Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/RA27tuARiJEsRaUNv4BPPqw_eqw.roa
File: RA27tuARiJEsRaUNv4BPPqw_eqw.roa (raw, json)
Hash identifier: GpTUB7RAYjoEJkALcLeH5x31zYjUxxwx3oLdX7v9EVg=
Subject key identifier: 44:0D:BB:B6:E0:11:88:91:2C:45:A5:0D:BF:80:4F:3E:AC:3F:7A:AC
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D62DBF8414E3F10D28F6F4B607A3D0
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/RA27tuARiJEsRaUNv4BPPqw_eqw.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208174
IP address blocks: 45.12.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 12:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2d:bf:84:14:e3:f1:0d:28:f6:f4:b6:07:a3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=440dbbb6e01188912c45a50dbf804f3eac3f7aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:64:ea:bb:e7:94:04:6d:99:c2:6f:ea:05:
d7:a3:00:1e:e9:e9:d8:91:b0:74:58:3c:f2:50:3e:
ab:01:bb:fb:d4:dd:9c:e2:70:26:f7:83:ed:08:67:
3c:9c:00:c7:9a:73:4f:9d:c2:a7:08:79:33:af:f6:
79:4b:06:85:96:80:17:53:0a:ad:2c:ab:7a:bd:18:
46:e9:f4:9a:16:1c:d5:5e:74:cb:94:af:d0:46:a6:
99:40:47:5f:78:3d:28:0e:ff:27:f5:47:ea:df:2c:
58:40:cd:e4:36:6c:f8:6e:c7:05:e9:4b:16:8b:82:
92:20:3b:8e:72:87:d2:91:95:d1:39:f5:ce:98:71:
49:10:4b:89:63:54:b1:ed:43:c7:a5:6d:f6:5b:b8:
fe:6c:04:06:27:1d:62:36:47:43:b9:70:39:a8:62:
7d:6c:39:fe:81:4d:a9:27:cf:2c:53:87:9e:a4:0a:
25:7b:cd:87:22:f0:e1:47:67:e7:e5:f4:ec:43:0d:
b1:37:c4:2b:00:95:69:ee:13:b7:b9:2a:15:8c:fc:
df:0b:bf:56:c8:72:05:12:86:6c:24:57:ef:23:ba:
d5:85:a5:70:ec:70:46:c6:38:08:ce:53:f3:ec:e7:
bc:c6:52:16:22:57:2b:38:77:59:7a:3b:0c:79:b0:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0D:BB:B6:E0:11:88:91:2C:45:A5:0D:BF:80:4F:3E:AC:3F:7A:AC
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/RA27tuARiJEsRaUNv4BPPqw_eqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:bd:8d:5b:13:af:b3:b5:c1:43:be:a0:e7:97:51:a0:f7:08:
ba:6d:90:81:cc:e5:73:04:4f:f2:02:ba:52:03:0e:1e:3d:83:
a1:30:43:4a:6d:fe:0f:86:e5:8a:28:65:75:29:fe:c9:35:b0:
6b:0b:2c:e3:ee:28:97:c9:c5:54:3f:f0:50:d7:01:cf:03:36:
cf:9d:90:ac:10:a2:4c:d2:fd:a4:26:40:6c:b0:3e:dc:f5:f2:
aa:f3:28:1c:69:b6:d2:31:70:93:bc:ab:4b:4d:13:4c:3c:13:
c3:2a:a1:e8:01:45:58:34:76:e6:c7:dc:75:56:f6:43:cc:d2:
12:92:43:12:65:c1:61:10:e7:13:52:bd:1a:57:f8:c9:2f:a9:
e1:9e:cc:77:73:a3:19:4d:26:6f:62:69:ec:5e:4c:1a:0d:43:
74:d2:9d:84:c9:31:51:1a:3f:f7:cf:9a:d5:32:74:81:9e:b2:
f3:d1:9b:18:4b:79:98:ac:b4:39:8b:5d:2a:85:e8:7e:09:ca:
d5:8b:77:d0:99:dd:fb:6e:e7:d0:0c:9c:69:6e:40:3b:af:ab:
dc:b5:7b:63:1a:8e:25:6e:fd:26:f6:1c:3d:b3:fc:82:c2:b2:
ec:9b:db:e3:70:da:d0:c4:55:6d:aa:aa:8e:f0:2d:9f:85:4c:
3c:98:38:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:32:43 2025 by rpki-client