Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/tuXWQexWMD5PGT3touev8slJ474.roa
File: tuXWQexWMD5PGT3touev8slJ474.roa (raw, json)
Hash identifier: BRkk/8xRFxNKcRpDFXANimbtPH4iFFTGMkirXHsVPfE=
Subject key identifier: B6:E5:D6:41:EC:56:30:3E:4F:19:3D:ED:A2:E7:AF:F2:C9:49:E3:BE
Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial: 0193BAFFBD4989A63AE4819DD00B47E85C16
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/tuXWQexWMD5PGT3touev8slJ474.roa
Signing time: Thu 12 Dec 2024 13:12:22 +0000
ROA not before: Thu 12 Dec 2024 13:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 45.149.168.0/23 maxlen: 24
45.149.170.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:ff:bd:49:89:a6:3a:e4:81:9d:d0:0b:47:e8:5c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
Validity
Not Before: Dec 12 13:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6e5d641ec56303e4f193deda2e7aff2c949e3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:a0:23:14:93:23:3a:1d:b4:02:16:cc:df:
2c:b2:0a:79:b5:ef:88:63:d4:ba:70:d6:98:6e:29:
62:7b:d0:c3:8a:be:82:1c:2e:94:9d:54:4b:ed:38:
b1:93:0d:cb:a4:39:74:de:b2:1e:9a:df:29:20:a5:
a1:c1:df:b6:d0:d5:0d:f4:b4:55:60:f8:e6:a5:e5:
1a:15:21:08:7c:72:04:95:59:a2:49:21:ea:46:2f:
91:77:e1:bb:f3:b0:73:bc:af:a4:49:33:d2:83:71:
ac:70:3f:16:9e:a4:5d:94:88:fb:e4:1d:ce:38:ae:
5d:c2:66:d5:f3:bb:b7:53:80:40:64:6e:90:b8:0f:
de:e7:dc:eb:5c:64:3c:1a:05:c7:be:8a:2c:5d:2b:
ec:3b:e5:92:a1:14:b0:57:74:b4:f7:6e:fc:a6:ee:
36:07:6b:5b:1d:c9:86:c8:c0:52:bc:12:6b:dd:2d:
9c:af:94:d8:cc:26:59:26:6c:95:82:6b:37:1e:7b:
c4:f3:e0:dc:78:e6:76:11:7f:da:25:ee:2b:54:4a:
7b:89:c3:22:87:81:1f:15:61:ad:ca:a5:b5:b1:c5:
a9:5c:71:95:69:7a:8e:e8:0a:38:79:15:61:85:46:
ca:b5:a3:f8:33:05:bc:b3:bf:1c:c4:40:15:ba:0a:
1e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E5:D6:41:EC:56:30:3E:4F:19:3D:ED:A2:E7:AF:F2:C9:49:E3:BE
X509v3 Authority Key Identifier:
keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/tuXWQexWMD5PGT3touev8slJ474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.168.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:9b:b4:fc:4e:de:d2:33:01:ca:11:8b:27:e5:98:7b:3f:e4:
bc:c3:65:30:09:6b:59:40:27:53:b9:19:80:11:99:45:f3:2f:
66:72:b8:dd:ff:fb:04:2e:0b:24:44:3c:40:ef:f4:02:bb:86:
84:d4:09:69:b5:6c:97:06:0c:af:6e:58:88:45:69:41:82:62:
4d:29:dc:ee:b4:dd:99:6b:04:43:12:f2:6c:f3:4f:ba:9e:29:
b9:ed:0a:5c:25:68:3e:46:56:1b:3e:3c:33:b5:ec:c7:09:c4:
39:a4:97:02:bd:2d:64:c9:97:33:cf:ab:51:42:29:4d:41:78:
6a:6c:80:71:15:c9:ad:0d:87:44:be:95:2d:89:27:be:cb:79:
6b:aa:85:d8:69:66:40:fd:9b:95:37:a3:4a:4a:c8:72:d9:66:
d9:27:a9:ec:94:ef:77:71:59:87:96:76:3c:fe:a9:fd:d0:10:
b2:10:38:3a:81:38:8a:e7:3b:f6:dd:7d:78:b1:22:c7:4f:ca:
87:b8:f6:07:19:b6:30:98:f4:f6:ac:c8:14:7e:54:33:78:49:
18:10:f1:19:ef:18:82:ad:34:a7:72:35:77:f9:6d:de:48:82:
50:64:33:d1:40:71:4b:25:6e:b1:ee:4f:d6:db:d8:7f:e2:6b:
59:44:6a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:46:30 2025 by rpki-client