Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/FX1SpsCHHWTuiAeQxCws4Hj1-bM.roa
File: FX1SpsCHHWTuiAeQxCws4Hj1-bM.roa (raw, json)
Hash identifier: +oobSVkF7j0dzWBT9UBFQT7D4zEppXINPjwMfAIBl3c=
Subject key identifier: 15:7D:52:A6:C0:87:1D:64:EE:88:07:90:C4:2C:2C:E0:78:F5:F9:B3
Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial: 019421B25178794BAA09F5CAC6426B919C9E
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/FX1SpsCHHWTuiAeQxCws4Hj1-bM.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51255
IP address blocks: 45.9.194.0/24 maxlen: 27
2a0e:1101::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:51:78:79:4b:aa:09:f5:ca:c6:42:6b:91:9c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=157d52a6c0871d64ee880790c42c2ce078f5f9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:85:1a:0a:36:b7:63:51:b6:3e:9c:60:2e:
62:f2:0b:75:3c:df:63:34:ea:5c:0e:b7:ea:b9:4b:
8f:15:be:f3:16:96:b1:db:b9:ee:86:d8:ec:21:a9:
94:7d:af:f5:9a:5e:c0:7b:70:2a:d2:eb:e6:55:20:
2e:0b:fc:f6:da:5b:ae:1e:2d:85:69:d6:49:12:7c:
69:04:00:f4:e2:71:df:aa:f5:54:8f:eb:7a:02:4e:
37:ba:38:5e:80:16:da:b9:73:07:4e:99:2a:be:2f:
10:40:56:b9:c6:50:69:d2:0a:a7:5e:24:04:9f:16:
6d:f7:c0:6e:03:5c:9b:7d:8b:54:07:07:f6:6f:a6:
74:fb:76:e9:eb:93:69:d5:99:5b:d9:00:bd:01:01:
22:a9:eb:de:9c:85:ed:ad:70:e7:78:07:b9:cc:fb:
04:bb:3a:ac:f8:e4:16:ba:e7:c2:0c:76:c4:6a:9e:
a9:b4:55:cd:41:5e:53:8f:e9:f4:10:d5:8e:1d:56:
b5:2a:6b:1e:5e:81:c7:50:b5:9a:eb:34:0b:01:ac:
a1:fd:e9:07:b9:47:2d:e1:83:fb:30:ec:cf:6c:0d:
64:2d:ae:40:41:de:5e:0b:bf:4a:99:64:48:15:5d:
ed:cc:6f:76:ea:79:02:f3:52:7f:a3:50:40:db:94:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7D:52:A6:C0:87:1D:64:EE:88:07:90:C4:2C:2C:E0:78:F5:F9:B3
X509v3 Authority Key Identifier:
keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/FX1SpsCHHWTuiAeQxCws4Hj1-bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.194.0/24
IPv6:
2a0e:1101::/44
Signature Algorithm: sha256WithRSAEncryption
8f:62:52:3f:8a:75:67:7e:92:bd:b6:bc:cc:de:21:4b:e0:e5:
ec:4b:37:2a:7e:1a:37:4f:2b:9f:15:f0:d3:74:de:78:38:fa:
db:49:6e:2c:e7:22:19:1d:83:2c:67:25:64:31:2b:2e:fa:82:
7b:07:0b:57:4e:5d:e9:ec:b4:9d:b4:3e:fa:a0:46:8e:ec:24:
ed:10:d2:9b:cb:46:27:cf:3c:bd:a6:c6:67:ce:6b:54:63:06:
f7:85:eb:6a:cc:41:17:ce:8e:c6:42:50:21:43:6f:65:dd:9f:
2a:24:b8:c4:eb:a7:b3:03:a6:33:6c:8a:95:da:75:04:5c:83:
38:a9:33:e6:6d:c6:35:98:a1:2c:35:17:a6:07:2e:2e:4e:34:
8c:a4:fc:94:11:24:65:7d:9b:18:34:dd:8b:bd:37:97:6d:2d:
66:31:35:43:1d:b3:d1:ec:ca:33:ae:0b:0b:0b:33:4a:fa:1a:
7d:38:b1:63:34:69:45:78:9f:de:47:37:de:b1:d5:3f:56:91:
35:ed:19:0c:71:fa:99:17:63:6e:0a:81:c2:a3:eb:dc:e1:00:
c8:a6:03:bf:8b:07:b5:db:e2:75:87:e6:1a:08:59:ca:19:2a:
15:a7:e7:d8:a2:0e:65:93:f5:42:08:bc:34:e9:ae:bf:aa:cf:
66:12:84:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:27:45 2025 by rpki-client