Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/T2kwlOj18c_-Yk-vzVYwgh3a2v0.roa
File: T2kwlOj18c_-Yk-vzVYwgh3a2v0.roa (raw, json)
Hash identifier: pFS2esicUl/FQzWG2NwNDXBByuQcQfzPe+V9zn+B3+Y=
Subject key identifier: 4F:69:30:94:E8:F5:F1:CF:FE:62:4F:AF:CD:56:30:82:1D:DA:DA:FD
Certificate issuer: /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial: 01936896229A46ACAF6529407E931D8305F3
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/T2kwlOj18c_-Yk-vzVYwgh3a2v0.roa
Signing time: Tue 26 Nov 2024 13:08:09 +0000
ROA not before: Tue 26 Nov 2024 13:08:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52056
IP address blocks: 45.82.16.0/22 maxlen: 22
46.23.160.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 02 Dec 2024 07:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:96:22:9a:46:ac:af:65:29:40:7e:93:1d:83:05:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
Validity
Not Before: Nov 26 13:08:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f693094e8f5f1cffe624fafcd5630821ddadafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:58:81:ad:f6:2a:9a:06:cc:58:2f:a4:0f:72:
7e:65:c5:3f:a8:9f:2e:e1:a4:ae:68:b9:1d:02:09:
a5:0c:31:5d:8f:43:6c:1c:9f:79:6f:3d:dd:07:b3:
d0:e3:8b:8e:b2:70:4a:eb:c4:4e:e9:1e:c0:4c:6a:
d9:6a:e9:c1:b8:d2:75:5c:25:30:a5:8f:27:72:7a:
0d:ba:f1:4b:c3:98:e9:a6:aa:fc:cb:15:f9:10:3c:
37:04:50:68:92:34:98:5f:94:01:11:2f:72:80:83:
52:5d:b5:51:e3:15:dd:24:f3:d5:56:d2:4a:ef:47:
01:2d:af:68:31:b7:d3:18:38:95:eb:0d:1c:15:32:
be:c7:eb:db:31:57:5f:53:64:ba:59:7a:26:9f:72:
23:6b:32:98:e3:2e:d4:9d:4b:8e:c8:0d:14:1d:f2:
9e:67:95:df:30:05:ad:5a:5a:c7:48:ce:33:e5:ca:
ab:8d:3b:61:71:2f:37:5c:72:d5:b8:06:6a:9b:52:
f5:63:30:94:9d:f3:2d:79:e0:28:93:7e:52:40:f8:
36:ec:5c:44:64:38:69:fd:fd:c6:49:06:35:af:da:
39:9b:de:ce:d5:df:f4:6b:bf:21:12:ba:bc:e7:62:
29:e1:99:c0:48:1e:75:6b:e7:0a:23:e7:f8:48:eb:
0e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:69:30:94:E8:F5:F1:CF:FE:62:4F:AF:CD:56:30:82:1D:DA:DA:FD
X509v3 Authority Key Identifier:
keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/T2kwlOj18c_-Yk-vzVYwgh3a2v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.16.0/22
46.23.160.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:1c:27:7f:eb:7d:28:e2:0f:bf:63:c6:2c:63:60:b1:95:0a:
99:c9:f3:1d:c5:10:01:61:49:d1:b7:3f:fb:c3:98:bc:63:03:
9f:67:5b:a9:23:2f:4c:b3:85:cf:27:23:42:9c:33:25:82:c6:
be:3a:bc:a0:25:8a:f9:bb:78:17:65:f5:79:5f:fd:92:a6:79:
f1:ea:c5:cb:b7:0e:2a:5a:89:1c:e6:99:1e:24:2c:f6:2f:ef:
df:99:8e:4e:65:68:79:83:4e:87:93:26:ce:ac:8f:66:80:a1:
42:52:fe:f9:f6:89:c1:d4:03:42:55:56:b2:d5:2a:c2:97:6b:
a5:ea:56:97:01:89:36:86:49:63:74:db:42:d8:00:67:6f:11:
a1:3c:2c:d2:d7:3f:cc:a4:07:33:ea:90:b1:9b:e7:fb:fc:4e:
dc:a1:9a:2b:18:49:74:ca:75:58:12:40:b0:ba:6d:a6:30:50:
f2:ee:c6:32:fe:fd:09:d4:ab:e2:9c:36:4a:bd:e2:7b:55:a9:
92:d9:02:75:55:f6:89:16:45:8f:1b:e3:4e:20:91:82:6f:c2:
2a:d3:3d:fb:36:42:41:70:82:9f:d1:cc:10:04:3c:e8:cc:dc:
2b:09:6e:fd:03:86:d2:d1:43:70:c5:77:f9:3a:59:99:c9:bd:
6c:06:0a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:41:57 2025 by rpki-client