Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/3UMDgWVbpvfQ8kN2ipEmOhKuVjw.roa
File: 3UMDgWVbpvfQ8kN2ipEmOhKuVjw.roa (raw, json)
Hash identifier: BuWCNaJ7K6NRm6dl/ZOiUQVxr7FI/yCPF+pDeUK6rVU=
Subject key identifier: DD:43:03:81:65:5B:A6:F7:D0:F2:43:76:8A:91:26:3A:12:AE:56:3C
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0190A150F01F553308293E6650A27A813EBB
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/3UMDgWVbpvfQ8kN2ipEmOhKuVjw.roa
Signing time: Thu 11 Jul 2024 10:22:34 +0000
ROA not before: Thu 11 Jul 2024 10:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.145.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jul 2024 17:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:50:f0:1f:55:33:08:29:3e:66:50:a2:7a:81:3e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jul 11 10:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd430381655ba6f7d0f243768a91263a12ae563c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ec:0e:7a:54:6e:cc:06:b0:43:31:2d:bf:98:
b1:1d:45:da:ce:0b:87:4e:f5:a1:c9:1c:2e:e4:56:
a6:6f:83:21:17:a3:9b:09:ef:39:d3:15:dd:c1:20:
78:3f:f0:09:d3:7d:df:c9:a2:bd:4f:9e:e8:83:c2:
c5:c4:5c:3e:f8:c5:ba:47:fe:22:b1:22:1e:db:10:
d4:65:56:37:25:31:0a:40:79:6d:ba:ee:47:ce:2a:
80:b0:41:36:76:aa:65:db:59:35:a8:b3:04:b8:36:
63:11:5b:31:24:ae:c1:99:9b:e6:ed:53:3e:83:9b:
f2:12:5a:44:e6:16:35:43:5e:fb:ef:bd:dc:e0:0c:
ad:da:16:d3:88:34:f2:ae:fc:30:70:68:35:39:c4:
f2:43:55:bb:f8:be:04:99:db:da:3b:c5:98:e8:a6:
15:fa:83:10:9b:05:6a:a2:4b:49:cb:18:4b:f6:3f:
c7:1f:2c:d5:74:e0:65:67:36:49:26:c3:99:dc:1f:
d5:d5:a8:d5:44:85:8f:d3:de:c9:77:55:fc:b9:27:
2c:82:eb:bd:8d:b3:98:bd:18:58:68:9d:17:fb:6c:
a9:f7:c6:dd:8d:28:e9:70:fe:35:00:7f:d1:32:9d:
1f:b8:43:92:ef:74:fc:1f:60:09:6e:cb:0b:2f:75:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:43:03:81:65:5B:A6:F7:D0:F2:43:76:8A:91:26:3A:12:AE:56:3C
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/3UMDgWVbpvfQ8kN2ipEmOhKuVjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.17.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:16:7b:17:de:4b:03:8c:0d:76:89:fd:52:de:6d:ce:7f:bd:
5c:97:b9:13:22:75:b6:b5:2f:f1:20:d1:94:2a:c6:b1:e3:9b:
55:78:70:81:40:a6:ed:17:a7:ba:09:16:ab:cb:cb:8b:52:1d:
3c:29:46:40:0c:bb:89:90:67:b5:43:ea:e5:b6:3f:42:be:bd:
e5:3e:ca:07:42:0d:82:75:69:01:e2:f5:c8:26:bb:d0:80:82:
c3:bc:8a:0a:f5:ac:e5:14:fa:f1:53:3e:8a:d9:89:88:e7:52:
15:61:f1:93:bb:3b:a7:c3:17:4f:29:f6:8a:36:75:a2:93:8d:
19:75:c1:c6:1b:cc:fc:3e:0c:d0:6f:f8:d0:27:31:a9:15:e3:
b2:39:4d:62:e9:66:05:9d:bc:7c:22:1d:c4:23:3e:86:77:a4:
5a:5e:ea:3a:56:42:ae:4d:e3:d6:af:13:2d:47:07:c1:f9:d9:
58:71:30:c5:43:32:98:3c:da:a5:6e:81:8d:c3:20:86:a7:82:
42:65:c4:d2:d5:ca:ab:c4:a3:af:f2:0d:e7:d0:ba:4f:d0:fa:
69:88:98:79:49:d5:de:59:c4:39:ed:c1:19:73:d9:f8:ea:f6:
ac:4c:dc:6e:49:09:14:c9:3c:55:b6:b4:73:38:1b:d3:6f:f4:
3e:71:f5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:31 2025 by rpki-client