Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/g7bGeW7jHNv_DRywW6eKPwUp_4E.roa
File: g7bGeW7jHNv_DRywW6eKPwUp_4E.roa (raw, json)
Hash identifier: dGntmAdfExPF9TMQGMriE/ot6pAoKKu3PrqzHT1j5DE=
Subject key identifier: 83:B6:C6:79:6E:E3:1C:DB:FF:0D:1C:B0:5B:A7:8A:3F:05:29:FF:81
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019331C7AE36B2148E3E7137B1ED7458F3FE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/g7bGeW7jHNv_DRywW6eKPwUp_4E.roa
Signing time: Fri 15 Nov 2024 21:43:10 +0000
ROA not before: Fri 15 Nov 2024 21:43:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52000
IP address blocks: 45.135.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:31:c7:ae:36:b2:14:8e:3e:71:37:b1:ed:74:58:f3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 15 21:43:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83b6c6796ee31cdbff0d1cb05ba78a3f0529ff81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:11:fb:60:22:ab:53:bb:c0:d3:5d:b4:cf:
f2:ba:12:53:03:96:ed:2a:89:e5:aa:56:77:a1:8c:
78:7a:69:26:97:dd:46:62:64:31:7b:19:ff:9c:a1:
f6:da:47:54:67:ec:23:6e:fb:ed:af:eb:87:50:fa:
b3:c3:41:39:fd:e9:b1:44:21:ad:7e:35:db:6c:82:
d8:7d:e5:df:b9:01:d1:6d:e5:12:15:10:a4:45:76:
25:2b:2e:f0:c0:89:95:f3:ad:7f:87:cb:c3:b8:02:
a7:73:66:5e:1d:8b:82:e2:09:80:9c:55:02:62:1a:
35:e8:b8:06:66:6e:b4:8a:72:97:b4:77:ff:0a:af:
a9:df:fe:c8:f3:aa:57:5f:0b:75:1c:2c:ae:db:df:
6a:84:15:a3:29:e3:36:77:f7:51:70:96:59:49:48:
be:20:d3:82:59:78:42:ec:a6:13:36:07:16:a3:d8:
8f:cb:eb:c5:50:cd:95:60:f8:0c:f0:0a:1c:5a:66:
00:0b:a9:a8:3c:ca:ae:ed:5e:8f:04:ec:9a:1c:3a:
3a:7d:f8:75:70:3b:57:20:d4:39:7b:8d:e3:a8:e6:
18:c3:b1:55:ab:d3:19:05:d4:79:c1:7b:77:42:ff:
fe:4a:aa:6a:57:b4:73:6f:ac:84:10:d9:af:65:f5:
26:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B6:C6:79:6E:E3:1C:DB:FF:0D:1C:B0:5B:A7:8A:3F:05:29:FF:81
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/g7bGeW7jHNv_DRywW6eKPwUp_4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.181.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ad:3b:be:e8:9b:50:45:0b:d3:97:79:89:8a:79:95:8c:bb:
11:36:5e:cd:14:85:76:d7:b1:f1:3a:ac:08:1d:32:1e:7f:f8:
36:9a:7a:df:78:61:8f:0f:ea:11:ec:95:dc:f7:3e:38:d1:a0:
6f:e1:41:f1:c8:4e:24:8d:1e:de:61:cc:e8:86:b9:81:2e:ca:
f4:5f:e5:4a:90:cb:3c:d4:e2:44:74:cf:45:f1:df:c1:8b:da:
af:02:2a:c5:55:05:d8:6a:aa:5b:b5:5f:91:07:54:bf:c4:b8:
b5:87:d5:74:b4:ae:42:aa:f8:56:8a:54:d7:08:4e:8d:d2:d3:
77:ec:6d:db:25:fc:f8:9b:06:41:6b:4f:a0:d0:fa:dd:c6:36:
46:03:f5:fa:9c:39:8b:84:e1:9f:bb:97:56:a0:95:f9:d7:c5:
89:e5:d3:81:2f:65:89:f0:24:d9:0a:5c:fe:a2:cf:d9:4d:ca:
cd:c5:3e:61:0d:bb:58:2f:de:10:6d:58:0e:2b:58:bf:95:e9:
b7:4d:aa:89:53:59:6f:fe:e3:27:4f:ce:73:25:50:00:b7:09:
ba:51:b5:78:8e:f0:a7:42:bc:42:1d:ef:93:26:94:57:05:ce:
ad:c0:97:49:05:a5:07:d7:e1:88:e6:ee:d7:9c:82:d3:5d:59:
1b:83:87:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:04 2025 by rpki-client