Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/Sbm1r0PM_ClLmm2cD8xOkA6LlVA.roa
File: Sbm1r0PM_ClLmm2cD8xOkA6LlVA.roa (raw, json)
Hash identifier: VlVU3HNSxrVf31nkeu/M51wlYTHl3Em+ftZDGCMcME0=
Subject key identifier: 49:B9:B5:AF:43:CC:FC:29:4B:9A:6D:9C:0F:CC:4E:90:0E:8B:95:50
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 01942825AAEB6CF8B5555D44856DFD52379C
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/Sbm1r0PM_ClLmm2cD8xOkA6LlVA.roa
Signing time: Thu 02 Jan 2025 17:52:24 +0000
ROA not before: Thu 02 Jan 2025 17:52:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63150
IP address blocks: 45.145.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Mar 2025 15:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:aa:eb:6c:f8:b5:55:5d:44:85:6d:fd:52:37:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 2 17:52:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49b9b5af43ccfc294b9a6d9c0fcc4e900e8b9550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:74:0f:cf:8a:68:49:c4:95:55:8c:31:1e:
64:dd:d1:43:55:a5:14:80:af:89:8f:74:75:ef:7f:
80:95:00:60:d7:99:0a:da:46:b3:10:28:e0:31:cc:
59:53:98:36:c5:4e:a5:99:63:07:a0:cb:f5:b0:67:
60:5b:b7:08:e2:73:42:e6:73:4d:2a:72:17:ea:bd:
72:95:4b:e7:91:17:08:84:a8:68:73:ee:68:a0:46:
30:2e:97:46:80:a5:21:42:bd:16:5b:f4:7c:2f:f5:
53:60:c5:82:e2:27:43:4a:59:90:d8:30:7d:6f:7a:
ef:9c:45:0a:8f:8a:10:12:f0:15:fb:65:e9:66:fa:
42:6c:e4:e7:49:30:fb:9e:58:3b:91:25:f3:2a:be:
50:b3:f2:c7:21:0d:5e:54:57:e6:53:b2:03:a5:f3:
a4:60:a3:7c:30:ad:4b:b2:99:c7:5f:6e:5e:2f:a7:
65:4b:a0:e1:7e:97:ba:50:d6:48:e8:16:7e:3c:3c:
3e:33:63:b7:f6:85:73:e5:cc:b5:f6:6a:cd:ae:5c:
72:44:7a:56:d0:32:63:f9:b9:7a:68:62:81:e1:0b:
4b:57:99:c4:d4:76:e4:ff:5f:03:fd:fa:e3:61:9c:
67:98:95:19:52:b6:c3:5a:2f:9a:93:ad:a4:a7:66:
f3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B9:B5:AF:43:CC:FC:29:4B:9A:6D:9C:0F:CC:4E:90:0E:8B:95:50
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/Sbm1r0PM_ClLmm2cD8xOkA6LlVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.153.0/24
Signature Algorithm: sha256WithRSAEncryption
61:37:dd:04:35:70:09:63:c4:be:1a:cd:8a:60:15:a8:ce:37:
39:09:fa:5d:7d:f9:2c:b6:b0:22:b9:04:13:dc:30:ab:ac:d4:
65:3f:a6:3d:f5:14:e0:d1:48:85:87:87:c7:de:01:26:4c:ce:
28:34:8e:92:12:91:82:14:03:8b:4f:f7:a4:60:a9:a9:4c:b4:
5a:25:03:a3:20:7f:fc:fa:e7:f5:4d:95:94:63:60:65:9d:26:
22:77:17:38:59:23:2c:3a:e2:38:c4:75:90:34:37:e3:7b:e9:
d6:9f:cd:13:6b:02:0f:7e:b9:32:10:26:8e:ac:f2:ea:60:7e:
41:66:3c:d6:ca:05:6e:c5:10:2b:64:40:80:c9:e8:55:38:25:
72:45:22:f2:a4:bf:e3:55:21:36:7e:cb:1d:ea:54:00:af:67:
b2:8c:8e:0e:dd:81:f0:fd:7c:25:5c:ff:c3:3d:ab:89:82:87:
05:ec:d8:96:4a:48:4e:e1:23:2a:b3:dd:56:99:ef:ee:f9:9a:
1b:dd:14:0c:e8:33:7b:d8:ee:43:08:e5:01:6d:e2:f4:b8:3b:
0c:aa:e8:5e:aa:dc:53:5f:32:e1:f7:8f:27:c7:04:32:4d:b6:
5b:89:0c:e4:78:f6:f6:8e:e9:0f:93:5c:d8:8a:30:76:36:dd:
83:12:4b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:30 2025 by rpki-client