Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/Rrg38HxObKJHIbtSZrp1GUmRcC0.roa
File: Rrg38HxObKJHIbtSZrp1GUmRcC0.roa (raw, json)
Hash identifier: Emfp3yj8YVVxvKIEN5RCW9oEH/OCtP1lsO1iMSc7+cU=
Subject key identifier: 46:B8:37:F0:7C:4E:6C:A2:47:21:BB:52:66:BA:75:19:49:91:70:2D
Certificate issuer: /CN=d53f6b9ad30b6555fa5a54e7eb152b2bf412f226
Certificate serial: 018F124A9495C442C79CC74101E6E226E4A2
Authority key identifier: D5:3F:6B:9A:D3:0B:65:55:FA:5A:54:E7:EB:15:2B:2B:F4:12:F2:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T9rmtMLZVX6WlTn6xUrK_QS8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/Rrg38HxObKJHIbtSZrp1GUmRcC0.roa
Signing time: Wed 24 Apr 2024 22:47:08 +0000
ROA not before: Wed 24 Apr 2024 22:47:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29657
IP address blocks: 45.158.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Dec 2024 23:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:12:4a:94:95:c4:42:c7:9c:c7:41:01:e6:e2:26:e4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53f6b9ad30b6555fa5a54e7eb152b2bf412f226
Validity
Not Before: Apr 24 22:47:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46b837f07c4e6ca24721bb5266ba75194991702d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:dd:f3:e6:1f:24:03:a9:9e:af:d2:d7:62:
fc:a7:1c:dd:1d:23:d5:ae:0a:06:57:74:12:01:ea:
0d:12:55:dd:b2:e2:f8:4c:c9:a3:db:85:9f:02:2b:
f0:a5:af:43:e9:2e:85:6c:94:1c:68:6c:c6:ff:e3:
95:51:83:00:c0:c9:9a:1f:5f:ea:1d:df:cb:77:b7:
df:3c:77:7c:b5:ec:8c:79:9f:5e:44:ec:fd:2a:b2:
02:ba:98:ef:33:9c:f1:59:91:13:d4:0c:69:3b:f9:
e1:fb:02:c3:53:d9:33:6f:b9:55:e6:75:01:51:c6:
e6:8f:8f:70:53:5e:f6:9c:52:51:37:18:ae:fe:b0:
08:72:c8:cf:39:b5:d0:06:08:9d:62:1b:4a:68:d4:
ae:1b:c7:be:49:73:5b:35:96:4c:ba:f8:7d:30:d9:
3d:f2:db:da:16:82:bf:89:58:3a:a4:2f:b3:a5:63:
6f:98:18:8b:82:04:1e:26:e4:2e:af:4c:3a:86:ef:
99:09:da:a2:91:58:36:67:7f:8a:62:0b:41:4a:5d:
fb:9d:27:02:de:51:d7:ac:e8:86:e9:b5:e0:f3:da:
52:69:7f:83:c2:81:fc:20:cf:91:8d:61:91:5a:c1:
24:e8:59:96:79:2e:e0:1d:7d:d1:fd:87:97:25:7f:
ad:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B8:37:F0:7C:4E:6C:A2:47:21:BB:52:66:BA:75:19:49:91:70:2D
X509v3 Authority Key Identifier:
keyid:D5:3F:6B:9A:D3:0B:65:55:FA:5A:54:E7:EB:15:2B:2B:F4:12:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T9rmtMLZVX6WlTn6xUrK_QS8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/Rrg38HxObKJHIbtSZrp1GUmRcC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.104.0/24
Signature Algorithm: sha256WithRSAEncryption
67:7a:5b:f3:f4:f2:4c:f2:1c:40:d4:1d:90:f0:a7:ec:ce:4b:
f7:3a:5c:c6:0e:bb:a8:ae:b0:52:c6:0c:a6:1b:62:20:63:8f:
a2:fc:12:33:99:cb:c9:8a:76:df:77:e4:37:18:33:79:24:d5:
5a:67:2f:d2:32:b3:d2:e1:b8:37:92:b6:55:f7:ca:a6:d5:8f:
10:25:3c:17:08:d5:ce:46:55:e3:49:98:9c:a3:2c:01:fa:2c:
bb:3a:7c:5f:24:56:ae:09:a8:04:47:18:08:d7:e3:c5:d6:a4:
45:85:ff:12:0b:ae:c5:0d:16:2d:20:1f:40:87:bb:f8:19:4c:
b2:a6:3a:cd:44:4e:fc:4b:02:4b:20:c7:79:64:47:3c:1b:f9:
5a:e1:40:bc:17:91:2e:52:5e:5e:f1:64:f5:3c:5e:4b:2c:c9:
9c:20:bc:50:85:f9:a6:05:57:1a:31:90:66:58:f1:28:3a:2e:
98:db:38:3f:24:5b:f7:95:39:bf:91:c4:9f:8d:ea:88:6e:4f:
b2:c2:a9:6d:4a:65:5d:f7:ce:65:68:7e:97:b5:61:c4:5a:8e:
19:e2:2a:d7:b9:8f:da:ee:44:7b:c2:0a:30:98:70:3a:68:61:
51:73:bd:90:29:38:ae:84:63:58:f8:dc:ba:93:d4:16:77:7e:
c2:d3:13:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:53 2025 by rpki-client