Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Enr6ircLheH4KbKs8GKcJ0McRrQ.roa
File: Enr6ircLheH4KbKs8GKcJ0McRrQ.roa (raw, json)
Hash identifier: 9MaYQrO6uJzKVsdy5gIVHdvd61ReXtqN3+8W+V/Xew0=
Subject key identifier: 12:7A:FA:8A:B7:0B:85:E1:F8:29:B2:AC:F0:62:9C:27:43:1C:46:B4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193AA94DDCB4337185B51FAEF310777F691
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Enr6ircLheH4KbKs8GKcJ0McRrQ.roa
Signing time: Mon 09 Dec 2024 08:41:43 +0000
ROA not before: Mon 09 Dec 2024 08:41:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 131642
IP address blocks: 45.12.62.0/23 maxlen: 23
45.12.62.0/24 maxlen: 24
45.12.62.45/32 maxlen: 32
45.12.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:94:dd:cb:43:37:18:5b:51:fa:ef:31:07:77:f6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 9 08:41:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=127afa8ab70b85e1f829b2acf0629c27431c46b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:77:8f:b4:ce:1c:f2:7d:7d:1f:62:b7:76:57:
81:4b:24:a6:cf:67:37:1a:b0:9f:29:ca:d1:dc:47:
0a:22:66:bc:9a:54:29:a3:32:65:a5:79:47:c5:0c:
0a:83:18:10:33:35:97:b2:05:4d:ad:f3:36:25:07:
62:14:92:a9:ab:09:d6:9c:81:53:54:18:ef:e1:d3:
1c:5b:1c:b3:a9:42:b2:7b:ec:0f:6a:8d:f2:c2:f0:
26:bb:17:63:81:32:c1:a6:32:22:2b:6b:d8:95:71:
29:cd:1f:72:87:69:a7:c2:e1:09:81:34:0a:92:85:
e5:b5:92:a3:e0:5d:21:7c:f2:5b:ec:12:20:46:3e:
03:d6:a9:5a:96:d7:fc:fb:2d:04:ad:7c:d9:b1:a2:
59:fa:c0:a7:27:af:65:26:03:93:8f:26:e8:21:53:
7b:e0:d9:34:99:a9:a7:2f:94:bb:a2:bc:37:67:98:
95:68:d5:6f:95:5e:1e:7f:b6:e1:49:5d:dd:e2:1a:
4a:f3:c6:27:03:a4:8a:0f:34:5e:f6:12:b0:67:9a:
d0:94:c1:e9:b5:a9:d2:93:23:b5:ec:c1:c0:e3:6e:
01:c1:ee:f7:80:53:2e:1e:69:a6:63:ea:d5:a4:d0:
09:84:df:a1:17:fd:60:28:e4:c1:82:49:e8:b5:5b:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7A:FA:8A:B7:0B:85:E1:F8:29:B2:AC:F0:62:9C:27:43:1C:46:B4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Enr6ircLheH4KbKs8GKcJ0McRrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.62.0/23
Signature Algorithm: sha256WithRSAEncryption
41:85:6b:be:c3:59:bc:ef:bb:6b:6c:03:fa:6a:e0:2a:cd:39:
b6:07:e5:33:c2:bc:00:b7:03:f0:b9:a1:b0:1d:5a:73:29:eb:
82:d5:c0:0c:97:00:c5:4c:fe:22:fc:c3:01:ba:6a:d4:d9:d3:
c2:d8:e9:80:4d:dd:5c:a2:32:af:08:5c:a3:6c:a1:8b:e2:6a:
57:e1:34:ce:13:e4:91:78:09:09:79:80:61:d1:ac:d4:45:07:
02:f0:b2:1d:e6:c7:e8:67:6f:34:e6:99:c5:fa:cb:f6:f5:31:
a2:59:bd:40:92:f3:1d:8c:eb:d1:b5:20:25:66:9b:98:a0:fb:
ba:12:30:b9:84:12:c2:ac:c4:5c:4b:87:f4:a4:0f:01:f3:74:
a1:5b:90:4a:a6:a0:0c:c9:69:be:3c:30:36:f8:35:53:06:e0:
3c:ef:2f:33:4f:54:09:24:b7:ae:66:ff:16:0a:9a:df:2e:8c:
59:e5:61:e0:de:39:59:63:fe:ad:fa:0e:ff:6b:ff:dc:60:ba:
6e:4e:b8:79:1e:96:20:90:a3:d0:fb:7a:df:cb:5a:bc:6a:50:
4b:88:90:57:3e:c1:c8:8a:87:84:fb:f8:29:80:5a:a3:63:b0:
83:22:27:db:7d:81:f6:4f:93:77:1c:71:a9:9a:3a:84:da:48:
b6:43:71:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:30 2025 by rpki-client