Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/jkeNEe9ZKsRdd7DeQkHf4rJfzJA.roa
File: jkeNEe9ZKsRdd7DeQkHf4rJfzJA.roa (raw, json)
Hash identifier: DDpcAinrharBmrMLxqHa4CYW+wXmrVcoM34bxZ8qS/0=
Subject key identifier: 8E:47:8D:11:EF:59:2A:C4:5D:77:B0:DE:42:41:DF:E2:B2:5F:CC:90
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 01936837D69D86E0DE3ADF3858C7D2DC3B1B
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/jkeNEe9ZKsRdd7DeQkHf4rJfzJA.roa
Signing time: Tue 26 Nov 2024 11:25:09 +0000
ROA not before: Tue 26 Nov 2024 11:25:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199785
IP address blocks: 45.132.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:37:d6:9d:86:e0:de:3a:df:38:58:c7:d2:dc:3b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: Nov 26 11:25:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e478d11ef592ac45d77b0de4241dfe2b25fcc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:98:9d:b5:f6:0d:8d:64:e3:8c:3d:18:7b:87:
44:41:3c:48:be:af:b0:69:40:f7:e7:27:99:c1:00:
b6:9a:3d:3f:1d:99:cd:71:bf:9c:7a:3c:df:7c:a9:
1e:f7:a4:fb:6f:d2:8e:7b:78:3c:f6:c9:b8:17:a6:
ca:15:14:08:0f:c4:2d:1a:d1:26:8b:13:04:2e:eb:
af:39:17:4f:71:d4:4c:c4:19:ed:3d:93:75:f7:fb:
48:64:5e:1a:eb:23:ee:d1:81:5f:ec:a4:13:aa:65:
94:02:78:e7:4e:04:ce:1d:82:65:a6:98:5c:95:9f:
2a:7b:a7:1b:21:b9:a3:99:10:ed:1d:16:a2:9e:80:
37:39:a7:80:ee:57:7c:0f:8e:6f:34:9e:b3:e6:d1:
0c:36:5a:a1:2e:82:38:ee:dd:20:73:4e:ff:3f:29:
4b:d8:15:81:49:96:6b:c0:6e:5a:6a:38:6d:5a:ac:
09:56:8f:f6:cb:cf:44:87:ce:a2:5a:fe:79:83:c1:
89:3e:21:7a:e7:74:d4:18:58:40:b6:b8:a1:c7:b7:
6b:43:53:9c:b5:14:90:7c:40:02:ad:cd:76:c3:2e:
cd:a7:2a:6b:50:35:34:3c:8c:7f:0b:0d:81:1c:2b:
88:c9:f7:69:96:6f:a2:4b:9f:e1:ca:9e:f3:c2:22:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:47:8D:11:EF:59:2A:C4:5D:77:B0:DE:42:41:DF:E2:B2:5F:CC:90
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/jkeNEe9ZKsRdd7DeQkHf4rJfzJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.1.0/24
Signature Algorithm: sha256WithRSAEncryption
54:2c:7c:52:5b:c7:6f:18:17:55:c5:ae:28:3e:67:41:3d:c9:
c1:dd:3a:de:cb:a1:21:02:58:aa:59:00:ac:8c:dc:54:ed:33:
01:68:73:52:48:23:67:f2:36:50:4d:b6:b8:7f:51:8b:bf:33:
d0:41:73:10:70:8c:80:6e:3f:c3:39:99:67:98:ff:70:c3:4b:
8a:2c:87:8e:7f:07:ef:c7:fa:9e:cc:07:6c:be:5c:97:6f:3a:
14:d9:15:ae:43:cb:b3:c6:e4:02:66:59:0b:86:bf:27:9f:a1:
57:9c:af:99:72:60:01:07:c3:fc:34:ec:25:b2:5d:41:34:aa:
1d:07:51:ee:2d:7c:16:99:85:c3:32:1f:e5:9f:93:e6:2d:c9:
58:a0:67:cf:27:d9:4b:f5:ad:0d:9a:bc:b3:99:d8:9e:a0:58:
22:e9:d0:5c:41:67:b5:d9:9b:c3:9f:14:5f:30:6e:21:59:2a:
5a:8b:e0:d3:35:47:4b:ca:01:9f:3d:b8:09:5e:28:87:5d:34:
6f:8d:e7:8e:6c:69:33:69:1c:61:51:b1:56:e0:f3:5e:02:9f:
54:63:56:b8:7f:d3:02:81:81:c4:71:04:05:04:64:00:30:e1:
46:3a:b8:d2:05:b1:50:66:b5:24:c3:4a:96:54:d3:9d:89:67:
80:ac:85:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:19:14 2025 by rpki-client