Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/mPS5M0x5FVwYcaQaGHGWxyaWcgQ.roa
File: mPS5M0x5FVwYcaQaGHGWxyaWcgQ.roa (raw, json)
Hash identifier: tRrBzI6sBosC2/HScJTkz/z0qLoY1fsIJ3NLWJeENiE=
Subject key identifier: 98:F4:B9:33:4C:79:15:5C:18:71:A4:1A:18:71:96:C7:26:96:72:04
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 019427B639FFBDD52AC5832427A04454E49C
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/mPS5M0x5FVwYcaQaGHGWxyaWcgQ.roa
Signing time: Thu 02 Jan 2025 15:50:41 +0000
ROA not before: Thu 02 Jan 2025 15:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209043
IP address blocks: 45.11.155.0/24 maxlen: 24
45.138.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 18 Feb 2025 06:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:39:ff:bd:d5:2a:c5:83:24:27:a0:44:54:e4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jan 2 15:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98f4b9334c79155c1871a41a187196c726967204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:64:90:6c:4f:55:f6:40:13:73:c9:8b:54:f2:
fb:5d:31:ab:ee:80:5b:78:cf:7c:21:b9:0f:f9:c4:
23:33:4c:4d:e9:33:d0:90:40:35:e3:be:10:fa:2a:
04:bf:e0:a7:4c:97:50:bd:51:8f:5c:c4:af:1b:99:
7f:13:eb:67:d7:38:6d:ed:14:aa:73:54:7b:39:9c:
d3:f2:99:6d:c9:40:05:15:9d:67:4e:28:4e:71:ea:
1c:fb:12:3d:69:ec:b6:45:cb:89:5a:ff:31:21:cb:
5b:ef:57:c3:b8:dc:2a:ab:7c:e9:b4:8b:35:ef:93:
f5:66:57:7c:a4:c1:2d:16:d1:be:df:4a:2b:7b:04:
cd:3a:26:2c:11:0b:ac:dc:79:f9:9f:4c:7d:1b:59:
8f:4e:22:d0:58:e3:74:e3:fc:4e:10:15:60:a2:f9:
60:b4:f3:58:83:af:0f:a6:b0:34:96:56:49:79:5b:
c8:31:30:a3:3b:cc:b3:d7:67:bd:7c:a0:dc:2d:c5:
9e:98:6c:7a:b1:92:1f:9c:4d:42:22:fc:27:13:67:
42:f3:39:ee:77:08:2d:9c:f1:af:3d:e5:ab:14:e8:
09:15:fb:5b:1d:f6:0e:bd:21:4b:06:20:c4:18:8c:
44:6b:62:41:c7:6a:f6:da:f0:79:60:30:21:7f:39:
40:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F4:B9:33:4C:79:15:5C:18:71:A4:1A:18:71:96:C7:26:96:72:04
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/mPS5M0x5FVwYcaQaGHGWxyaWcgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.155.0/24
45.138.28.0/22
Signature Algorithm: sha256WithRSAEncryption
51:1f:60:65:68:b3:76:2f:ab:35:40:1c:9e:9a:2f:55:30:6c:
d6:0d:6c:8e:d4:97:f4:87:6a:c5:33:70:40:c5:84:67:fa:26:
62:f1:fe:67:ea:55:23:71:81:31:0a:5d:98:0a:d4:1f:ac:8d:
17:3d:44:0b:5e:98:8a:37:ca:81:6f:5d:6c:7e:c6:58:43:0d:
10:b4:a5:bf:65:73:62:23:e5:08:dc:62:fd:83:48:db:35:78:
c7:a7:9e:1e:15:23:db:b5:08:d8:25:43:9a:66:10:32:b2:9d:
17:4e:b7:70:11:9c:8f:39:ea:68:d7:fa:54:27:23:ca:3a:50:
a8:2f:c4:52:3b:d0:70:a8:08:3c:35:1f:36:ab:bd:53:b2:71:
1a:38:8c:f7:7a:0c:2b:c5:aa:e7:67:63:a0:59:71:74:7b:fb:
2a:55:91:76:c2:7b:7d:26:6b:60:84:b6:1f:b6:4f:31:d8:18:
99:9e:12:dd:eb:00:ef:c1:75:0e:e9:ff:4a:a2:46:ea:c5:4c:
47:c9:cd:9e:f4:f1:95:5c:67:4e:84:72:b9:dc:4b:e1:cb:04:
64:98:e4:c5:cf:2c:fb:01:8e:b3:e0:ae:c5:56:a9:42:c3:e3:
2f:be:4c:14:e6:76:4a:ee:fd:ad:b8:3d:26:88:73:11:91:18:
8b:1d:f0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:04 2025 by rpki-client