Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/6uH1nqDCMKw08RTOWc494tqHRS0.roa
File: 6uH1nqDCMKw08RTOWc494tqHRS0.roa (raw, json)
Hash identifier: 59sBGawQv/Hd59J3ur21QEogqP6iB5bLJITtty9+bck=
Subject key identifier: EA:E1:F5:9E:A0:C2:30:AC:34:F1:14:CE:59:CE:3D:E2:DA:87:45:2D
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 0193FF5A2890ED90C05110B3325C86C78ADD
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/6uH1nqDCMKw08RTOWc494tqHRS0.roa
Signing time: Wed 25 Dec 2024 19:45:18 +0000
ROA not before: Wed 25 Dec 2024 19:45:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42675
IP address blocks: 45.15.16.0/24 maxlen: 24
2a0e:1c80:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ff:5a:28:90:ed:90:c0:51:10:b3:32:5c:86:c7:8a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Dec 25 19:45:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eae1f59ea0c230ac34f114ce59ce3de2da87452d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:f8:23:51:bf:59:f3:11:ea:0a:67:42:28:
63:a1:dd:3c:d9:bd:45:48:f1:99:c3:33:cd:f4:61:
17:ca:71:4f:b7:30:d3:0d:5f:01:f4:11:6f:66:0c:
7b:57:e0:8c:ef:3a:0f:4f:b5:48:21:29:e6:5e:43:
89:a6:9c:93:85:68:0f:da:96:4f:82:69:ed:87:b2:
c3:20:36:6b:4d:00:51:eb:2e:81:d5:0f:b5:3b:3b:
02:6b:3b:01:66:84:8a:2e:8b:a4:9a:6b:cf:04:b4:
9e:fa:5e:68:85:4c:7f:30:9f:a3:37:1e:aa:72:27:
4e:6c:9c:ac:a8:89:ae:38:f0:09:2b:54:1c:ae:dc:
cd:e1:68:3b:aa:6e:68:f3:0d:84:27:86:92:65:6e:
39:67:c7:dd:18:f6:81:18:af:0f:48:f6:2d:45:41:
b8:43:b3:00:e6:df:70:f6:3d:38:90:89:d7:9b:76:
8e:ca:fb:8d:9d:3a:f8:6e:00:42:8c:f8:d6:05:5d:
53:2f:f7:c5:66:06:4c:ba:0e:a3:8d:6c:40:7a:e7:
79:e4:65:bd:82:c0:15:00:fd:89:f1:f8:f8:19:7d:
bb:28:56:6a:d5:a4:d2:12:73:54:f0:56:8b:20:9a:
77:4d:3e:19:fd:5d:0d:37:54:7b:4c:78:cc:7c:77:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E1:F5:9E:A0:C2:30:AC:34:F1:14:CE:59:CE:3D:E2:DA:87:45:2D
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/6uH1nqDCMKw08RTOWc494tqHRS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.16.0/24
IPv6:
2a0e:1c80:1::/48
Signature Algorithm: sha256WithRSAEncryption
15:ad:d9:bb:33:86:8e:80:98:a5:df:57:da:cb:4b:88:87:90:
90:55:73:67:f3:b8:e9:88:8a:f9:51:6c:88:6c:55:bf:62:8f:
66:8c:ee:45:be:52:20:ad:32:ef:2a:e0:a8:0a:97:74:b2:90:
10:c1:29:5e:2a:02:37:ad:55:63:22:a1:4b:1d:ea:a0:3a:49:
18:74:04:b5:25:f7:9a:87:ee:e8:1d:b7:50:65:e0:a5:77:bb:
45:31:d9:2f:be:26:81:ad:a1:d2:68:09:61:a3:40:51:8c:f2:
df:88:0f:bb:d7:7b:69:9f:e2:e7:53:24:24:af:1f:92:36:0e:
96:09:02:25:4d:29:3c:9f:8e:28:4f:88:f6:0b:56:d6:96:f3:
0d:7c:2d:29:03:a5:a6:6f:ad:da:cd:6d:cd:e7:b1:43:13:84:
1e:b3:1e:47:c7:3c:79:c8:82:d1:f9:bb:9f:d1:0b:2a:83:b6:
82:0b:6b:74:a9:b1:83:d1:a2:8f:28:6b:7a:ae:18:13:16:1d:
c6:d0:27:5b:5b:d1:fb:8b:fd:e1:4d:67:f6:b0:02:84:d6:61:
56:f1:16:45:66:75:12:d2:0c:da:b9:d7:7e:62:4c:ed:26:44:
f4:c7:53:cc:de:6a:74:40:e4:ed:94:1a:cc:aa:ae:46:11:cd:
83:98:2a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:04:59 2025 by rpki-client