Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Ry3DYRRk2wkf5Eu9J9no2g9kPiE.roa
File: Ry3DYRRk2wkf5Eu9J9no2g9kPiE.roa (raw, json)
Hash identifier: kpfCNq1zQwLyxqUUgKJskbNwdG92w15b8jOfYGCmUDU=
Subject key identifier: 47:2D:C3:61:14:64:DB:09:1F:E4:4B:BD:27:D9:E8:DA:0F:64:3E:21
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0193E381E28FDBEF225A1E3C5AB3B70443BC
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Ry3DYRRk2wkf5Eu9J9no2g9kPiE.roa
Signing time: Fri 20 Dec 2024 09:59:20 +0000
ROA not before: Fri 20 Dec 2024 09:59:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204157
IP address blocks: 45.139.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:81:e2:8f:db:ef:22:5a:1e:3c:5a:b3:b7:04:43:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Dec 20 09:59:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=472dc3611464db091fe44bbd27d9e8da0f643e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:f7:0c:7d:f6:7e:85:d1:1f:51:cf:b6:f0:
63:6d:95:ce:d0:6d:ae:a5:d1:24:75:28:57:c7:91:
e9:ea:04:29:2c:ce:08:83:81:44:43:00:20:12:0f:
e1:3e:49:30:41:11:b7:5a:40:14:90:84:cb:24:a6:
52:f0:81:b5:6f:42:5f:b6:33:bd:b0:b5:7f:7c:55:
21:6f:a1:95:69:dc:73:40:72:8b:20:19:67:5f:71:
1e:61:1f:b9:4e:e0:a7:ce:37:86:08:76:01:a1:08:
2a:4b:02:55:de:3b:5d:8c:d3:e0:f2:15:c7:69:5f:
be:7d:43:17:21:63:79:09:98:04:14:f9:5f:e1:c7:
b8:f3:43:e7:43:8f:ac:9c:10:43:c3:50:1d:dd:d1:
f1:dd:38:65:e4:f2:a6:26:c6:c8:8c:55:79:62:5b:
ba:19:5a:b7:80:88:a1:53:55:2e:51:22:41:6d:02:
39:81:3b:46:bd:32:16:17:27:c1:9e:9e:43:c6:df:
11:cd:e5:60:29:26:de:8b:3e:af:5b:ad:5d:58:e1:
9f:56:86:9a:23:46:98:97:8e:82:3b:85:13:1f:2a:
9c:c6:d3:0a:bc:8a:9d:27:c3:0a:c7:db:44:fa:dc:
2c:06:b2:e5:ca:d2:0a:1f:c8:3e:c4:a0:35:f2:49:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2D:C3:61:14:64:DB:09:1F:E4:4B:BD:27:D9:E8:DA:0F:64:3E:21
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Ry3DYRRk2wkf5Eu9J9no2g9kPiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.71.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:68:71:39:bc:23:74:19:15:e5:f5:47:29:ec:2f:dc:d2:37:
90:31:75:b2:66:26:a9:d2:ae:95:b6:f8:70:8c:67:3f:cb:01:
92:73:bc:e3:10:cf:44:ad:56:cd:bc:27:05:48:74:81:af:6d:
81:a8:ec:f6:9b:29:ea:5d:09:c1:86:ba:cf:9a:93:28:91:42:
87:06:16:33:3f:f1:06:9a:29:bd:16:9b:0c:a7:d4:bc:77:75:
b6:0c:b1:4c:c7:06:d8:cd:c3:de:97:30:9f:fc:34:c1:94:38:
cf:67:d6:ae:4c:02:f3:a4:ce:b1:d8:a0:66:46:c1:f4:a9:10:
4b:9c:2a:6e:ba:ed:4c:eb:44:f5:9c:bb:64:bf:cd:a2:00:d7:
b6:ff:7a:59:79:9c:0f:cb:d2:48:8c:22:b9:63:c5:4a:da:11:
10:b6:d7:93:03:c7:9c:1d:ec:e6:6f:44:19:ef:be:ed:a5:92:
bb:3b:77:5d:20:c4:fe:ee:60:26:a2:70:59:4b:fe:ce:2c:50:
5b:78:51:4e:64:84:0e:6e:b9:8a:d3:5e:78:a5:2b:98:f1:c0:
5d:05:e3:a3:e9:f6:84:e5:f6:8f:c0:87:8d:cf:71:48:05:8a:
3f:22:9b:17:81:83:64:46:73:e0:7c:28:04:b7:e0:8e:04:8d:
7a:7d:84:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:17 2025 by rpki-client