Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/ruFVClqmpe3LlC-LGfwyTRy9Cvw.roa
File: ruFVClqmpe3LlC-LGfwyTRy9Cvw.roa (raw, json)
Hash identifier: FmplzsS62P4LYT9BMpgZ14zCkHot59H/SrxrZpGgBeU=
Subject key identifier: AE:E1:55:0A:5A:A6:A5:ED:CB:94:2F:8B:19:FC:32:4D:1C:BD:0A:FC
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 018CC5DD2A0B821821C044481567C4EE7B11
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/ruFVClqmpe3LlC-LGfwyTRy9Cvw.roa
Signing time: Mon 01 Jan 2024 16:30:54 +0000
ROA not before: Mon 01 Jan 2024 16:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 45.13.124.0/22 maxlen: 24
185.96.40.0/22 maxlen: 24
2a03:fd80::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:2a:0b:82:18:21:c0:44:48:15:67:c4:ee:7b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Jan 1 16:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aee1550a5aa6a5edcb942f8b19fc324d1cbd0afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:4a:29:37:b9:87:3a:41:1a:2e:2c:d8:43:
5f:96:6d:35:ad:8a:71:07:7a:74:4c:cc:05:3b:4c:
c4:08:92:9a:57:ab:12:9b:88:58:2d:dd:0f:8f:ed:
30:65:dd:05:b6:f3:d1:dd:4b:33:9b:dc:0a:21:64:
f8:82:bd:fd:1b:73:27:ff:2a:54:40:10:16:10:8d:
ea:a4:9a:5b:cd:10:35:99:b5:7e:28:32:46:be:0a:
db:05:8f:82:9e:0f:30:cb:d4:05:4f:b1:37:40:1b:
59:56:2d:1f:3c:95:78:a8:51:67:f4:3e:98:bf:d9:
1c:bf:96:89:0b:d3:40:92:2b:2a:1d:72:af:62:a8:
a2:69:ab:91:d0:13:85:44:f2:30:0b:fe:19:28:ef:
e7:2d:f8:22:cb:9a:af:23:05:de:58:7e:85:ce:d2:
cd:d4:d4:38:f3:27:82:e5:0c:ab:e0:52:f8:55:e5:
bb:31:93:2d:e8:01:dc:37:96:90:4e:c3:68:d4:90:
d6:20:e6:63:80:24:a8:f5:1e:b2:80:49:8f:72:f1:
f9:ae:f5:67:09:05:c5:ef:fa:c3:d1:d0:db:82:ef:
95:ec:62:8d:6e:52:8f:75:ff:9b:02:13:ee:43:b2:
4f:2c:5e:b2:91:81:6d:d9:ba:85:de:67:e5:1e:67:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E1:55:0A:5A:A6:A5:ED:CB:94:2F:8B:19:FC:32:4D:1C:BD:0A:FC
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/ruFVClqmpe3LlC-LGfwyTRy9Cvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.124.0/22
185.96.40.0/22
IPv6:
2a03:fd80::/29
Signature Algorithm: sha256WithRSAEncryption
06:65:79:83:ad:c2:c8:94:fc:5c:40:8a:35:78:32:5b:4a:18:
0a:17:4d:21:16:83:f3:49:15:82:8e:aa:43:20:85:9c:5f:a7:
e3:9e:61:a1:51:06:92:cf:57:fe:57:ea:31:dc:ba:94:6e:5d:
6e:87:f5:a1:da:a0:ec:c6:ff:b6:3b:3f:70:57:6d:c0:7f:10:
20:0b:77:6e:b9:50:04:4a:00:7d:32:0c:b7:2d:0b:07:19:f5:
88:82:df:86:ff:4c:ce:6d:b7:6d:e9:c1:48:2e:71:78:72:e4:
82:db:ef:58:21:9a:93:b9:e8:7d:8a:96:0b:22:b5:50:3f:86:
78:15:e9:00:04:54:2c:40:6d:d5:63:22:98:ae:81:85:44:25:
44:50:8d:24:40:6a:a1:ec:4e:70:7e:40:c5:c0:a9:ee:29:27:
21:ca:e5:2c:14:f1:bb:1d:22:e8:23:a6:08:74:e2:b9:c7:a8:
d6:7d:da:67:e0:45:e9:ca:a9:df:bd:a4:f0:7d:47:09:55:e8:
7f:4f:99:13:5f:e3:a5:16:69:6c:3c:5c:3a:01:57:ec:58:d7:
8f:f7:c6:1c:32:92:37:96:bc:00:84:52:79:73:c1:51:60:ca:
fc:d0:9d:aa:42:f7:be:06:32:f2:9a:91:c5:ee:0e:20:7a:2e:
45:73:fb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:04 2025 by rpki-client