Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/IyB9d19e87NPgOTejG36uIGqdes.roa
File: IyB9d19e87NPgOTejG36uIGqdes.roa (raw, json)
Hash identifier: l2yHH0vW8MJx3yW8j0AUlXIg8veFsFjgrbpEpA0CsTk=
Subject key identifier: 23:20:7D:77:5F:5E:F3:B3:4F:80:E4:DE:8C:6D:FA:B8:81:AA:75:EB
Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Certificate serial: 019424B38B58F63C4A325717677B81D82B2E
Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/IyB9d19e87NPgOTejG36uIGqdes.roa
Signing time: Thu 02 Jan 2025 01:48:53 +0000
ROA not before: Thu 02 Jan 2025 01:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57137
IP address blocks: 45.129.148.0/24 maxlen: 24
45.129.149.0/24 maxlen: 24
45.129.150.0/24 maxlen: 24
45.129.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 07:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8b:58:f6:3c:4a:32:57:17:67:7b:81:d8:2b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23207d775f5ef3b34f80e4de8c6dfab881aa75eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c5:b7:f4:68:c2:72:79:66:16:91:ba:92:5c:
d8:f9:28:08:1a:c0:10:5a:8f:34:69:9e:82:5d:46:
6a:cd:b9:7b:55:30:81:61:ad:ea:4b:3c:9b:76:1a:
d8:01:07:f7:d2:99:35:70:0e:f7:03:55:b6:04:be:
b6:5e:fc:40:77:f0:2e:7b:8c:84:4d:06:c9:d9:63:
b0:12:d7:a7:59:2c:21:9b:83:b7:73:af:85:fe:8b:
cb:47:4c:a8:dd:e5:43:d8:9f:a4:f9:6a:90:cb:90:
d8:36:f1:5a:54:a3:f9:78:bb:df:9b:b8:6e:c0:4b:
f1:da:22:34:02:91:9b:29:44:b2:58:5c:3a:a6:f0:
3a:87:3f:fc:1f:5e:5e:3b:47:7a:b1:d9:a9:b2:25:
b7:5a:66:02:33:3a:a0:db:4c:9d:2a:38:af:57:82:
db:4e:76:ea:7d:2c:54:23:78:3b:09:99:be:43:42:
91:d6:69:e5:ed:6a:21:06:e3:55:17:bd:22:df:fc:
2f:55:b0:72:2f:b1:60:4c:1c:aa:78:1f:f1:f7:66:
62:90:70:aa:35:14:e2:14:f8:ce:47:35:cb:da:5d:
81:cb:ff:6c:a4:0d:cc:27:8a:ad:e3:4a:ca:24:e3:
14:d1:6e:fd:3b:d3:86:9f:db:f5:07:e4:d1:0b:ed:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:20:7D:77:5F:5E:F3:B3:4F:80:E4:DE:8C:6D:FA:B8:81:AA:75:EB
X509v3 Authority Key Identifier:
keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/IyB9d19e87NPgOTejG36uIGqdes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.148.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:e0:d0:bb:80:49:e8:96:d3:d3:5b:50:91:e6:a2:7d:f2:51:
a8:06:e3:9a:b8:cd:16:a9:64:d9:62:7a:93:31:6d:43:8d:8d:
2b:4c:7a:d3:b6:9b:e9:7e:98:c2:06:01:75:3c:d0:de:67:f5:
57:86:c3:a1:ab:94:c0:7d:4b:5c:95:c5:23:9c:71:9c:0d:d7:
73:f2:9c:a4:c5:db:81:01:76:71:05:75:b9:cd:83:a7:54:ee:
1f:a8:ef:74:37:72:79:92:84:0c:a5:86:a2:da:e7:c8:43:4e:
6a:9e:68:89:c3:19:49:ea:f8:0b:fb:88:b9:1c:ad:4b:87:ea:
c7:29:04:cb:38:76:0d:e3:35:95:da:8e:df:0c:e2:4b:34:82:
dd:c2:3a:31:0a:fa:9e:f8:66:9b:ed:13:9c:e1:e1:36:08:db:
8f:34:77:01:a7:03:d7:7f:e2:e0:a7:3f:f7:b6:68:5d:4f:1c:
fb:e3:4e:c9:9c:34:1d:7d:e0:74:ab:e9:43:38:b1:e5:c5:d4:
75:d5:43:f2:dc:64:e0:62:3f:52:0d:52:dc:2c:b3:71:7c:38:
50:06:b7:6a:ed:d4:d8:02:73:54:54:ff:74:05:1c:1b:29:69:
d1:c7:73:df:a3:58:cf:c0:44:11:69:83:83:03:b0:4b:b1:73:
a9:64:a3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:38:52 2025 by rpki-client