Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CHA6yc0E6U_9ZS6smKFxoWHszd8.roa
File: CHA6yc0E6U_9ZS6smKFxoWHszd8.roa (raw, json)
Hash identifier: VTsH0LTs0/47yP6CY9EJUgQyqPuONaMGMdZd6uDk8Qo=
Subject key identifier: 08:70:3A:C9:CD:04:E9:4F:FD:65:2E:AC:98:A1:71:A1:61:EC:CD:DF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019222BF3520C10455ECFCF319CD61D6DB7D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CHA6yc0E6U_9ZS6smKFxoWHszd8.roa
Signing time: Tue 24 Sep 2024 06:36:49 +0000
ROA not before: Tue 24 Sep 2024 06:36:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.128.79.0/24 maxlen: 24
45.141.178.0/24 maxlen: 24
93.190.246.0/24 maxlen: 24
2a0f:7d03::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 03 Oct 2024 11:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:22:bf:35:20:c1:04:55:ec:fc:f3:19:cd:61:d6:db:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 24 06:36:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08703ac9cd04e94ffd652eac98a171a161eccddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c7:a3:e1:b7:0a:6c:7e:cc:7c:76:5a:76:2a:
c0:f0:95:66:a7:1b:36:b0:83:62:02:5c:34:db:48:
f5:1d:1d:56:e8:52:f6:22:f3:7c:64:5f:dc:e2:f9:
e2:e1:a1:d6:2a:51:55:30:fd:ea:29:f5:02:64:7b:
30:bd:4c:55:18:a7:4b:22:e3:f4:11:73:e0:a5:3c:
f2:45:b9:3b:b3:ad:48:39:89:16:c6:e9:90:45:38:
11:f9:12:d3:19:62:32:44:23:2c:35:59:3e:a4:4a:
8d:0b:10:09:39:76:7a:41:6f:e2:83:e6:95:07:07:
2e:62:ea:51:32:5c:8b:74:58:0f:39:d0:bb:c5:53:
4d:57:f6:94:69:29:5a:a1:4b:12:2c:dc:43:95:80:
c3:0e:80:04:dd:9e:08:5a:44:7a:a8:6b:24:d5:64:
9d:e3:e2:89:ee:c6:41:c1:97:64:96:75:13:45:42:
40:24:77:cb:4d:9d:1c:c4:f8:a0:5b:cd:51:f0:68:
41:d3:c1:09:d1:27:a4:f6:5f:da:cf:39:d3:87:6a:
f5:04:81:6e:49:67:2b:a3:9f:d7:99:a9:96:8d:b4:
3b:b6:12:bc:83:79:6b:1e:9a:4f:8e:10:c3:d8:46:
2d:a6:99:46:66:df:68:ca:fa:8b:9e:8f:06:c8:e7:
ce:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:70:3A:C9:CD:04:E9:4F:FD:65:2E:AC:98:A1:71:A1:61:EC:CD:DF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CHA6yc0E6U_9ZS6smKFxoWHszd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.79.0/24
45.141.178.0/24
93.190.246.0/24
IPv6:
2a0f:7d03::/32
Signature Algorithm: sha256WithRSAEncryption
23:18:88:55:22:a6:82:df:21:1f:06:a1:3f:a6:e0:c2:8c:01:
7e:92:ad:9d:06:79:65:2c:99:0e:eb:a4:e1:b6:d2:7e:a8:7a:
2b:26:e8:62:26:ac:5c:99:7c:a4:96:de:f8:e4:3d:8d:15:12:
be:2f:6c:25:03:2f:48:ae:ad:9d:94:8e:bf:86:52:40:fc:2b:
d9:bb:95:41:bf:93:74:46:35:10:52:4b:0a:4a:a1:d5:cd:a9:
6c:0c:be:e9:e7:45:f5:ad:c4:2d:25:3e:41:d1:aa:7d:27:91:
a0:0b:f5:6f:21:32:4c:a3:18:7d:a6:52:20:2d:6f:eb:bf:3a:
f5:ae:cf:0c:af:1e:38:55:7e:dc:69:af:40:bc:7c:aa:ca:34:
22:1e:a7:31:62:af:d5:18:00:30:04:cb:c7:f7:3a:68:c5:61:
09:61:89:a1:e1:5d:92:55:56:dc:e8:37:ab:e1:95:6a:32:cb:
1a:7e:c6:f7:91:7b:5c:0e:1b:d8:4d:49:28:f1:06:5e:5b:97:
30:90:da:c2:e9:9b:3a:9d:5c:1d:ec:a3:bf:26:bc:e7:e0:36:
63:6e:19:58:c7:94:b6:78:b5:9b:2f:85:3c:e6:7f:07:e4:a4:
3f:a1:11:2d:3d:e4:83:68:e7:1f:49:bc:43:19:d9:51:ba:47:
e7:f1:18:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:11 2025 by rpki-client