Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/8TEECbNJKjBUoekcvVSM1_HPDSM.roa
File: 8TEECbNJKjBUoekcvVSM1_HPDSM.roa (raw, json)
Hash identifier: ufSPoafL1BIrd/OtMrpFBxlnPTZSsz3Bu2RpFwh7fAM=
Subject key identifier: F1:31:04:09:B3:49:2A:30:54:A1:E9:1C:BD:54:8C:D7:F1:CF:0D:23
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 019294E61AE191A2F4232ADAE72DF4063B2F
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/8TEECbNJKjBUoekcvVSM1_HPDSM.roa
Signing time: Wed 16 Oct 2024 10:36:00 +0000
ROA not before: Wed 16 Oct 2024 10:36:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 262287
IP address blocks: 45.11.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:e6:1a:e1:91:a2:f4:23:2a:da:e7:2d:f4:06:3b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Oct 16 10:36:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1310409b3492a3054a1e91cbd548cd7f1cf0d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a5:ee:8c:d7:e7:f9:8c:c0:a4:24:92:e1:64:
23:69:d6:05:1f:4c:8a:9b:6f:50:18:e2:bf:3b:e3:
ac:b6:3c:40:01:f9:a1:a4:a9:a8:68:20:72:9e:ff:
7a:3f:d1:c8:27:13:eb:40:4a:76:db:9e:d3:fe:db:
d9:14:72:ee:49:e2:1c:40:fd:7d:c2:44:f0:a8:1a:
46:df:78:d4:ed:91:4e:d3:c7:0a:0c:7c:5e:74:78:
53:e9:77:c2:4a:bd:22:b8:cf:90:b5:22:27:6f:9c:
56:c5:58:c9:2e:3d:c2:45:3c:d6:17:b0:15:41:b6:
f6:5d:86:2b:bb:2c:99:fd:75:ec:93:a0:8d:30:b3:
82:ad:4f:66:6d:80:60:15:a0:25:54:8d:f5:5c:58:
b9:be:31:91:21:6e:7e:57:53:76:ba:ff:73:32:97:
e3:64:d9:5e:84:ee:b2:6f:ee:29:dd:6d:ed:12:78:
b0:ba:5c:11:42:76:97:e4:5f:b5:75:d7:17:e2:dd:
91:5f:77:3f:eb:ea:1e:0d:77:df:8c:b1:c6:a7:66:
d7:b3:1c:37:aa:89:6e:e3:12:6c:5c:c7:01:1e:7e:
fb:38:03:42:b7:38:8c:d3:20:ab:89:57:48:70:a9:
06:51:4c:15:27:6f:da:86:84:86:a0:56:cf:50:07:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:31:04:09:B3:49:2A:30:54:A1:E9:1C:BD:54:8C:D7:F1:CF:0D:23
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/8TEECbNJKjBUoekcvVSM1_HPDSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.233.0/24
Signature Algorithm: sha256WithRSAEncryption
63:32:cb:b3:96:a2:b7:5e:5e:b5:8b:b1:c8:a0:b5:e0:ed:b5:
07:22:0d:49:9a:ee:3e:42:b2:45:05:f3:56:c5:72:2a:4e:e7:
3e:10:bc:bc:a4:2f:bd:4b:31:75:74:1d:a4:36:a8:b3:e7:12:
83:88:07:a3:67:fb:96:0c:d1:a5:3f:24:1f:93:39:49:a1:fb:
ec:b9:94:46:f2:88:42:e7:95:94:82:ee:ee:b0:c2:dd:d2:26:
02:29:c9:98:72:31:7e:0f:a6:43:f0:87:a2:58:d7:a2:58:89:
1f:d1:3e:60:b1:c3:9a:92:a6:7f:af:2b:9b:80:9b:84:b0:00:
bc:ad:8e:e8:56:c2:95:29:95:e3:3e:00:26:fc:e6:8e:a4:39:
cf:06:ce:86:a4:43:86:da:0f:38:f1:07:c3:f0:db:aa:5f:cc:
89:84:87:c4:c3:4b:10:30:af:4e:52:17:6c:db:39:d1:7a:44:
9a:21:5d:07:b4:29:d7:87:00:42:5a:7e:dc:c0:02:b2:04:70:
ec:f9:6d:3d:23:ea:98:75:bb:4c:91:f6:0a:20:2d:fe:f6:77:
ca:a3:24:b2:9f:5b:9b:c9:66:64:6a:c1:2a:0b:83:2d:55:22:
60:04:a8:49:dc:df:e1:0a:78:02:50:d0:f6:e2:bb:35:93:ae:
6c:a5:ec:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:13 2025 by rpki-client