Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/6xE_aCuGOPMI-TeGdtfAZ1TaUXQ.roa
File: 6xE_aCuGOPMI-TeGdtfAZ1TaUXQ.roa (raw, json)
Hash identifier: 2ja0FTwoCuFTiO6s8ttjyEaB0HQOJA7adhuNZORQ+HQ=
Subject key identifier: EB:11:3F:68:2B:86:38:F3:08:F9:37:86:76:D7:C0:67:54:DA:51:74
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 0194228E25F595851C14130C9DD8433D2BBD
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/6xE_aCuGOPMI-TeGdtfAZ1TaUXQ.roa
Signing time: Wed 01 Jan 2025 15:48:48 +0000
ROA not before: Wed 01 Jan 2025 15:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44160
IP address blocks: 45.143.158.0/23 maxlen: 23
2a02:210::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 13 Jan 2025 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:25:f5:95:85:1c:14:13:0c:9d:d8:43:3d:2b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Jan 1 15:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb113f682b8638f308f9378676d7c06754da5174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:78:38:31:37:ff:8c:70:f6:ae:db:5e:78:
d0:b5:20:13:4e:aa:cf:f4:18:53:1f:b7:d5:70:3b:
85:70:cd:7a:dc:c1:ed:3c:75:26:6e:f6:21:e4:bf:
4b:90:7a:e9:80:a9:10:10:3b:f3:01:1b:aa:f9:dc:
40:6e:49:6d:36:32:d4:0f:8d:38:87:5a:2d:99:fe:
95:6d:5c:c7:39:00:f4:54:45:fe:32:83:b3:ef:31:
1b:b0:c9:59:8c:d3:da:cf:e4:7d:f8:a1:40:cd:a7:
3d:d1:b2:e1:72:eb:a9:0c:9a:30:8b:2e:d0:43:74:
77:bb:2d:c5:b5:7a:e9:5d:54:cd:29:64:15:9c:98:
04:ec:5f:ee:4c:21:82:7a:8e:4d:81:c7:db:0e:ab:
d4:b8:6f:ba:df:ae:c4:4c:20:4a:f2:4c:9f:6f:00:
1e:12:85:c3:a3:48:d3:7e:f8:ff:16:20:b6:a6:7c:
bd:36:f4:30:fa:ba:07:6f:e1:61:56:b0:91:9d:e8:
c6:cc:12:53:7f:c4:e4:e6:76:75:f0:2a:8a:d7:0c:
a0:76:34:fd:6f:98:c6:2f:2b:5e:67:70:e7:1d:b1:
5f:ca:1e:e8:42:06:b4:10:f0:2c:ec:fa:e3:d5:16:
06:fd:83:c3:f2:50:7d:f3:8c:f5:7e:85:02:73:e9:
5e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:11:3F:68:2B:86:38:F3:08:F9:37:86:76:D7:C0:67:54:DA:51:74
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/6xE_aCuGOPMI-TeGdtfAZ1TaUXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.158.0/23
IPv6:
2a02:210::/32
Signature Algorithm: sha256WithRSAEncryption
98:9b:9f:02:02:bd:0d:f6:72:50:33:e8:fa:b7:8c:28:af:67:
f6:ad:e8:a8:d2:dd:1c:cf:49:ec:22:b7:84:d7:af:e6:3f:66:
77:5f:df:4f:67:eb:53:2e:2c:6f:f0:e2:8b:d0:7c:d3:e8:5e:
cf:e5:b8:7f:f8:d3:97:00:ea:96:7d:26:e3:70:9a:dc:b3:db:
d0:7b:23:1c:5c:9f:87:63:41:da:fa:03:06:00:da:6f:0d:ce:
7c:bd:91:70:ea:41:6d:08:6d:1d:ae:29:fb:32:b5:9f:9c:09:
61:3e:bb:22:78:11:68:ce:e8:b1:28:43:f0:5d:1d:c0:57:28:
47:c2:35:8c:35:3b:4a:78:c5:2f:b6:62:58:e6:f0:f0:1b:7c:
d2:1e:b7:43:3c:c7:71:1a:ed:f2:5c:00:ad:75:25:50:15:fd:
10:69:eb:0e:4a:b3:41:60:7f:50:88:68:68:8d:85:05:01:cb:
2e:10:b9:28:f3:9b:86:f8:b5:93:5c:04:55:44:3b:9d:af:fe:
85:67:af:64:74:f9:b0:57:10:c0:91:ed:99:fb:79:dd:1a:f8:
35:5f:35:24:78:3b:13:16:fd:c9:30:85:6e:7a:d1:e5:81:48:
8c:7c:df:a1:23:b5:3a:94:cc:98:59:ab:c6:1d:ff:e2:ee:3c:
a4:22:7f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:19:06 2025 by rpki-client