Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/LAkXaPe-PEAudRzhc9JQosIC-cQ.roa
File: LAkXaPe-PEAudRzhc9JQosIC-cQ.roa (raw, json)
Hash identifier: 7Yu1j/fFrOy+qxtJwAqIbgM3ZgkyYhUr+7VlB0g59qU=
Subject key identifier: 2C:09:17:68:F7:BE:3C:40:2E:75:1C:E1:73:D2:50:A2:C2:02:F9:C4
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 01937280E50011B8FBA1033194EE7C9913B7
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/LAkXaPe-PEAudRzhc9JQosIC-cQ.roa
Signing time: Thu 28 Nov 2024 11:21:10 +0000
ROA not before: Thu 28 Nov 2024 11:21:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.158.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:80:e5:00:11:b8:fb:a1:03:31:94:ee:7c:99:13:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Nov 28 11:21:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c091768f7be3c402e751ce173d250a2c202f9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:4a:37:c5:74:f7:eb:f6:2d:ab:8e:71:4a:
b2:d3:b0:b8:1d:aa:92:78:0a:c1:52:33:e1:38:d9:
5d:51:25:0a:51:80:20:e1:b3:b3:b5:b4:28:18:8e:
be:8e:7e:df:c8:47:49:ec:4c:24:b5:f8:88:ff:62:
f3:e1:b0:82:d9:79:e0:90:71:39:26:ac:1d:eb:b5:
a1:9c:0a:d6:86:10:9b:6b:a3:d6:6a:43:ef:1a:41:
4c:b7:91:aa:81:cc:4d:14:7f:10:de:c2:7d:82:dd:
8b:81:c9:31:ee:b7:f7:32:a5:c6:49:3b:d8:9f:01:
21:3c:b4:62:95:a8:02:1a:8e:91:52:1c:83:ef:b1:
4d:5c:cb:ba:03:a3:27:21:a0:6d:4f:9f:d2:61:8e:
6f:92:d7:e7:ed:ef:3a:8e:c2:a8:18:23:5d:57:43:
3f:2d:09:5d:06:68:59:25:a6:af:59:18:09:ff:f1:
1f:92:52:9d:c7:5e:ae:90:6c:7f:ae:c4:5e:7e:9d:
fc:55:a5:1d:2c:e7:01:c0:fe:0f:1c:a2:26:b8:00:
7e:55:ee:a8:f7:30:4d:ec:b4:d3:eb:e5:94:ad:f7:
b5:e7:51:35:59:eb:88:3d:82:ae:8f:e3:2a:db:b5:
f9:0f:3e:60:10:db:7c:15:65:58:b7:b6:12:4f:de:
1e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:09:17:68:F7:BE:3C:40:2E:75:1C:E1:73:D2:50:A2:C2:02:F9:C4
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/LAkXaPe-PEAudRzhc9JQosIC-cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.125.0/24
Signature Algorithm: sha256WithRSAEncryption
96:5d:01:ca:71:9c:0e:6f:7b:31:86:74:28:66:15:03:72:1d:
18:d0:ee:77:89:b0:0c:8f:6f:5a:84:79:6b:3c:79:e3:58:96:
77:a1:92:6c:62:df:24:68:7a:2f:c3:17:36:50:f5:ad:b1:88:
65:d7:22:d4:61:ab:89:0b:b9:21:9b:09:80:e6:31:d2:8f:0f:
30:e6:18:9b:44:c6:c4:3c:8f:d0:97:9b:4e:0a:eb:1f:6e:c7:
8b:d5:70:51:93:b4:55:9c:d8:b1:f9:f5:69:c7:50:5d:77:47:
5d:eb:a9:7e:6a:64:73:b1:21:c1:82:1f:97:16:5c:aa:a7:e8:
a6:f2:b3:3a:08:86:92:d9:63:49:3f:c5:c5:3b:2a:e7:3c:21:
03:e7:26:f9:ba:d9:dc:2f:9f:29:3c:90:bf:b9:0f:cd:61:2f:
33:c6:8a:cf:45:ac:e5:18:3f:d1:74:45:04:56:24:2c:41:3d:
76:e9:2a:32:16:92:d7:c8:1b:24:22:5b:ef:57:0a:95:0c:6c:
ff:40:3f:2a:28:e7:e5:6a:9d:07:71:1e:58:c5:82:0c:21:dc:
f9:81:bb:14:13:c2:79:57:7f:04:13:a5:6b:6e:d5:a7:fc:ea:
55:99:8a:a1:0e:6d:8a:6f:19:c0:f8:35:94:43:7a:c0:0b:23:
f7:41:e3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:27:28 2025 by rpki-client