Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AM17w3RaZhhSnNTS3iHDnYTzvIM.roa
File: AM17w3RaZhhSnNTS3iHDnYTzvIM.roa (raw, json)
Hash identifier: r7PbkUa1V7jTVChupWBaIc27IgxN9fho1WANvAANjlY=
Subject key identifier: 00:CD:7B:C3:74:5A:66:18:52:9C:D4:D2:DE:21:C3:9D:84:F3:BC:83
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01937C9FD6F95684D23DD37D53728522F350
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AM17w3RaZhhSnNTS3iHDnYTzvIM.roa
Signing time: Sat 30 Nov 2024 10:31:10 +0000
ROA not before: Sat 30 Nov 2024 10:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 131642
IP address blocks: 45.12.62.0/23 maxlen: 23
45.12.62.0/24 maxlen: 24
45.12.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 07:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7c:9f:d6:f9:56:84:d2:3d:d3:7d:53:72:85:22:f3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 30 10:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00cd7bc3745a6618529cd4d2de21c39d84f3bc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:a4:8a:82:e2:b6:da:c9:c4:29:74:6c:d9:
84:fd:09:8a:d8:04:34:66:fa:8d:c4:59:ef:2a:5d:
3c:83:d1:f4:07:84:b9:a5:04:33:60:bd:4d:b9:35:
c6:da:59:27:9a:93:f7:c2:c9:29:af:c1:fa:40:67:
6a:ed:ee:52:bd:fe:74:4e:87:90:a0:c8:77:93:6b:
94:a5:f6:34:3e:c3:da:e0:f0:c4:b9:ba:8d:eb:73:
cc:b4:65:b5:21:1e:5a:55:47:09:2e:15:b5:49:97:
db:a8:71:01:73:1f:f5:9b:63:58:44:30:f6:37:42:
3d:64:e5:f6:b0:a7:f1:26:3b:74:ba:29:65:09:e8:
01:67:8f:89:c3:33:99:10:07:ae:b4:25:17:e1:02:
be:2b:78:f1:d2:8e:19:59:16:d7:1f:5c:c3:1b:e4:
77:6c:14:78:cd:e0:a9:92:12:ce:19:c7:c8:dd:ea:
27:8f:7d:fe:7f:87:aa:45:ca:6c:b3:ce:bd:fb:96:
2a:dd:fb:5c:61:3b:7a:81:6d:7d:27:8d:9f:a3:83:
22:ce:ae:c0:6a:31:e1:7c:67:3e:24:b8:7f:34:ee:
f4:5c:b1:7c:00:6f:11:2f:f2:ef:fa:e9:37:04:3f:
ed:c8:7f:8f:d1:0f:e2:39:0e:14:9e:90:96:c6:fc:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CD:7B:C3:74:5A:66:18:52:9C:D4:D2:DE:21:C3:9D:84:F3:BC:83
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AM17w3RaZhhSnNTS3iHDnYTzvIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.62.0/23
Signature Algorithm: sha256WithRSAEncryption
35:15:2e:1b:59:e4:61:01:5e:26:ff:65:90:b7:6c:b3:76:4a:
7c:37:61:36:2e:85:a9:10:c3:1c:42:a5:1a:b7:86:e1:8a:ca:
35:1d:63:93:d0:ed:db:5c:28:6b:48:d3:ad:1b:1e:5b:27:66:
12:b8:6e:0a:ba:37:0b:89:a0:3a:7c:4a:07:6b:50:02:2b:b5:
88:b8:8c:3c:bb:ca:df:81:5d:0e:94:dc:bc:d7:66:6e:93:4e:
e7:69:21:7c:f7:82:12:21:00:88:2e:62:80:8b:5b:1d:24:f1:
93:44:e3:f9:06:2e:30:b8:0f:24:b3:6b:e7:15:de:6d:cf:3f:
cc:e3:21:54:cc:b4:fa:1c:de:1a:3c:f1:f6:33:ec:31:f6:5d:
1b:ee:58:c2:02:ec:e2:91:35:75:b4:42:be:1f:8e:46:79:f9:
85:6a:1c:01:38:72:d8:d8:fb:46:f1:06:f6:02:3d:05:2b:d4:
db:2f:5a:de:06:02:5f:29:f5:a3:03:91:f1:6d:59:e1:88:9d:
47:87:65:06:41:e7:07:3c:f9:40:53:83:53:1e:d0:3f:c5:a0:
52:5d:30:7a:ba:1c:12:28:aa:44:dc:9d:1b:42:25:f1:79:cd:
da:a9:cb:87:7a:d4:38:49:b6:56:a2:cd:72:5a:55:1c:2e:ac:
86:c3:94:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:59:11 2025 by rpki-client