Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E531wxsT2z1FudXtaUBVPeN93ws.roa
File: E531wxsT2z1FudXtaUBVPeN93ws.roa (raw, json)
Hash identifier: +4bRagKYiG+RWrqRCJIqtpy25qGeLjTZ6Av/eLtTe9Q=
Subject key identifier: 13:9D:F5:C3:1B:13:DB:3D:45:B9:D5:ED:69:40:55:3D:E3:7D:DF:0B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01937C76A3BAF5B7E551419955DE4B59616B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E531wxsT2z1FudXtaUBVPeN93ws.roa
Signing time: Sat 30 Nov 2024 09:46:10 +0000
ROA not before: Sat 30 Nov 2024 09:46:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 131642
IP address blocks: 45.12.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Nov 2024 10:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7c:76:a3:ba:f5:b7:e5:51:41:99:55:de:4b:59:61:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 30 09:46:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=139df5c31b13db3d45b9d5ed6940553de37ddf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:3b:0f:bb:f1:e1:b1:b0:36:8d:74:6c:bf:
61:ee:85:51:ab:4b:33:b3:f7:74:43:49:76:44:6a:
83:e0:5a:1a:0b:91:0c:19:ff:67:eb:02:ca:4f:9a:
c5:21:0a:46:d4:3d:53:61:7c:6f:a3:d5:bd:38:6f:
1e:c0:5f:bf:7d:85:93:a3:ba:a8:99:77:3f:d0:bc:
0b:5d:07:2c:ca:8a:23:11:05:ac:c5:f5:77:b7:99:
0a:3d:4f:50:17:39:73:77:a5:b4:f6:2f:56:e2:2b:
c4:09:e1:50:cc:91:ae:58:d7:53:aa:ee:9f:2d:5f:
ba:14:a7:50:c8:0b:77:96:fc:f4:cd:b9:37:92:43:
ca:dd:ab:82:44:b5:14:8d:0e:38:f0:cc:b8:3b:70:
e2:94:7c:08:c2:d8:24:56:58:36:9e:32:b1:b7:c2:
4a:67:7a:4b:91:b3:52:c6:d5:c0:90:93:43:1d:17:
f7:ef:58:b7:50:35:dc:38:51:3a:f3:c7:65:00:4a:
de:da:91:e4:62:25:7f:11:44:5a:9b:15:1a:d3:1f:
ee:1c:36:4a:4f:02:82:4d:44:59:d9:01:69:22:f0:
c1:f6:1f:20:09:63:c2:19:4c:4f:84:15:e0:3c:1b:
c2:48:98:0e:b2:80:68:5c:f3:de:ce:f9:96:c4:39:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9D:F5:C3:1B:13:DB:3D:45:B9:D5:ED:69:40:55:3D:E3:7D:DF:0B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E531wxsT2z1FudXtaUBVPeN93ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c5:2a:84:d4:75:64:a4:21:75:cc:23:02:b6:3d:5b:13:33:
c1:77:36:d3:7a:fe:19:7b:f8:a2:f3:26:46:2e:6c:c1:d8:df:
eb:0f:d2:b3:6b:20:21:a3:36:55:44:7e:63:34:46:d4:69:88:
17:64:42:61:42:b9:26:2c:9c:66:d3:9e:9a:01:fa:44:c4:21:
21:16:c0:4f:26:72:98:ad:a2:f8:8c:cd:74:cc:b8:5b:cc:8a:
ea:6d:ee:19:fa:47:d9:de:39:10:04:5f:3c:a5:9c:2c:5a:fd:
e2:80:29:b8:c0:9a:29:f1:fe:7c:a7:27:4b:c7:cd:02:05:33:
8d:bb:8a:8d:da:e2:2a:62:49:7b:f6:7e:58:c1:c3:18:b8:67:
e2:a1:80:da:3d:ae:be:3d:20:54:05:c7:ee:22:8c:1b:20:8a:
3b:45:33:50:32:38:4a:0b:12:28:c7:a1:13:5f:76:ae:a5:cc:
46:74:de:5a:90:e9:b5:93:c6:29:f0:df:76:ee:51:1c:d1:16:
ba:f9:59:ec:cb:87:41:fc:92:4f:ae:8a:28:04:42:4c:7b:19:
04:41:f9:af:da:36:ab:aa:67:22:3a:89:2a:f6:62:bb:49:9f:
25:cc:a9:73:a0:10:a4:0b:79:b6:0a:af:14:04:c5:80:fe:cd:
7b:66:05:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:09 2025 by rpki-client