Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/emdAFPegYVkkrP1QvjAu3t0TvqQ.roa
File: emdAFPegYVkkrP1QvjAu3t0TvqQ.roa (raw, json)
Hash identifier: cfzqYpHjeg/yfa/uh1745W7R6K64uZuMfHXpTbrPI/4=
Subject key identifier: 7A:67:40:14:F7:A0:61:59:24:AC:FD:50:BE:30:2E:DE:DD:13:BE:A4
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0190A150F0D6FD4F088E194A4996D014B430
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/emdAFPegYVkkrP1QvjAu3t0TvqQ.roa
Signing time: Thu 11 Jul 2024 10:22:34 +0000
ROA not before: Thu 11 Jul 2024 10:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 45.13.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Sep 2024 09:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:50:f0:d6:fd:4f:08:8e:19:4a:49:96:d0:14:b4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jul 11 10:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a674014f7a0615924acfd50be302ededd13bea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:e3:bb:06:32:9a:55:52:ad:40:32:76:f1:
af:b4:87:a0:61:5c:02:f0:c9:18:76:5f:b8:fd:e8:
39:66:ac:c8:32:07:87:ea:8b:2c:0c:98:4d:12:47:
90:8c:61:cb:dd:a8:85:ff:6e:71:f5:d1:8a:75:2f:
cc:27:54:d9:db:ea:07:94:c0:b6:75:9f:2d:c6:75:
b6:a1:7c:fb:fe:76:3c:8d:75:e6:fb:e0:31:72:fe:
7b:00:cd:d4:62:de:f5:09:50:2a:09:51:b2:41:b9:
2e:53:cf:78:82:32:a1:23:45:55:f7:a8:e3:07:0b:
9a:73:b8:b6:2f:d1:ce:ca:14:af:32:a2:e1:67:27:
b9:01:6b:db:1b:d4:8c:2d:7a:5b:f7:51:5c:bd:44:
a0:8c:b6:40:99:3e:90:57:d9:e9:01:82:f2:62:12:
ce:aa:9d:83:98:98:ef:a4:45:08:39:08:20:8c:6a:
f7:62:52:ab:5d:4f:44:a9:5b:79:16:b8:ed:55:34:
34:60:6a:ac:6c:99:14:7e:87:9f:8d:7e:77:12:89:
01:c3:56:56:9f:78:33:0b:24:06:08:6c:ef:b2:d7:
71:e6:da:cc:34:b2:6d:cc:a0:a8:bd:84:28:c4:19:
61:a5:43:12:3e:5e:a9:8f:6a:84:b4:31:e6:f2:21:
89:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:67:40:14:F7:A0:61:59:24:AC:FD:50:BE:30:2E:DE:DD:13:BE:A4
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/emdAFPegYVkkrP1QvjAu3t0TvqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.179.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ab:ed:76:ff:af:4e:c2:74:c9:63:fc:39:15:6b:08:0d:1f:
f9:f7:17:98:cc:c4:af:04:0f:6e:86:aa:87:16:1d:9e:51:7a:
62:23:c3:4a:2c:d8:ac:6f:1b:0c:ab:44:00:fe:5e:58:aa:ce:
56:5b:58:18:88:ca:cc:54:ff:65:e8:57:c7:7f:26:1b:29:bd:
46:88:17:08:15:e5:24:55:df:4e:a3:6e:c3:66:33:bc:e3:53:
fa:1b:4e:31:b6:54:67:0a:d2:c3:6b:5b:6a:4b:33:24:f7:2a:
de:83:11:0f:14:95:00:fe:01:eb:76:7e:60:5b:a2:1f:87:1b:
df:c2:de:a3:dc:3d:40:35:4a:86:76:8a:eb:a2:f1:82:07:44:
21:6d:95:15:d3:a2:a2:db:67:59:02:a8:02:68:bc:24:c1:29:
e5:db:4a:0b:83:2b:0f:21:74:36:c0:ef:c0:ec:ce:94:73:55:
ab:25:1c:c6:5d:4f:dd:44:97:46:5f:3b:84:89:4c:38:49:b1:
84:d2:3e:dd:da:67:cd:ab:61:e4:5d:e0:a5:c1:6d:ed:71:f7:
eb:b3:a9:71:94:dc:11:05:7c:56:11:ff:76:c3:bf:fa:0d:7f:
7c:c2:b7:eb:2c:cd:65:a7:ea:5b:0c:3f:3b:ed:a4:3f:34:50:
64:34:02:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:29 2025 by rpki-client