Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/Mg6zT1NljxXsHILyIMUxLVQ54LQ.roa
File: Mg6zT1NljxXsHILyIMUxLVQ54LQ.roa (raw, json)
Hash identifier: n2zIV+Uaf7rrqaLxNU3ewBoAAhjlb2BVX7Hfmov65Rw=
Subject key identifier: 32:0E:B3:4F:53:65:8F:15:EC:1C:82:F2:20:C5:31:2D:54:39:E0:B4
Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial: 018CC727185447CE091FBD0DB4AEE5290CC3
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/Mg6zT1NljxXsHILyIMUxLVQ54LQ.roa
Signing time: Mon 01 Jan 2024 22:31:17 +0000
ROA not before: Mon 01 Jan 2024 22:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211366
IP address blocks: 45.9.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Oct 2024 13:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:18:54:47:ce:09:1f:bd:0d:b4:ae:e5:29:0c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Validity
Not Before: Jan 1 22:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=320eb34f53658f15ec1c82f220c5312d5439e0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:ec:b4:e8:08:b8:eb:16:ab:a7:cc:47:f4:
32:44:65:bf:ff:89:b4:b9:42:0e:35:b6:d0:b5:15:
23:13:5d:b1:cf:9e:93:bd:72:21:6e:8d:74:4b:ad:
d4:ff:dc:e6:41:55:ef:b8:b3:c8:c2:34:31:af:f7:
f7:b4:61:70:86:59:aa:6c:d8:a4:6a:a5:0e:07:15:
bf:71:e3:07:6b:94:42:cd:42:a8:c5:5c:71:7d:b3:
52:32:10:fb:62:21:4c:b3:20:63:eb:71:74:13:ad:
aa:a9:b0:9c:5d:6a:82:c2:f8:22:01:77:c3:e9:ef:
fb:5d:b7:bd:ac:21:7a:6a:a2:13:18:1f:2c:90:15:
58:76:2b:7b:c1:b4:13:2f:d4:07:8f:b3:22:d5:26:
4f:db:ba:74:5f:3e:85:a1:7e:96:c4:c3:64:0b:e8:
7e:2d:93:f7:fd:eb:91:ed:46:4e:11:e9:f7:93:b2:
a5:70:2e:d2:a5:b4:67:98:ae:c2:62:ff:71:05:63:
45:37:9c:a7:0a:5b:6e:8e:de:65:72:99:a4:9f:0d:
d6:98:32:74:05:02:c3:0a:bb:f1:e4:32:42:c7:ad:
f7:f3:6e:b4:09:f2:8d:9d:a0:83:29:7d:66:0f:bc:
21:0d:45:e2:dc:c5:97:c8:41:9a:14:c5:bf:26:00:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0E:B3:4F:53:65:8F:15:EC:1C:82:F2:20:C5:31:2D:54:39:E0:B4
X509v3 Authority Key Identifier:
keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/Mg6zT1NljxXsHILyIMUxLVQ54LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.193.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:aa:d1:e6:3d:e2:2e:91:cc:77:e7:f1:ef:63:14:d9:09:76:
b0:a4:4f:b6:88:8b:ad:91:1e:26:84:96:a6:bb:8d:e2:86:14:
87:93:cd:22:45:81:98:ea:33:17:28:00:f7:d6:60:2d:fb:be:
40:b7:73:d5:01:17:06:95:a6:ba:e5:7f:d2:46:7d:f3:bb:12:
85:ba:7e:59:25:54:0c:50:9d:f2:2c:77:07:29:e4:00:de:9a:
77:13:30:ad:90:db:86:b1:77:a7:e3:14:d2:cc:79:ee:03:2c:
c3:92:08:94:1e:ea:a5:d7:bc:99:b0:93:f4:1a:e1:1e:95:1a:
7d:7d:de:d4:97:de:98:69:6b:7b:5a:4c:1d:1c:6a:88:5d:8f:
d2:03:06:83:94:fe:d8:42:e0:16:95:5a:de:6e:f1:b0:47:42:
a7:28:56:7a:34:17:06:f2:19:90:b1:79:f1:7c:30:b4:79:08:
96:3f:67:2a:6a:1f:e1:a7:b9:3d:11:8d:38:05:e9:f2:e4:49:
38:9c:f7:79:9f:54:12:44:8d:df:6a:ca:99:0e:c1:93:c5:c5:
21:11:64:1e:bf:a9:7a:b5:49:41:d8:b7:a5:1d:90:fa:7a:e3:
5b:27:6f:ce:92:6c:ec:6c:62:a8:61:55:aa:92:99:2b:27:e5:
41:85:49:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:00:47 2025 by rpki-client