Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/w11yK88WqRiP63_hpiaty64xReg.roa
File: w11yK88WqRiP63_hpiaty64xReg.roa (raw, json)
Hash identifier: B3gHU0swXG292ETbnEzjX7tPvuBJQ8ffM6JuiA1A0hw=
Subject key identifier: C3:5D:72:2B:CF:16:A9:18:8F:EB:7F:E1:A6:26:AD:CB:AE:31:45:E8
Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Certificate serial: 018CC94D96748AE3482D8A39954EC25B5A4E
Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/w11yK88WqRiP63_hpiaty64xReg.roa
Signing time: Tue 02 Jan 2024 08:32:34 +0000
ROA not before: Tue 02 Jan 2024 08:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34903
IP address blocks: 45.130.208.0/22 maxlen: 24
2a0e:c240::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:96:74:8a:e3:48:2d:8a:39:95:4e:c2:5b:5a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Validity
Not Before: Jan 2 08:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c35d722bcf16a9188feb7fe1a626adcbae3145e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:a1:54:30:f7:54:3b:2d:be:ef:6a:c7:6b:
71:e1:48:81:a8:b8:a3:42:25:fd:05:8c:6c:bc:16:
05:6a:34:d4:31:59:c7:a7:d6:31:f1:6f:8d:d5:f1:
f1:98:a3:f6:43:58:3e:c5:48:c9:58:92:b5:eb:4c:
e0:6a:ad:f0:17:27:9c:1d:b2:5b:56:7b:2a:0c:52:
d3:17:a9:5a:80:c2:ad:ed:ad:92:91:a5:4e:93:66:
f1:ba:05:f3:92:5f:90:70:79:35:e0:5c:b0:5b:c3:
2d:86:47:e7:36:7d:81:82:c3:0c:b4:c7:2c:1b:22:
05:03:a9:f5:4f:b9:97:df:d0:b5:1e:27:f4:70:f5:
d6:60:a8:5c:1b:66:91:35:7e:10:40:f4:a9:57:7d:
30:b7:0d:80:1f:9f:22:c3:51:9f:bf:a7:62:42:e5:
58:d7:b4:89:b2:d5:38:74:92:cb:56:62:87:b6:ef:
8e:8a:ab:d4:df:d4:5f:aa:fa:b8:96:9d:7e:7e:5a:
d4:ab:94:67:d5:8b:9c:2c:76:52:70:15:40:7f:4b:
ba:75:af:0f:cd:e9:bc:69:31:56:a9:e0:2c:71:26:
67:1f:4d:b7:dd:03:20:c4:55:15:aa:f2:63:d3:44:
ab:1d:97:f7:c1:c7:5d:df:30:06:b9:89:94:01:5b:
1f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5D:72:2B:CF:16:A9:18:8F:EB:7F:E1:A6:26:AD:CB:AE:31:45:E8
X509v3 Authority Key Identifier:
keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/w11yK88WqRiP63_hpiaty64xReg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.208.0/22
IPv6:
2a0e:c240::/29
Signature Algorithm: sha256WithRSAEncryption
69:a7:f5:06:fa:c5:da:b1:f5:63:32:5e:2e:8d:95:77:9e:54:
fa:ff:34:b7:2d:11:83:65:8b:c4:83:38:c6:32:fe:57:4c:cf:
f3:c3:8a:6a:b2:25:d2:87:b8:3c:7e:72:9f:27:d4:aa:cd:0b:
19:6b:01:ce:b3:25:a0:89:14:de:d0:a2:22:ae:a8:60:64:60:
db:82:4c:da:c4:16:91:5f:a4:1f:1d:31:ec:f0:cc:8f:b3:9e:
8a:57:b7:f2:d8:41:62:1f:7f:b7:ea:85:ca:b1:4f:ec:16:49:
a2:54:39:86:f1:50:e7:39:5d:96:be:07:d3:b9:a3:2d:d6:a3:
0f:a6:4a:c3:ca:ad:09:a3:e7:24:4a:75:8c:42:b1:af:c7:89:
b5:30:7f:4a:00:0a:8d:e7:63:7d:00:a1:fa:c2:40:3c:33:4b:
7b:b8:b6:18:b8:54:65:0d:72:29:4e:9d:74:db:91:22:be:0e:
cf:a3:fa:cc:a1:7a:4d:c2:d8:d4:a6:22:8e:19:e0:18:e5:da:
cd:35:96:19:76:72:96:a7:e2:1b:2d:8f:9d:f6:f2:9e:3b:67:
f6:bb:7b:19:ec:3f:c7:ca:29:4d:4c:3a:4d:1d:9b:c0:b3:54:
8c:44:3f:02:e7:e1:05:80:1a:28:7c:da:23:c2:7b:ed:fd:d4:
95:4a:f2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:28:52 2025 by rpki-client