Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1igdJ9w4MXmjmx0c_9D3CFCY1fM.roa
File: 1igdJ9w4MXmjmx0c_9D3CFCY1fM.roa (raw, json)
Hash identifier: gFFPT56UEG3gvhK/CQTYl9MHDA/XBTGRRG7Mkop+p34=
Subject key identifier: D6:28:1D:27:DC:38:31:79:A3:9B:1D:1C:FF:D0:F7:08:50:98:D5:F3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018D16BAC06944E38C80EE96C73D7C6B0E60
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1igdJ9w4MXmjmx0c_9D3CFCY1fM.roa
Signing time: Wed 17 Jan 2024 09:22:34 +0000
ROA not before: Wed 17 Jan 2024 09:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.128.26.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
2a0f:2f80::/29 maxlen: 29
2a0f:e840::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 22 Jan 2024 10:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:16:ba:c0:69:44:e3:8c:80:ee:96:c7:3d:7c:6b:0e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 17 09:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6281d27dc383179a39b1d1cffd0f7085098d5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:c1:3f:e8:b2:4a:c5:b8:12:4d:bd:39:fe:
35:48:1a:07:0e:a4:44:18:a0:20:fb:5e:b5:28:7c:
8a:ae:ee:7e:46:77:1f:d2:58:f7:5d:b0:e9:ff:1b:
cd:0e:04:a1:ea:6c:18:c2:84:dc:2a:09:0e:6e:f0:
49:e1:1a:40:e4:34:c5:9f:39:89:83:0f:d8:68:e4:
cf:4a:96:98:bd:bf:b5:72:84:7f:ca:eb:1c:19:a3:
f7:90:3c:95:d7:67:3a:61:64:a8:e7:c3:42:e3:9d:
ee:93:33:92:34:bc:3e:a0:a2:08:09:b7:f0:07:3f:
60:0a:47:6c:f3:79:6b:50:ba:b5:08:5c:48:63:65:
aa:18:ac:33:35:09:04:2f:71:be:a8:f9:69:83:18:
9a:90:2a:2c:9d:2c:d6:fb:e4:05:81:85:1d:ee:7a:
26:52:65:e4:c6:2b:8b:75:dc:42:eb:ad:4c:fb:e2:
83:2f:b9:c2:1a:40:c2:75:cf:a4:d7:72:c5:a1:69:
a3:b0:56:65:2d:e1:3d:64:60:e5:1e:78:fa:ca:19:
7e:04:0f:a4:d6:e2:d2:60:2f:66:ae:24:34:96:4a:
49:dd:82:a4:18:19:71:d4:6e:a8:1f:df:f4:26:50:
0d:19:f2:45:eb:5b:eb:a2:ef:ca:54:21:48:2a:91:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:28:1D:27:DC:38:31:79:A3:9B:1D:1C:FF:D0:F7:08:50:98:D5:F3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1igdJ9w4MXmjmx0c_9D3CFCY1fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
93.190.246.0/23
IPv6:
2a0f:2f80::/29
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
36:6b:18:4f:c6:ee:41:80:97:21:8e:3e:ff:ad:aa:ba:65:01:
06:56:54:a1:9a:4d:92:ad:2f:f1:b9:9a:04:ea:a1:f0:19:f9:
57:d1:0e:56:90:b3:71:59:66:dd:3c:1f:02:89:28:2d:43:b0:
fa:b7:8d:a5:3e:e7:fd:b7:99:64:34:00:d0:ef:92:16:13:ce:
94:e2:92:fe:ba:fb:66:40:7b:b0:70:6f:6e:99:b9:b2:95:ae:
f1:2b:b4:88:f2:7b:c9:c8:57:9d:86:06:f6:88:d3:b4:68:eb:
0d:b2:3f:6e:d4:01:2f:b8:9e:8b:44:51:e5:fb:0a:cc:e5:d8:
a4:ea:d1:58:82:4f:3b:0c:6e:53:60:4c:93:57:8a:7c:94:b4:
0e:41:76:ba:af:96:de:a8:29:c0:a8:65:59:14:93:f8:6d:1a:
c2:2b:af:bb:41:d4:21:ce:1c:8d:0d:f7:fd:90:63:22:4f:bc:
2f:05:5f:50:9e:d8:35:9e:1a:cf:de:88:cf:9d:36:57:6a:df:
62:40:a9:c4:f2:21:ae:17:46:cf:9e:26:59:71:ce:a8:6a:b8:
e6:3a:7e:8a:72:f5:ef:89:79:f6:6a:bc:6e:04:3f:07:e7:56:
f2:d0:0d:45:c9:93:8f:3e:29:c2:e3:61:b5:cf:a0:ef:e7:14:
bd:09:ba:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:25 2025 by rpki-client