:76:c7:a1:c7:78:9f:fc:8a:91:e5:f6:73:c5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Aug 8 04:16:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5301467d5aa94712a0aad5f613dc25f2f25c52c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:5e:d6:a6:2d:36:64:e3:fa:13:91:0e:65:
cf:83:1f:76:17:0e:0f:98:f7:97:4a:44:71:41:f3:
00:6c:5e:0a:1a:98:ab:e2:09:a5:69:f8:c1:b0:84:
12:d2:3f:3c:93:19:f6:71:d4:01:83:8a:1e:d0:ef:
96:b5:5b:e4:6b:f5:dd:27:28:de:af:f7:a7:8c:41:
04:4d:4a:5f:36:01:d7:9b:ca:0c:5f:5b:e9:98:07:
30:ce:54:e4:c7:06:ab:42:7b:6c:55:65:dd:d1:ec:
28:13:de:80:e9:b3:25:16:4f:8f:a4:cd:d1:f5:51:
fd:ee:d1:4d:6c:2d:6a:51:0c:07:63:eb:7b:6e:3f:
19:02:22:63:6a:0d:91:a7:37:7d:59:c6:c2:3f:c7:
e1:cb:bc:10:54:60:c4:f7:c7:15:b7:4b:b3:43:36:
62:90:73:e1:10:74:eb:98:5f:c1:48:a5:5c:d5:c3:
64:ed:69:1e:1c:9f:21:91:6b:77:97:a6:1f:37:03:
3e:2b:03:2c:1d:f6:17:c5:32:c0:95:36:84:0a:89:
1c:ae:d0:51:e9:91:af:27:19:dd:2b:30:6d:23:d0:
a6:dd:ea:51:6a:71:c8:74:5c:4f:a1:a3:18:11:44:
6c:71:36:da:6c:9d:bd:c1:08:4c:3f:85:5e:fa:eb:
33:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:01:46:7D:5A:A9:47:12:A0:AA:D5:F6:13:DC:25:F2:F2:5C:52:C1
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/UwFGfVqpRxKgqtX2E9wl8vJcUsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.252.0/22
IPv6:
2a0e:b2c0::/30
Signature Algorithm: sha256WithRSAEncryption
84:c1:21:50:24:f2:bd:b7:03:ef:50:74:db:30:b3:8f:6b:12:
7b:6a:2e:8b:ad:d7:67:f9:68:9c:99:56:36:16:67:ee:54:ca:
01:5f:41:4c:ae:1d:ab:fd:8c:3d:b3:f5:97:1f:b6:2f:f7:e0:
72:fd:a1:e4:25:ba:fc:f7:0e:36:01:44:28:fc:8b:f6:07:11:
8f:d5:fc:c4:cd:af:c9:f2:9e:7c:ac:24:a2:1c:50:9a:f0:14:
a2:d7:f4:ed:34:da:2e:30:9a:43:d0:9a:be:93:17:89:d5:88:
c2:f6:1a:4d:23:21:07:38:e1:bb:75:34:c7:47:7c:10:b6:36:
b4:ed:2f:52:d4:82:39:f1:0a:d3:93:02:73:2c:f1:b1:80:b0:
ab:d1:7c:9e:f4:a0:81:28:8b:8a:0b:eb:e7:e4:e6:fe:66:05:
d8:4d:d9:0e:ec:c8:33:0f:bd:67:53:a4:75:84:2f:d2:6f:a1:
e2:41:59:de:7d:0f:be:30:91:2b:c1:75:95:67:fc:b3:90:28:
7e:2e:e5:7a:12:25:8a:fd:15:18:30:6b:f9:88:8c:99:0c:70:
54:7f:48:b5:fb:e8:5b:12:e8:68:b2:87:6b:15:23:c4:03:0a:
6a:cf:ad:78:bd:5b:20:0d:99:0c:02:77:71:6f:0d:11:a8:ab:
e3:f4:0b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:01 2025 by rpki-client