Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2b-86yss3a78TYCAH6IY1CnR1_M.roa
File: 2b-86yss3a78TYCAH6IY1CnR1_M.roa (raw, json)
Hash identifier: bXQzgOxqaMWOCnQSkx1/RkLEV6KdKzbn26R8KGPMniU=
Subject key identifier: D9:BF:BC:EB:2B:2C:DD:AE:FC:4D:80:80:1F:A2:18:D4:29:D1:D7:F3
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0194ABF183AE9024A84E0D140192FA0E33D0
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2b-86yss3a78TYCAH6IY1CnR1_M.roa
Signing time: Tue 28 Jan 2025 08:05:19 +0000
ROA not before: Tue 28 Jan 2025 08:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.8.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 22:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ab:f1:83:ae:90:24:a8:4e:0d:14:01:92:fa:0e:33:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 28 08:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9bfbceb2b2cddaefc4d80801fa218d429d1d7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:59:e7:ed:9f:3d:f5:c7:68:83:98:72:21:
64:de:08:ef:bd:70:b4:11:6d:06:66:ae:da:0f:29:
86:63:76:83:5e:b2:58:e3:48:79:b8:8a:51:6d:a2:
3a:4a:4a:41:ab:ee:7b:6c:ca:11:23:fe:b5:9f:dd:
b9:2f:e6:83:d1:be:3a:37:aa:f4:71:6c:c3:14:a3:
7d:03:59:d2:a1:c2:80:c7:a8:c8:0e:eb:34:6b:3d:
04:d1:e2:28:a2:fb:71:71:13:eb:9b:43:3c:55:14:
64:94:ba:6e:2d:86:8b:9d:0c:d2:40:12:30:4e:af:
93:45:f2:9a:32:b9:f7:93:91:68:20:21:4a:dd:48:
85:66:60:0a:20:18:e9:e0:9b:69:b8:4e:b8:34:67:
c0:68:ca:db:aa:b0:f2:63:dd:d0:50:8d:4f:76:88:
74:6d:a8:b9:83:a9:54:42:90:cd:b8:a5:6d:ff:60:
7e:ae:47:92:e5:08:bd:ec:46:26:74:52:c6:16:c5:
a1:ec:6b:c2:df:c8:d9:9e:87:70:41:14:90:c6:09:
1a:49:f0:92:e5:28:3b:c6:26:c7:c8:99:b9:13:56:
91:7c:52:59:68:b2:12:62:8f:76:56:33:4b:7b:2e:
83:e0:15:f4:e6:29:ce:6b:bd:80:24:70:82:68:13:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BF:BC:EB:2B:2C:DD:AE:FC:4D:80:80:1F:A2:18:D4:29:D1:D7:F3
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2b-86yss3a78TYCAH6IY1CnR1_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
72:6a:2d:1f:e3:cc:f7:57:ed:26:09:1e:55:0f:59:9c:d6:20:
a1:da:72:f7:0f:0d:80:63:d4:98:4e:f2:31:ce:d7:94:4e:9d:
04:b9:42:58:83:f2:10:0e:21:ca:d2:80:27:a5:78:bf:de:46:
30:58:2b:f2:cb:73:fc:7c:b0:5a:c3:3a:27:6b:9b:9c:7e:57:
98:26:ea:a1:ca:a0:0e:dc:d1:e9:91:34:55:8c:ff:65:f2:d9:
66:44:9e:24:fd:85:1d:e7:eb:da:5d:27:2e:00:1c:4a:ed:ff:
33:52:c6:36:0a:be:19:12:de:f3:3b:3f:9f:fd:24:60:67:1e:
82:2c:38:eb:3b:03:62:94:22:5e:57:e1:ef:33:9e:58:4b:a7:
95:9f:d7:dc:2c:21:5b:7e:f6:16:12:bb:16:52:14:24:b8:4a:
6f:32:a0:e7:cc:5e:a9:94:1c:9e:7d:d5:2a:ac:5a:d1:68:68:
cc:e6:94:54:e4:a3:1d:ff:99:18:3d:38:9d:2d:64:9d:16:d0:
b3:9e:5a:02:cd:71:c9:78:cd:68:47:0a:f3:8f:fe:e2:81:8d:
3f:93:db:48:28:bc:73:6b:cd:30:1c:33:98:52:a2:38:19:53:
3e:ad:6c:89:80:d8:1a:c8:c1:9c:b5:55:be:a0:cf:7e:7c:01:
d4:17:36:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:34 2025 by rpki-client