Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/F_g-GoAgvi92RVV-imiuVo_ef3Y.roa
File: F_g-GoAgvi92RVV-imiuVo_ef3Y.roa (raw, json)
Hash identifier: Ey7naWaXNBpNwRXxjLU6bZDwNnpV2QTJb0bFSawct/4=
Subject key identifier: 17:F8:3E:1A:80:20:BE:2F:76:45:55:7E:8A:68:AE:56:8F:DE:7F:76
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369C8CDDEB9D0010352A55BEBB47F2F
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/F_g-GoAgvi92RVV-imiuVo_ef3Y.roa
Signing time: Wed 01 Jan 2025 19:48:42 +0000
ROA not before: Wed 01 Jan 2025 19:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43278
IP address blocks: 45.129.237.0/24 maxlen: 24
213.226.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 12:16:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c8:cd:de:b9:d0:01:03:52:a5:5b:eb:b4:7f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17f83e1a8020be2f7645557e8a68ae568fde7f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:58:ab:5d:5c:fa:33:7d:d5:f9:d9:b8:31:
7b:ba:ef:9d:5a:55:16:29:39:86:d1:ff:8e:2e:cd:
7c:3f:91:5d:cd:e4:93:6a:8d:72:63:8e:e4:00:04:
23:09:18:0f:2e:84:05:2d:d7:be:c3:b5:97:16:50:
9c:21:8d:72:b2:07:b5:2e:6a:2d:88:80:f8:c3:d3:
09:cc:dd:50:4b:3e:8e:7c:f5:53:7b:85:a0:b8:4d:
7d:ee:cf:f3:16:f4:32:4c:3e:99:69:2a:c5:94:6a:
58:de:98:40:02:7b:5e:83:a0:7e:cf:64:3b:4a:f2:
aa:27:0e:04:41:d5:af:31:3e:16:95:ef:3d:5b:b6:
4a:e9:c5:28:52:c1:ff:a4:d4:10:50:b7:0b:25:35:
ab:ef:ba:ba:0c:87:15:80:b4:66:7a:7c:f3:14:dc:
3b:f9:f6:27:67:1f:a1:b9:f9:6c:f9:6a:fd:de:ed:
a0:6c:44:59:5f:ee:f1:2e:32:1f:9d:da:c9:dc:27:
5b:7e:73:1f:ff:56:0d:e5:c9:16:c9:b4:3e:7b:a9:
78:c5:ba:ec:e7:74:c0:57:44:3e:35:2a:cb:f5:62:
e4:e6:b1:3c:f1:9c:c0:86:75:b7:6b:29:3c:0b:96:
05:b6:53:63:7e:a2:93:58:5c:31:d2:5c:77:03:e5:
37:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F8:3E:1A:80:20:BE:2F:76:45:55:7E:8A:68:AE:56:8F:DE:7F:76
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/F_g-GoAgvi92RVV-imiuVo_ef3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.237.0/24
213.226.115.0/24
Signature Algorithm: sha256WithRSAEncryption
57:dd:a6:4f:55:eb:5d:4f:bf:dc:8e:6f:69:37:a5:ed:ae:b8:
b9:59:fb:95:dc:50:9e:e7:66:04:67:73:43:f3:aa:aa:49:c1:
bc:1d:70:95:a2:ba:84:4b:7f:ff:e4:0c:96:5d:55:37:1f:5a:
8e:41:c5:53:6e:31:8b:9f:ae:df:89:96:d2:94:f4:bb:01:ee:
b9:f9:44:6c:99:34:5f:31:ef:4e:d1:8a:58:e4:f7:24:a8:c0:
26:9f:c0:2a:e3:4d:91:54:df:85:a5:e5:68:3c:d8:69:c4:c5:
da:5d:b4:e7:4d:ae:56:33:e5:eb:09:d2:de:f0:ae:36:b2:7f:
c7:dd:38:8a:9f:d5:36:c4:23:9f:67:39:a1:8f:c1:8a:3b:2a:
95:b1:72:df:56:e8:b8:9f:42:a0:d7:fc:bf:c6:a4:aa:a9:2f:
c4:d6:14:41:ec:c5:b7:a3:dc:ff:f7:4a:af:8a:a4:8d:94:e1:
e1:17:fb:5f:cb:f4:17:cb:1e:51:42:de:d6:0e:46:89:10:a8:
e4:19:7f:c4:71:81:b4:3a:ca:76:ac:27:8e:df:85:5b:7b:ac:
f9:b1:2c:15:00:31:37:43:fc:91:e4:72:ad:9b:58:bf:cd:be:
c5:e7:46:c6:3b:22:4a:7d:70:76:be:a9:74:8d:74:ad:6e:51:
77:66:70:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:38 2025 by rpki-client