Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/50XFlU8zbQsw_tqa9qucb0WTHXs.roa
File: 50XFlU8zbQsw_tqa9qucb0WTHXs.roa (raw, json)
Hash identifier: oHRsAFFvkzers9sNdgGRTsIkbejkl/3uwBTXA5lz9c8=
Subject key identifier: E7:45:C5:95:4F:33:6D:0B:30:FE:DA:9A:F6:AB:9C:6F:45:93:1D:7B
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 018EF08BED83A1D46357A51F01D04D0F461B
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/50XFlU8zbQsw_tqa9qucb0WTHXs.roa
Signing time: Thu 18 Apr 2024 09:31:25 +0000
ROA not before: Thu 18 Apr 2024 09:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59741
IP address blocks: 45.141.52.0/22 maxlen: 24
45.141.54.0/24 maxlen: 24
45.155.78.0/24 maxlen: 24
45.155.79.0/24 maxlen: 24
185.73.240.0/24 maxlen: 24
185.73.241.0/24 maxlen: 24
185.73.242.0/24 maxlen: 24
2a05:4740::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 18 Apr 2024 09:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f0:8b:ed:83:a1:d4:63:57:a5:1f:01:d0:4d:0f:46:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Apr 18 09:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e745c5954f336d0b30feda9af6ab9c6f45931d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:72:84:02:89:08:a8:cd:e5:ae:2b:7a:9a:
4b:8d:8e:94:be:4f:f2:f4:1c:f6:35:24:6f:09:a5:
d7:fd:19:d7:f0:ce:dd:bd:5a:65:1b:4e:a7:d0:cf:
66:bd:d9:4c:e4:af:53:5b:0c:32:bd:c1:ca:f7:bd:
c7:11:f5:1c:4b:89:a0:95:78:17:fd:d4:05:8d:7d:
31:5a:c3:7d:56:2d:3b:c6:73:ce:a0:b1:72:0e:0e:
b4:dd:74:7c:a8:27:9e:bd:2a:6f:cf:55:d3:76:70:
07:4e:51:c8:bc:a3:7f:1c:c6:3b:1e:ab:3d:90:2a:
47:26:fb:1c:12:57:ad:5d:5e:e9:04:dd:73:33:33:
ca:ab:11:ad:78:3c:46:20:32:60:d9:e0:5c:da:34:
77:79:5e:46:09:33:cb:e1:b9:2b:c5:b8:12:44:d2:
75:e4:22:13:6b:b5:61:38:81:66:98:6d:69:fc:4a:
b6:92:85:54:54:e6:d2:29:13:69:bb:25:b4:04:00:
9a:d7:63:3e:36:ee:54:48:4a:99:ee:df:ff:ac:e7:
84:2e:e9:d5:48:21:9f:ec:5a:57:78:bd:36:ab:dd:
99:e5:95:51:e3:a8:46:7c:25:26:b0:68:69:47:30:
5c:54:de:37:0a:55:91:c1:80:cc:aa:05:30:46:0e:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:45:C5:95:4F:33:6D:0B:30:FE:DA:9A:F6:AB:9C:6F:45:93:1D:7B
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/50XFlU8zbQsw_tqa9qucb0WTHXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.52.0/22
45.155.78.0/23
185.73.240.0-185.73.242.255
IPv6:
2a05:4740::/32
Signature Algorithm: sha256WithRSAEncryption
94:d4:0e:36:a9:1f:7f:29:2b:28:f7:26:38:c8:cd:e2:2a:d0:
3f:70:36:74:5a:fc:a0:c3:5c:81:d1:be:84:df:1c:a4:43:d5:
4b:d3:32:ba:07:e7:57:8e:af:44:b1:a9:c3:cf:b5:03:1e:6b:
c8:05:88:0d:6f:b1:c3:19:7e:f4:c1:90:54:17:0a:d3:e4:ba:
1e:15:4f:fb:75:f1:02:f6:73:38:b0:59:2c:a3:1b:71:32:dc:
79:a2:c5:79:7a:d6:ad:11:11:d9:c2:85:cc:62:18:b9:16:a1:
5a:fa:55:54:bb:3b:48:6e:e9:a4:8d:69:69:5e:82:a5:80:08:
67:18:24:b5:c7:9d:0f:95:9e:b9:6a:03:26:a9:cf:3f:9b:81:
14:c3:fb:12:ab:82:ea:25:c5:26:1b:18:82:af:ea:e6:53:f5:
ed:3c:e9:a7:5f:d3:0e:76:66:87:87:e7:aa:50:12:5e:80:cd:
29:41:5c:15:e9:3c:d2:e3:1b:8f:e2:1f:02:12:c2:13:50:ea:
c7:f7:af:93:f3:bd:b4:87:fc:99:19:24:c6:57:9a:b3:d0:61:
46:8f:44:ce:24:55:9b:ee:fe:48:62:42:fb:03:c8:19:c9:f3:
20:18:1d:50:03:84:b6:92:45:dc:3b:3b:45:30:e9:35:59:af:
84:71:a0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:43 2025 by rpki-client