Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0unDJANGHDw4tg81DDrc5sfPkLs.roa
File: 0unDJANGHDw4tg81DDrc5sfPkLs.roa (raw, json)
Hash identifier: fGCwTThKfAEgrNPPKEvsFnAYe7xNsWGtGvevTAK5yVI=
Subject key identifier: D2:E9:C3:24:03:46:1C:3C:38:B6:0F:35:0C:3A:DC:E6:C7:CF:90:BB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193736971D9155FFC894C761D9EE915102F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0unDJANGHDw4tg81DDrc5sfPkLs.roa
Signing time: Thu 28 Nov 2024 15:35:10 +0000
ROA not before: Thu 28 Nov 2024 15:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.152.198.0/24 maxlen: 24
103.114.40.0/24 maxlen: 24
2a0e:1a84::/32 maxlen: 32
2a0e:c781::/32 maxlen: 32
2a0e:f600:5f::/48 maxlen: 48
2a0f:1e80:100::/48 maxlen: 48
2a0f:1e80:1986::/48 maxlen: 48
2a0f:3d80:bac::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a0f:e6c6:5532::/48 maxlen: 48
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Sat 30 Nov 2024 10:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:69:71:d9:15:5f:fc:89:4c:76:1d:9e:e9:15:10:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 28 15:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2e9c32403461c3c38b60f350c3adce6c7cf90bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:78:4a:0c:e0:44:cf:6d:9e:20:fc:a4:a0:db:
eb:e9:b6:cf:93:ab:73:aa:de:8b:e1:25:09:03:dc:
6b:fc:c8:69:cb:a3:86:10:20:97:da:01:09:c2:09:
86:39:21:ae:aa:a6:6d:18:87:f0:6e:12:db:d8:a3:
4e:73:73:a2:1b:f8:ab:69:8e:42:05:4c:76:93:6c:
f4:d5:f9:27:7a:ca:de:3b:e4:bd:ab:32:30:c3:d1:
29:52:ae:2e:27:5d:5b:b2:e3:36:d5:41:41:ca:c7:
ec:23:6d:70:4c:52:ef:a0:9c:b9:dd:5a:76:09:de:
c7:a9:12:2a:37:29:e1:0a:93:ec:8e:0b:0c:e1:b7:
01:35:56:34:01:8e:55:a4:6d:be:83:4c:46:cc:3f:
50:43:df:52:7c:13:e0:cf:cf:8e:cb:b8:23:43:c2:
bb:f9:31:46:3d:29:fb:43:66:5e:42:91:b6:76:ee:
8e:50:fc:7c:08:30:fe:df:09:da:51:9a:87:6f:4f:
40:52:c3:74:7f:52:36:ff:9f:4b:fa:68:7b:55:bc:
ec:4f:55:32:11:e3:77:97:1b:26:84:71:5f:92:9f:
a6:f6:d8:a7:ad:90:c5:48:fe:c1:14:25:93:96:15:
3a:53:d2:a6:06:5b:cd:d9:fb:7c:09:4a:a4:eb:f0:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E9:C3:24:03:46:1C:3C:38:B6:0F:35:0C:3A:DC:E6:C7:CF:90:BB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0unDJANGHDw4tg81DDrc5sfPkLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.198.0/24
103.114.40.0/24
IPv6:
2a0e:1a84::/32
2a0e:c781::/32
2a0e:f600:5f::/48
2a0f:1e80:100::/48
2a0f:1e80:1986::/48
2a0f:3d80:bac::/48
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a0f:e6c6:5532::/48
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
66:9c:26:b8:b4:7a:dd:fa:e2:d9:74:5d:04:89:e9:0b:36:43:
e8:e6:5d:fe:bb:c0:2a:f7:40:41:a1:3e:6f:b2:ff:69:08:a9:
9d:d1:84:b8:95:c4:3c:22:b1:aa:1f:d3:c1:bc:c9:fd:91:92:
65:c2:ba:77:de:de:82:94:c3:44:72:2f:c9:c5:05:5e:51:d7:
25:17:17:db:61:48:1c:ad:fe:1f:63:34:ec:8e:cc:1e:a1:8b:
1d:7b:5a:a7:43:93:ea:9d:c6:71:2d:38:c0:cc:2b:57:8f:df:
ab:10:85:86:5b:2a:7f:26:90:55:84:fb:78:70:10:97:e1:31:
61:5e:a2:29:bd:b0:d5:86:c6:91:5d:cd:52:27:d9:6a:f5:07:
c7:6f:0a:84:07:4e:9d:3e:dc:49:6b:1f:64:60:e4:de:c9:f9:
b9:36:41:e1:09:ba:9c:e2:8b:b4:c6:7c:be:75:88:af:74:55:
83:1a:74:da:bd:8f:7d:df:72:b3:a2:18:19:88:4d:b7:67:f3:
50:c2:7a:cf:9a:b5:ad:32:6d:6c:a5:b0:9b:03:9f:9f:7e:47:
b2:6b:8e:20:7d:4c:af:47:72:07:4c:d5:84:d2:2f:e7:f2:54:
6a:b8:d2:3e:5f:ee:07:09:ec:bc:4a:0a:d9:78:9c:12:70:ca:
ea:36:2d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:25:56 2025 by rpki-client