Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/O1fXaeky5TjESkXv8kzVZN-8li0.roa
File: O1fXaeky5TjESkXv8kzVZN-8li0.roa (raw, json)
Hash identifier: cl8nczKIW7pk0/+BP5CR2LbBPsrFIWg9splvzFGihso=
Subject key identifier: 3B:57:D7:69:E9:32:E5:38:C4:4A:45:EF:F2:4C:D5:64:DF:BC:96:2D
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019258AD5AFC4F317055F228505B0F4E0858
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/O1fXaeky5TjESkXv8kzVZN-8li0.roa
Signing time: Fri 04 Oct 2024 17:56:48 +0000
ROA not before: Fri 04 Oct 2024 17:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.13.179.0/24 maxlen: 24
212.87.201.0/24 maxlen: 24
212.87.202.0/24 maxlen: 24
212.87.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 15:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:58:ad:5a:fc:4f:31:70:55:f2:28:50:5b:0f:4e:08:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Oct 4 17:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b57d769e932e538c44a45eff24cd564dfbc962d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:12:22:14:10:27:1d:9f:fd:3a:89:0a:41:
ee:64:ad:10:52:61:94:d8:f0:bb:f6:b6:6f:6f:d8:
fd:08:28:54:86:21:d4:61:84:f5:ad:6d:7b:4d:ad:
57:d7:b7:10:90:f1:8c:48:9b:ed:a0:24:7a:de:88:
e1:c4:3b:e2:8d:04:72:36:d2:a7:a7:f1:87:b8:60:
f0:e4:dd:f3:4f:1d:ee:35:91:98:52:b4:94:c0:66:
8c:92:93:b0:6c:61:53:7e:a3:11:4e:24:64:f1:8d:
34:c6:2b:40:23:14:71:84:57:b0:76:62:d4:58:76:
35:0c:e9:06:11:b9:03:d4:c0:30:59:a4:41:4c:71:
f7:b7:eb:07:ad:e7:6e:39:cd:8d:31:ce:e4:c5:06:
22:5c:76:ec:60:fe:5e:3c:ab:e8:60:5a:98:a5:f6:
a8:a5:e2:9b:29:47:37:f3:23:3b:fb:2d:ba:af:33:
f1:b0:b8:17:19:fc:63:d8:4d:b8:4a:d9:6a:bd:2e:
fa:50:6f:96:6f:39:bf:c3:48:64:26:ff:fc:39:6f:
2a:a5:cf:10:0e:3f:b8:f5:d7:33:ee:7f:03:35:1b:
f0:5f:ca:95:85:cc:57:e7:55:3b:e8:a3:c1:a0:99:
fe:a0:2e:a8:5c:1c:e9:10:4c:9c:45:5d:cf:04:12:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:57:D7:69:E9:32:E5:38:C4:4A:45:EF:F2:4C:D5:64:DF:BC:96:2D
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/O1fXaeky5TjESkXv8kzVZN-8li0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.179.0/24
212.87.201.0-212.87.203.255
Signature Algorithm: sha256WithRSAEncryption
8b:0d:b0:7f:97:7f:95:55:3b:d5:a7:e9:3f:d1:e8:10:a6:fb:
cf:45:51:8d:59:33:c7:cb:ee:5e:26:a4:f4:42:f0:55:8e:d6:
45:ee:b6:41:d1:63:82:63:84:88:34:8b:b6:4a:c9:c8:25:4c:
e4:14:d3:5a:c1:58:c8:84:cc:9e:ab:db:a3:c2:a0:85:8c:28:
88:87:60:1f:1e:6b:10:84:d8:93:d1:91:7d:ba:19:b3:8f:3e:
18:89:16:9d:9d:f0:76:40:b5:58:1d:75:6d:6c:64:b2:41:30:
18:0d:21:ce:f4:fa:2d:26:bc:3f:49:b8:fd:97:11:da:e6:be:
a0:28:41:72:fb:10:54:07:20:ed:65:bd:46:cd:05:c3:14:8f:
35:a0:68:62:72:ac:99:b0:e0:c6:4c:b6:3f:2c:fc:72:29:fe:
3d:75:4c:88:3d:c2:d4:fd:f4:90:52:c1:35:76:d0:02:56:04:
60:da:c6:f7:74:cd:1c:83:45:41:b1:d1:c9:a0:a0:09:d9:e6:
4e:1d:d2:4c:2f:d7:3b:70:98:7c:ce:55:93:e7:b6:1d:85:fc:
40:08:1c:f2:51:04:06:d1:bc:6a:79:84:9d:6d:21:17:96:dc:
4a:31:66:96:35:98:d2:c9:cf:f9:9f:c8:2e:cf:b8:98:b5:b6:
9d:35:48:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:17 2025 by rpki-client