Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/1-nI4nwZqcF0Ox879oxXPi-mKdpE.roa
File: 1-nI4nwZqcF0Ox879oxXPi-mKdpE.roa (raw, json)
Hash identifier: spZKaimhytUCRSSV1CXDA+Nv0Kv31ZRctVxojDDgaQA=
Subject key identifier: FA:72:38:9F:06:6A:70:5D:0E:C7:CE:FD:A3:15:CF:8B:E9:8A:76:91
Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial: 0193B5BFBEC5A81B08814E18DD04D1E21AAF
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/1-nI4nwZqcF0Ox879oxXPi-mKdpE.roa
Signing time: Wed 11 Dec 2024 12:44:22 +0000
ROA not before: Wed 11 Dec 2024 12:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204582
IP address blocks: 45.144.44.0/29 maxlen: 29
45.144.44.0/30 maxlen: 30
2a0e:eac0:2000::/44 maxlen: 48
2a0e:eac0:2010::/44 maxlen: 44
2a0e:eac0:2100::/44 maxlen: 44
2a0e:eac0:2101::/48 maxlen: 48
2a0e:eac0:2110::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 12 Dec 2024 13:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:bf:be:c5:a8:1b:08:81:4e:18:dd:04:d1:e2:1a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Validity
Not Before: Dec 11 12:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa72389f066a705d0ec7cefda315cf8be98a7691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:5a:53:52:28:09:8b:6e:82:6b:a7:2b:a1:
fd:1f:f2:2b:50:d4:de:29:7a:a7:8a:e8:65:28:b9:
27:6b:4e:18:a7:c7:84:ca:ab:d1:90:54:07:d8:32:
2f:6b:1b:68:6f:a0:c9:31:5b:db:6a:73:a6:63:bc:
5f:4d:2a:4f:70:d3:38:e1:03:98:af:0b:82:56:28:
ac:4b:bf:10:71:12:d8:1e:f3:41:f7:20:ad:e7:9a:
b0:0f:90:f8:50:26:0d:92:c8:3f:09:59:86:56:b3:
82:b0:c9:1d:79:78:de:5f:47:33:c5:82:6e:ba:42:
f5:2d:88:b6:49:7a:4b:3a:85:d7:73:d0:a6:7d:6a:
41:f2:5a:02:5b:6c:c9:c7:4e:8a:67:3c:fc:b8:ba:
9d:de:b0:7f:c0:9c:f9:ef:05:ee:aa:75:e9:ff:6c:
a0:29:4a:50:dc:d8:6b:8d:33:7b:2d:df:f4:a7:c0:
6b:e9:e4:f6:cc:95:15:c9:d3:5e:d3:68:0a:27:d8:
99:9a:68:55:d1:9a:54:7e:33:83:38:be:b7:3c:8e:
0c:f9:b0:0e:c7:b3:37:07:dd:b9:4a:2b:43:e3:d7:
5b:49:f4:81:97:4f:87:7c:5a:66:7a:73:19:24:a5:
71:61:2a:e7:98:b4:37:41:bc:22:f7:47:85:7b:70:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:72:38:9F:06:6A:70:5D:0E:C7:CE:FD:A3:15:CF:8B:E9:8A:76:91
X509v3 Authority Key Identifier:
keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/1-nI4nwZqcF0Ox879oxXPi-mKdpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.44.0/29
IPv6:
2a0e:eac0:2000::/43
2a0e:eac0:2100::/43
Signature Algorithm: sha256WithRSAEncryption
7d:dd:9a:1b:a0:40:1c:33:2c:bf:f0:b9:be:e5:69:43:bb:70:
1e:d6:45:ff:4c:40:f4:e1:5b:4a:f7:8e:53:c1:6a:bc:3e:a9:
50:12:0e:50:b3:04:ff:27:e4:32:54:f6:31:2b:ce:9f:d9:c4:
48:4d:1e:47:f7:fc:16:6a:1e:93:6c:19:66:00:db:d0:22:16:
78:df:d4:ca:74:4f:89:6e:e5:a2:7f:13:5f:d2:6e:7c:36:51:
eb:73:71:8b:16:b1:15:d7:9f:06:43:8c:3c:98:6f:dd:13:28:
78:1a:07:dc:1b:1e:35:22:40:e4:33:be:03:4d:b3:2e:94:ad:
75:55:2a:c0:c0:72:20:a7:56:aa:d3:ec:2d:8f:8b:9e:a9:f8:
c7:56:42:57:ab:b9:b7:7e:1b:9f:f8:32:b0:5c:2a:29:77:71:
57:fe:5c:5e:3c:aa:0f:c6:b4:ea:aa:ab:8c:14:ee:9b:23:6d:
aa:cc:fc:bd:c8:ea:9a:6a:aa:8f:26:46:45:d3:e9:b5:04:26:
b6:1a:3f:a3:83:50:0f:89:e7:94:7f:2c:03:6d:b1:51:69:f7:
6f:f4:95:0b:93:c9:fe:90:eb:a7:21:9c:95:a4:74:77:f5:ec:
db:aa:35:ed:bc:0a:a1:80:37:eb:7b:74:e1:c3:fd:b1:36:ff:
9a:85:77:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:38:42 2025 by rpki-client