Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/4Vmp4-brjgLsuyHskvZxbpYz5Ac.roa
File: 4Vmp4-brjgLsuyHskvZxbpYz5Ac.roa (raw, json)
Hash identifier: XojDsS+z/tRqMADR3kKbTspjVPPZHOc6N8bneINjHqI=
Subject key identifier: E1:59:A9:E3:E6:EB:8E:02:EC:BB:21:EC:92:F6:71:6E:96:33:E4:07
Certificate issuer: /CN=72df697430cbb57c49a0a1993024d6d329f7e565
Certificate serial: 0194244552EF42C54183BB4DAED42E35ACE5
Authority key identifier: 72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/4Vmp4-brjgLsuyHskvZxbpYz5Ac.roa
Signing time: Wed 01 Jan 2025 23:48:30 +0000
ROA not before: Wed 01 Jan 2025 23:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211222
IP address blocks: 45.95.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 11:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:52:ef:42:c5:41:83:bb:4d:ae:d4:2e:35:ac:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72df697430cbb57c49a0a1993024d6d329f7e565
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e159a9e3e6eb8e02ecbb21ec92f6716e9633e407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d9:1a:0d:fa:3b:c0:3f:cf:6e:95:67:a8:51:
84:47:da:e4:73:85:c0:4b:9f:16:f8:f0:20:dd:d2:
54:86:f6:83:c4:c7:d7:04:1e:5a:e7:ec:af:bf:96:
e3:a4:44:d6:2f:e0:36:10:4f:50:77:6d:88:b0:fb:
a4:b1:70:c9:d1:84:96:8f:f0:74:d3:6c:a2:1a:d8:
16:46:8b:fc:f7:85:0e:05:56:c3:a2:e8:c0:83:a8:
ad:33:10:c8:1e:9f:d6:9a:ce:77:d3:82:82:27:63:
e1:69:ce:d8:e2:e3:04:15:a0:8f:eb:4e:f3:81:0e:
dd:ab:07:70:2f:3d:aa:6d:6d:b7:d7:d4:9f:a3:5d:
08:30:bd:ee:ee:bc:91:5b:c1:d7:c2:7b:be:4d:d7:
6a:88:75:2f:4b:d8:90:8f:e4:16:7f:7d:d1:d9:0b:
e2:42:f9:b6:12:68:b5:fa:f1:a1:c0:5c:45:1c:f2:
2b:b9:f2:3f:ca:39:e1:1a:ef:09:52:6f:5c:00:40:
3d:ab:c4:15:42:33:2b:d4:d1:22:f8:43:d6:2a:1a:
0c:9a:69:72:39:51:d7:11:67:95:5e:d1:a6:88:b2:
14:4c:71:a1:8e:85:7f:6d:33:45:32:ef:8c:63:76:
78:93:a4:07:b8:3c:76:67:68:76:b3:63:99:7b:0e:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:59:A9:E3:E6:EB:8E:02:EC:BB:21:EC:92:F6:71:6E:96:33:E4:07
X509v3 Authority Key Identifier:
keyid:72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/4Vmp4-brjgLsuyHskvZxbpYz5Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.10.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b5:1b:08:53:fc:e4:ca:e4:4f:14:f7:4b:30:97:ac:21:b3:
f7:04:bf:b8:5f:41:83:52:0c:bd:d2:76:42:01:6d:ff:d6:7d:
c3:04:c0:b8:ad:70:d0:41:33:c8:83:0a:21:2a:df:4b:d5:24:
c9:a2:e5:65:76:be:c4:47:a6:28:2e:f9:2c:b9:8c:67:c3:47:
6e:25:68:35:6c:cd:46:d3:bc:2d:18:41:9c:ce:a3:83:f8:9b:
ad:86:7d:6e:7c:37:0b:56:89:ed:99:22:76:b5:33:22:71:fa:
e2:68:7d:26:c7:31:da:3f:fe:8d:ee:c4:97:0e:c7:ca:b8:33:
fb:b7:48:61:91:64:b1:d6:39:25:de:dd:28:3f:0b:ac:2a:82:
31:c2:99:6d:e5:56:d7:f7:f9:f5:a2:43:e9:23:29:71:6a:b1:
b8:ca:22:36:bf:be:01:b0:c9:1e:a4:d5:fb:87:c0:45:78:2a:
cb:d7:92:1a:43:52:74:c2:ca:87:ee:f6:26:2e:db:53:74:0f:
b7:88:ce:0a:d7:f6:e7:9f:62:d7:b9:5a:74:eb:22:48:1f:aa:
64:fa:d3:75:8a:ec:d4:8d:ff:ef:03:d3:7a:67:0f:0e:04:02:
40:d3:08:3a:b3:3c:76:f2:fb:d9:be:21:81:ae:62:0d:34:12:
a2:7d:75:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:15:53 2025 by rpki-client