Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/vnytldOyEirk-qYCETct4thhi00.roa
File: vnytldOyEirk-qYCETct4thhi00.roa (raw, json)
Hash identifier: c5KWJnrpTBBcZGZs/Fh5Vo+GzfolYYvuQ9YSEQnhYqg=
Subject key identifier: BE:7C:AD:95:D3:B2:12:2A:E4:FA:A6:02:11:37:2D:E2:D8:61:8B:4D
Certificate issuer: /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial: 018CC348C487D70272EFD1F6D27DC958E1C7
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/vnytldOyEirk-qYCETct4thhi00.roa
Signing time: Mon 01 Jan 2024 04:29:35 +0000
ROA not before: Mon 01 Jan 2024 04:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.95.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c4:87:d7:02:72:ef:d1:f6:d2:7d:c9:58:e1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Validity
Not Before: Jan 1 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be7cad95d3b2122ae4faa60211372de2d8618b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:4c:ae:c3:b9:41:34:42:c6:b0:10:f0:22:
ec:30:3e:d1:f5:f6:44:33:b7:08:f0:d6:71:62:49:
4a:19:d1:2b:ac:33:21:43:73:6f:c6:fa:28:2f:ce:
d3:c1:1c:8b:d9:ea:d1:14:04:0a:2a:90:7e:90:5b:
88:5d:15:a4:87:4f:0c:8e:26:09:7d:9d:29:c2:35:
96:f9:4d:d4:16:a5:a2:1b:db:60:c3:01:b6:17:e1:
b6:61:0c:75:d4:42:93:78:a4:ba:ce:b5:69:e7:58:
ff:e8:8e:9a:7a:a9:2c:54:4c:aa:b8:9c:09:db:12:
50:4f:68:42:23:40:36:b5:ee:14:08:b4:b8:1c:ae:
c0:94:9e:12:98:f8:84:c7:e6:91:26:aa:71:e3:9b:
0b:4d:3a:b2:cb:0b:bb:71:05:84:f7:56:a7:d8:dd:
9e:5c:1c:42:66:28:01:99:f5:8d:d7:64:54:ac:66:
76:a9:a9:ad:ee:a9:31:7d:ec:e1:8f:c9:ee:74:ce:
4e:6b:a0:e5:d7:15:08:d7:ef:28:76:46:77:79:39:
f2:db:c6:3b:8d:a0:7a:e4:09:28:7a:95:4d:f2:3c:
3a:99:f6:9e:a0:67:a0:5f:d0:53:55:6c:f6:03:4f:
60:e9:f9:7f:de:01:8c:cf:ab:92:d5:66:54:6e:8c:
b1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7C:AD:95:D3:B2:12:2A:E4:FA:A6:02:11:37:2D:E2:D8:61:8B:4D
X509v3 Authority Key Identifier:
keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/vnytldOyEirk-qYCETct4thhi00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.94.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:14:cb:ec:9e:3f:85:ec:4b:57:85:ec:d3:67:58:7a:49:63:
1b:ca:86:8b:6d:86:5c:59:f7:4c:1b:65:2c:33:f5:aa:62:4e:
ff:6d:a5:8e:f3:29:00:99:4d:64:98:3d:b1:99:a0:18:9a:65:
db:db:79:53:3e:69:6c:a7:04:85:4a:fa:bd:5c:e6:00:01:50:
da:a6:b2:0a:d3:a3:60:b3:99:1e:4a:df:53:42:c7:d7:67:19:
c7:d9:5d:c5:07:b2:76:89:8a:3a:f4:aa:6e:16:55:60:00:77:
25:12:0e:9b:bd:84:3b:8b:4e:30:9e:c4:44:6f:12:7e:a7:56:
02:88:82:21:aa:02:02:94:7f:45:b3:7e:ae:b0:1e:e9:fe:51:
4f:bf:37:b7:9b:66:6d:b8:56:ad:e7:fe:a4:16:b0:ef:c7:0a:
03:22:ad:c2:8f:d9:54:0a:f2:1f:63:66:77:6c:19:ce:4b:7b:
b9:ef:b6:29:11:ab:ca:a2:78:68:53:90:0d:c5:80:8a:53:38:
f3:df:b5:55:a0:e0:e0:77:aa:8d:46:6c:d0:b5:b0:88:12:9f:
c3:8c:6c:11:ed:c8:6b:b9:c6:65:28:1a:b2:ca:c0:d4:e9:bc:
eb:58:41:4f:eb:78:49:41:a2:c2:a0:24:46:b3:9e:b6:0d:3b:
94:11:54:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:25 2025 by rpki-client