Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/ULRMwFCK9H1jOuHKYjAaTeXwFDQ.roa
File: ULRMwFCK9H1jOuHKYjAaTeXwFDQ.roa (raw, json)
Hash identifier: gSX0XpGv1wyJvbOOg2DvSekTtVn44Pe1BPJrCGiT+iQ=
Subject key identifier: 50:B4:4C:C0:50:8A:F4:7D:63:3A:E1:CA:62:30:1A:4D:E5:F0:14:34
Certificate issuer: /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial: 018CC2DABFAC7B769BB116D07C6890A8C40D
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/ULRMwFCK9H1jOuHKYjAaTeXwFDQ.roa
Signing time: Mon 01 Jan 2024 02:29:24 +0000
ROA not before: Mon 01 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48817
IP address blocks: 45.67.64.0/22 maxlen: 24
2a09:7140::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bf:ac:7b:76:9b:b1:16:d0:7c:68:90:a8:c4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50b44cc0508af47d633ae1ca62301a4de5f01434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:c7:4c:2d:fb:7b:a5:c9:66:0b:86:80:3a:
eb:77:a9:d0:3c:97:32:42:24:83:41:3a:ec:24:de:
83:77:37:89:73:0a:80:f4:7c:b0:3a:43:15:8b:81:
70:ff:10:81:9a:5a:57:fb:ae:c7:a7:ce:ad:60:78:
e3:6b:18:75:37:46:df:df:ff:84:c1:cf:8d:9a:85:
c2:3f:00:5f:cd:63:6d:c4:da:ec:59:c5:68:09:2e:
9c:11:7d:45:3e:79:f4:e1:fb:16:01:5e:a8:8a:c2:
d6:49:49:ce:24:9e:e0:b4:32:ec:95:7f:a6:62:4e:
72:33:10:a9:e5:f5:51:ce:59:bc:78:44:78:9a:d8:
cc:d1:d9:bd:ba:82:05:a9:61:af:41:14:a0:23:0a:
af:0a:f9:bc:9a:cb:be:29:22:d0:f1:bd:75:37:57:
86:b3:56:11:11:ef:d9:20:0e:50:e0:4b:34:34:93:
a7:4d:ba:37:4b:64:00:76:ac:39:69:b8:62:92:ec:
b8:3c:18:eb:cf:90:75:00:f2:21:39:cf:8b:0c:df:
24:df:be:f1:32:97:d7:95:75:cd:dc:6b:df:9b:f5:
87:18:04:4d:0b:08:d1:2e:de:55:48:c8:e3:e6:c8:
45:73:6f:93:d8:df:7d:3e:fe:fd:cb:e3:bc:2a:00:
8e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B4:4C:C0:50:8A:F4:7D:63:3A:E1:CA:62:30:1A:4D:E5:F0:14:34
X509v3 Authority Key Identifier:
keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/ULRMwFCK9H1jOuHKYjAaTeXwFDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.64.0/22
IPv6:
2a09:7140::/29
Signature Algorithm: sha256WithRSAEncryption
61:30:fb:e9:df:99:da:1a:5b:b4:37:41:ce:cd:78:3e:03:64:
bb:b5:ad:3c:5d:f7:ff:74:5d:60:9f:12:6c:5d:f7:0e:76:0c:
e4:08:97:d6:8a:b6:fd:3a:56:cd:c8:f1:ad:92:52:b2:02:d7:
02:81:3e:99:f4:8d:04:cc:13:6b:1b:8f:11:52:1d:a3:d7:dc:
f8:6c:85:9d:fc:ed:c1:1d:98:35:7f:4a:1c:46:e0:35:bb:8c:
99:20:0a:b9:a3:b0:82:95:52:88:22:36:38:e0:f6:1f:43:c8:
aa:21:58:f9:86:07:77:ff:eb:d8:48:73:35:b5:b1:2d:d8:ec:
57:40:70:e4:e5:d7:a7:3b:34:64:a4:63:13:26:7a:5b:53:f6:
9a:7e:93:f6:69:57:d1:a7:be:bf:6a:b0:8e:b2:15:7e:a1:d3:
2d:ea:47:b1:a0:58:12:d9:8a:b7:e1:13:4d:26:ab:94:ab:9d:
e2:bd:d3:ad:25:6c:e4:50:5f:e3:f0:ee:95:ee:2a:58:0d:4c:
2b:d0:24:3d:a7:e6:12:ec:50:5c:71:d1:35:7c:1c:5c:8a:18:
15:ab:2c:f1:bb:8a:29:14:11:b0:c1:46:ee:54:77:5f:91:71:
f3:86:88:69:3d:3d:24:19:24:a8:27:dc:87:6f:7f:99:e3:a6:
c7:80:fc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:48 2025 by rpki-client