Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7f_UB-BwwZ_hBm7yeGylelmerKo.roa
File: 7f_UB-BwwZ_hBm7yeGylelmerKo.roa (raw, json)
Hash identifier: Pvwp1q74sf5l5qve+uoRM06366P8IfjCajUyI7vm8NI=
Subject key identifier: ED:FF:D4:07:E0:70:C1:9F:E1:06:6E:F2:78:6C:A5:7A:59:9E:AC:AA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01932A46E94485C2EDC360E570140E7FBA3A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7f_UB-BwwZ_hBm7yeGylelmerKo.roa
Signing time: Thu 14 Nov 2024 10:45:10 +0000
ROA not before: Thu 14 Nov 2024 10:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214927
IP address blocks: 45.137.81.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Dec 2024 10:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:46:e9:44:85:c2:ed:c3:60:e5:70:14:0e:7f:ba:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 14 10:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edffd407e070c19fe1066ef2786ca57a599eacaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:f7:e6:47:84:be:cc:75:cf:28:b3:f7:8f:
c4:04:1d:6e:47:a7:fd:a3:6e:54:92:8c:91:cb:3a:
2b:66:b1:fc:70:46:e1:63:5d:5e:97:2d:2a:a5:29:
6f:d6:c4:90:cd:c5:91:03:0f:12:92:39:44:2d:d1:
4c:b3:a4:b4:30:87:b5:e6:8c:8c:43:c2:af:75:81:
66:43:57:ff:0f:c2:c7:22:d7:fd:b9:99:03:1a:5b:
a3:d3:d8:2c:3d:31:cc:63:0c:1a:b6:26:57:8d:40:
58:b6:b4:31:ec:29:08:d1:eb:fe:c8:63:8c:da:95:
ca:d0:bb:55:16:1f:fd:01:8b:dc:54:da:10:6d:39:
c0:7c:1d:c5:3f:02:e2:f1:52:b1:8d:b5:21:a3:ac:
28:b7:42:42:b6:e4:27:a8:e8:39:19:91:50:58:e8:
8b:a1:5f:f9:49:fe:23:a4:5b:a0:43:60:a1:05:b0:
bd:2a:9a:c0:c7:da:a3:f8:0c:cb:02:0e:6d:d8:91:
2b:cc:43:0b:d5:2c:d4:50:da:4f:8b:66:a9:ee:78:
7d:14:42:08:de:57:1c:15:ab:d7:80:40:66:1a:bf:
51:c7:0a:05:82:73:e3:49:94:78:4b:90:fe:47:79:
c3:20:97:51:1d:0b:54:15:04:18:ed:94:6d:82:1b:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FF:D4:07:E0:70:C1:9F:E1:06:6E:F2:78:6C:A5:7A:59:9E:AC:AA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7f_UB-BwwZ_hBm7yeGylelmerKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.81.0/24
45.141.177.0/24
Signature Algorithm: sha256WithRSAEncryption
24:1a:55:10:79:93:22:cf:e0:8c:44:1b:28:49:5d:7c:eb:0e:
9a:a8:cc:18:4e:27:72:3e:c6:74:e0:c5:f7:3d:c6:dd:2d:8e:
da:a6:87:d4:af:ce:ab:57:17:cd:19:6c:64:bb:de:73:14:c1:
8b:5d:c6:45:5e:2f:21:99:c2:32:49:2a:f7:6b:61:87:07:7d:
c7:9b:74:c3:4c:ad:b7:28:51:d8:27:ee:6e:e0:8f:bc:9e:0b:
3b:42:cf:2c:23:30:24:a3:8b:bb:3f:fd:f2:f8:d2:4f:0b:5d:
ae:28:63:51:87:7f:53:68:d0:93:75:50:1b:dd:f1:e0:c2:ab:
a5:a7:2f:75:2c:fa:a5:ff:da:31:6b:99:01:94:64:a5:f5:c1:
08:e8:1e:c2:1a:0a:25:e5:33:68:d4:da:d4:bc:40:47:dc:3e:
aa:f4:e7:f3:0e:26:4e:08:c8:9e:78:33:35:fe:46:ec:46:fc:
b7:6f:fb:76:fb:25:24:84:4d:e4:a8:0c:d7:70:5d:22:a9:3d:
37:c7:d1:03:be:bc:3f:b9:72:3b:c1:91:61:14:a7:3f:00:ca:
93:0a:eb:0c:8f:6a:f4:f5:fc:76:df:5e:0f:0c:18:37:f4:de:
88:e6:2f:66:50:6e:05:5f:21:29:2f:ad:59:35:46:0c:a8:74:
b1:46:a1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:51:08 2025 by rpki-client