Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/NXa0Jn2EOZpZ9o5-G_yLeqzdbfA.roa
File: NXa0Jn2EOZpZ9o5-G_yLeqzdbfA.roa (raw, json)
Hash identifier: fUsqxu90wZY4nkT8hbZYL1H13qTTj+Am1AJTnI8OPo0=
Subject key identifier: 35:76:B4:26:7D:84:39:9A:59:F6:8E:7E:1B:FC:8B:7A:AC:DD:6D:F0
Certificate issuer: /CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Certificate serial: 018CC3B6ECDDE50D54FBB2B9AC1B283ABCEF
Authority key identifier: 5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/NXa0Jn2EOZpZ9o5-G_yLeqzdbfA.roa
Signing time: Mon 01 Jan 2024 06:29:54 +0000
ROA not before: Mon 01 Jan 2024 06:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33916
IP address blocks: 195.242.192.0/22 maxlen: 22
45.133.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ec:dd:e5:0d:54:fb:b2:b9:ac:1b:28:3a:bc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Validity
Not Before: Jan 1 06:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3576b4267d84399a59f68e7e1bfc8b7aacdd6df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:ef:3e:25:b6:c9:cf:7f:8e:c3:ba:5f:95:
a9:c2:df:e7:89:0e:d2:67:fc:bc:d9:f9:c8:a5:5b:
f9:f8:ec:86:af:a3:0a:bb:45:2b:e2:e5:9b:4b:76:
b4:be:6b:db:fd:3a:d4:66:a6:2b:f3:eb:16:f9:f7:
58:36:9b:b9:bf:0f:92:c1:97:a2:e9:77:6f:4d:bc:
ac:c4:ef:b5:c4:17:d8:e8:51:8e:54:1d:00:c2:07:
47:7c:ea:db:ac:11:b1:b6:f6:da:49:c5:86:12:87:
03:c6:1b:65:5c:71:dd:ee:d6:c0:0e:ab:f9:84:a3:
66:83:2f:7d:f7:47:1a:a7:c0:f1:75:bb:a3:63:2e:
0d:b7:d3:ba:62:ee:23:a8:ad:c2:7f:7b:e9:a8:62:
a2:f4:6a:90:5a:b1:0b:15:32:40:ee:3d:24:34:23:
43:6d:7a:c6:4b:99:12:5a:4a:3b:3c:4f:4f:48:66:
18:e4:ed:1b:d3:59:f4:53:c6:b6:61:e1:57:56:15:
41:8d:b9:b5:ef:d4:32:04:4f:25:7f:bf:fd:96:b9:
08:1e:01:a4:c6:6c:a6:5c:54:ee:4c:6c:26:b8:06:
49:81:d9:ad:71:8a:d7:0f:b4:58:eb:97:6e:9a:b7:
4d:67:44:56:40:3d:43:f6:35:be:ea:e0:02:9a:52:
58:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:76:B4:26:7D:84:39:9A:59:F6:8E:7E:1B:FC:8B:7A:AC:DD:6D:F0
X509v3 Authority Key Identifier:
keyid:5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/NXa0Jn2EOZpZ9o5-G_yLeqzdbfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.164.0/22
195.242.192.0/22
Signature Algorithm: sha256WithRSAEncryption
38:36:15:27:64:00:37:9b:fe:cc:2c:98:d0:b3:85:1f:c7:52:
31:69:4a:e9:e5:c0:d0:df:3f:e7:b6:b4:10:f6:d8:04:a7:c1:
53:be:85:7a:92:89:17:7a:86:d0:2e:eb:41:7b:33:16:59:75:
52:95:ea:60:66:78:f5:f5:fc:b5:55:c2:6d:6a:42:cd:cc:f5:
b5:7b:46:03:5c:b4:af:68:5a:af:ca:19:bb:15:23:d8:c9:71:
98:a7:ad:af:63:27:67:6a:a1:82:3d:28:72:78:59:9b:e0:b2:
e5:d1:91:a1:d2:30:57:5c:fa:dc:24:82:c5:6e:76:f6:ea:e9:
c5:56:00:e5:4a:35:a4:0f:a8:dc:94:b3:c3:24:e8:12:36:fa:
b6:b8:54:31:fd:40:bb:ca:78:9e:58:fa:ca:98:eb:97:d5:f7:
a1:da:f5:b6:7d:30:1b:d5:fb:61:06:65:7e:50:43:9c:84:4c:
9f:3c:f2:7d:ea:54:56:e7:1e:2c:44:05:2d:98:4e:37:c8:e5:
ce:9f:b3:75:dc:b2:c0:80:ed:60:86:0f:aa:eb:e1:61:95:3e:
79:30:88:95:d5:20:ac:3b:e9:f5:8f:7c:15:b0:4a:65:81:f4:
7e:4a:1c:86:54:e9:03:17:22:82:55:7d:cd:d8:29:1b:e7:da:
4b:f9:51:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:07 2025 by rpki-client