Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/lPg1CvUsrQCUW_-c-vikrAjN0uM.roa
File: lPg1CvUsrQCUW_-c-vikrAjN0uM.roa (raw, json)
Hash identifier: txJnhkRB6za0amjmPytV8PomV4hWt1uos9GOFq0NjkA=
Subject key identifier: 94:F8:35:0A:F5:2C:AD:00:94:5B:FF:9C:FA:F8:A4:AC:08:CD:D2:E3
Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial: 0193B210BFF98AE525C79978C583ED175ADE
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/lPg1CvUsrQCUW_-c-vikrAjN0uM.roa
Signing time: Tue 10 Dec 2024 19:34:22 +0000
ROA not before: Tue 10 Dec 2024 19:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206014
IP address blocks: 45.13.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Dec 2024 15:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b2:10:bf:f9:8a:e5:25:c7:99:78:c5:83:ed:17:5a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Validity
Not Before: Dec 10 19:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94f8350af52cad00945bff9cfaf8a4ac08cdd2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:41:cc:b0:fa:bc:05:85:6d:50:b9:bc:c7:
7e:42:49:9f:1d:f5:da:24:30:78:8c:bd:c9:2d:83:
d3:f4:2a:a3:0f:e1:06:fc:d9:64:a2:ba:de:17:df:
a0:97:cb:b1:62:27:38:2e:9f:54:c3:4c:ce:cf:6c:
9e:0f:03:58:44:52:30:82:be:13:23:5f:0c:27:04:
82:56:fe:b3:af:43:ea:d4:99:bd:29:3c:c3:2f:8c:
ff:df:64:95:f4:eb:52:45:38:0f:8f:cb:86:94:33:
49:1c:51:f5:37:d4:0c:52:08:45:9e:85:a6:a4:d9:
40:eb:4b:b1:8a:59:bd:04:99:59:c4:4e:77:1c:04:
7a:25:94:37:10:1b:5c:f0:c3:ff:76:d8:61:13:7f:
3b:ec:0e:d6:8e:92:af:2b:06:ba:5f:50:a9:0a:90:
a5:86:77:18:ff:0b:31:39:fe:fb:b8:15:00:0d:3b:
40:33:6c:62:99:ec:3c:28:74:e6:a4:13:53:55:12:
05:8c:ce:e3:b6:b2:b9:3a:dd:0e:64:0c:b5:16:b9:
2a:d9:3f:48:0b:ab:05:95:1f:5c:f8:e1:a2:78:3c:
eb:c7:80:2b:2f:aa:2a:ec:80:fc:96:95:32:36:d1:
41:a8:15:a9:20:7d:02:88:4a:57:bb:71:ea:70:3b:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F8:35:0A:F5:2C:AD:00:94:5B:FF:9C:FA:F8:A4:AC:08:CD:D2:E3
X509v3 Authority Key Identifier:
keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/lPg1CvUsrQCUW_-c-vikrAjN0uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.156.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7a:27:ce:a5:06:9c:7a:1c:dd:74:6d:0d:2b:e5:e7:16:c4:
fc:e2:0a:c5:b6:e4:21:23:32:82:6d:8d:67:b6:48:6a:74:b0:
2e:26:4b:7e:db:3d:ec:cd:b6:7d:29:a3:80:6e:12:f3:a0:1d:
76:de:97:d6:3f:2e:e7:bc:5a:af:f8:98:bb:7a:d7:16:50:50:
f8:f0:cb:39:ca:be:99:9a:45:c3:5b:09:a7:35:d3:c6:0a:e9:
34:82:f2:5c:96:e1:98:13:e7:89:6b:b4:3c:a5:60:a0:c6:b0:
5b:1b:1f:13:8c:54:09:cb:3d:d3:89:c1:4b:a1:26:67:e0:7a:
ac:9c:3d:19:c7:b2:fd:31:fc:ed:0b:15:ce:72:e1:ec:8f:ca:
5b:06:1a:a5:ab:bd:03:ef:71:f9:72:a7:50:04:3f:8b:c1:17:
d5:76:be:7f:9b:7a:4b:cd:c6:ac:54:be:1f:e3:3d:d0:71:6b:
37:56:18:e8:f4:20:1d:71:c3:f6:f0:81:5a:e6:8b:a7:28:bf:
a0:c3:cf:68:aa:54:86:55:ea:81:0c:b9:74:c5:ac:8d:69:45:
31:c2:cf:64:cf:01:14:d3:27:04:54:43:34:86:f9:87:e8:7e:
43:47:5e:bd:14:15:88:6f:9c:95:e4:c2:c2:c5:73:9c:89:74:
3a:a1:57:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:12:22 2025 by rpki-client