Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/XUcpppzOJAeXg28DHq7oSqwoieU.roa
File: XUcpppzOJAeXg28DHq7oSqwoieU.roa (raw, json)
Hash identifier: M8P7vE8FDys54OJ3QMLrLzdMLfMeMKWijmDBM0hRiqU=
Subject key identifier: 5D:47:29:A6:9C:CE:24:07:97:83:6F:03:1E:AE:E8:4A:AC:28:89:E5
Certificate issuer: /CN=4ecd75a5109e2c106e1193d57ee2b999fec27fe0
Certificate serial: 018F531E2ABB7521463B61FE926A6A75ADD5
Authority key identifier: 4E:CD:75:A5:10:9E:2C:10:6E:11:93:D5:7E:E2:B9:99:FE:C2:7F:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/XUcpppzOJAeXg28DHq7oSqwoieU.roa
Signing time: Tue 07 May 2024 12:53:56 +0000
ROA not before: Tue 07 May 2024 12:53:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215675
IP address blocks: 45.129.164.0/24 maxlen: 24
185.190.249.0/24 maxlen: 24
2a07:ddc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 07 May 2024 15:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:1e:2a:bb:75:21:46:3b:61:fe:92:6a:6a:75:ad:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecd75a5109e2c106e1193d57ee2b999fec27fe0
Validity
Not Before: May 7 12:53:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d4729a69cce240797836f031eaee84aac2889e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:65:1c:39:2c:3a:be:5d:45:c6:2f:18:aa:
b0:c4:7b:6c:94:df:0c:29:e9:31:06:8c:41:c8:aa:
66:a4:a1:ca:03:b2:41:11:ae:d4:60:f4:5d:1c:78:
9b:07:b7:fd:aa:93:95:7e:1f:d9:8c:05:4f:ea:51:
56:2c:c4:d5:2f:2f:4d:d5:2e:fb:65:37:62:d0:30:
05:85:54:0a:99:ce:58:9c:39:b5:09:ff:c9:76:4b:
9b:1f:a3:5a:e1:1b:b3:fa:c3:d8:11:24:7f:11:7a:
5f:b5:2d:ee:f5:1d:fd:53:ce:e6:d0:92:1f:1d:3d:
59:f4:12:52:24:e9:a4:34:ce:01:55:c6:8d:0e:86:
7a:ed:1a:80:61:c4:21:07:82:f2:da:9f:fd:1d:3e:
1f:35:39:c2:9e:36:c8:c4:90:77:a0:f0:f7:c3:93:
49:3e:3d:6c:9a:7f:e9:d7:e3:2f:65:41:1e:1a:eb:
b0:1f:98:b9:61:48:06:bc:91:55:e3:88:05:ef:b0:
2f:b1:74:83:09:7d:87:07:4f:3c:87:13:54:d6:85:
27:57:58:02:86:8d:1e:9b:1a:76:28:f1:da:2c:37:
95:a3:25:e1:63:ba:08:22:74:e4:b5:40:28:54:ab:
da:90:90:9b:c9:75:1c:18:d2:9d:f6:ac:23:e5:ef:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:47:29:A6:9C:CE:24:07:97:83:6F:03:1E:AE:E8:4A:AC:28:89:E5
X509v3 Authority Key Identifier:
keyid:4E:CD:75:A5:10:9E:2C:10:6E:11:93:D5:7E:E2:B9:99:FE:C2:7F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/XUcpppzOJAeXg28DHq7oSqwoieU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.164.0/24
185.190.249.0/24
IPv6:
2a07:ddc0::/29
Signature Algorithm: sha256WithRSAEncryption
43:9a:9b:30:26:15:8c:70:32:c6:1c:e7:f2:c3:f1:f9:b8:ad:
94:00:40:a4:e9:bf:97:e1:89:f0:67:6c:1c:24:93:2f:ff:2d:
21:7c:b9:a3:ff:c3:af:17:f5:c4:a3:3d:6e:ad:07:62:3e:31:
0e:75:bc:6a:d0:b9:d5:26:8f:31:16:e9:1c:4c:a3:9f:20:32:
31:cd:55:24:99:4e:fd:79:ea:e7:53:54:3f:41:0b:cb:64:07:
a4:e9:3f:64:8d:11:b1:17:bc:eb:89:da:0c:6c:be:0a:35:e9:
e1:50:22:e7:ba:43:ea:09:e2:49:37:90:e1:e6:7f:3a:02:a3:
bd:ca:4c:1d:82:b1:60:a2:fa:0c:33:4f:3e:b7:fb:da:87:1c:
b8:75:b7:5f:9f:c0:41:fa:5e:92:c1:7a:a8:41:19:e9:c5:58:
fb:46:8d:4c:b8:21:27:93:be:0c:0a:55:13:fb:3b:40:a8:4c:
2e:48:b2:1c:73:84:8a:74:93:3d:f3:03:59:fe:7e:ed:b5:62:
7d:ab:9c:a1:7b:58:09:59:50:37:de:13:d5:ca:f0:af:b1:6f:
77:da:90:bb:c0:b7:cf:64:fc:ed:9c:74:85:20:9c:72:7f:92:
77:bd:b6:0a:1e:6d:db:06:86:3e:0a:5d:1a:bd:d2:3a:80:24:
ff:ac:17:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:43 2024 by rpki-client on console-ams.rpki-client.org