Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/E76xyLHUsH_4E6rW1v_dheoW6Cg.roa
File: E76xyLHUsH_4E6rW1v_dheoW6Cg.roa (raw, json)
Hash identifier: FCRjV9WmyQz+Q85bC6JDFSXXCkl1L6aAp2phauXf0hI=
Subject key identifier: 13:BE:B1:C8:B1:D4:B0:7F:F8:13:AA:D6:D6:FF:DD:85:EA:16:E8:28
Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial: 0193BAFFBDDF521AD24681C3F73DCAE432F6
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/E76xyLHUsH_4E6rW1v_dheoW6Cg.roa
Signing time: Thu 12 Dec 2024 13:12:22 +0000
ROA not before: Thu 12 Dec 2024 13:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 45.149.168.0/23 maxlen: 24
45.149.170.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:ff:bd:df:52:1a:d2:46:81:c3:f7:3d:ca:e4:32:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
Validity
Not Before: Dec 12 13:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13beb1c8b1d4b07ff813aad6d6ffdd85ea16e828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:a4:2f:9d:4c:f1:f4:e6:74:a5:b0:12:94:
e0:53:bf:3f:c4:bb:9a:27:bc:96:34:e0:df:41:c9:
a6:8b:87:14:4a:8a:3d:fd:f3:98:59:a2:a5:e9:bd:
e5:4a:22:64:f5:2b:f7:1a:4d:13:97:f9:f3:10:8c:
d9:16:b6:44:2c:53:f5:49:36:fa:80:f7:79:c0:48:
36:58:d1:13:95:c3:b1:07:06:9d:b1:85:4a:8a:bf:
90:f1:fd:3a:f9:37:16:64:f2:df:33:c2:89:c8:56:
36:f5:8d:60:78:77:a8:ca:0d:18:b0:36:4f:ef:8c:
25:51:b1:ae:23:89:ce:0d:ff:4f:43:52:26:f6:29:
5e:48:a2:27:0b:52:7f:a5:86:7c:40:00:85:ff:36:
41:8c:4d:d2:75:c6:25:80:62:02:58:19:53:a3:96:
70:e7:bd:f5:d2:d6:f7:3c:5a:b3:be:00:48:de:12:
5c:ba:f9:01:84:c0:21:4f:91:67:37:7c:60:90:75:
24:66:ac:81:3d:be:7d:b1:28:99:d5:8f:ab:e1:ac:
c0:62:26:df:63:6c:51:e1:3f:87:c9:81:62:9a:b6:
45:c8:96:2f:e3:3f:ff:16:5b:5e:59:7e:5f:c2:05:
45:fc:4c:5a:40:54:d7:02:72:fb:c6:30:50:16:72:
66:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BE:B1:C8:B1:D4:B0:7F:F8:13:AA:D6:D6:FF:DD:85:EA:16:E8:28
X509v3 Authority Key Identifier:
keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/E76xyLHUsH_4E6rW1v_dheoW6Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.168.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:45:43:30:38:af:6f:5b:b2:ea:b6:d3:7d:3e:d7:1e:17:d7:
ac:ab:8f:60:52:f4:c4:32:16:3d:1c:e4:b1:0b:d5:f6:5d:0d:
83:26:7b:3c:83:41:cf:1a:f8:e7:bb:31:3d:b5:ab:38:16:64:
bd:ac:3f:0a:9e:55:91:f5:db:41:19:2f:61:c0:21:2b:84:f6:
e5:34:cf:c3:c5:77:a2:58:97:a2:99:93:ce:ed:02:a7:de:1d:
39:69:ea:1b:4d:c7:8e:8d:0f:a5:5a:b1:e9:86:22:74:0e:8b:
43:32:d8:08:6e:b8:6b:23:4d:9a:43:a3:7d:bc:ef:89:42:7d:
a2:2f:dd:ab:28:89:d4:11:f3:1e:95:9e:9b:96:41:3c:85:55:
3b:b1:29:a4:ea:17:72:d0:e5:33:b1:36:67:ac:ac:cd:7e:ac:
d7:88:c2:9c:ad:3c:f5:c7:6a:0b:d5:57:b1:e7:bb:1c:38:f9:
d3:ba:6f:df:b4:a7:1f:0c:51:87:64:86:f8:6d:bc:aa:5f:3a:
c9:70:41:bd:c0:af:05:6f:c9:12:03:f0:03:07:ad:83:6d:f6:
c7:fc:1c:7e:69:f2:f7:7b:06:92:a0:58:54:83:60:7b:06:0b:
2d:53:0a:51:e9:32:30:ed:aa:28:83:80:5d:3b:6c:d0:2b:b6:
cf:08:0e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:13:59 2025 by rpki-client