Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H_rZ0fTrOWu2G2MCjkwo5NqEg2I.roa
File: H_rZ0fTrOWu2G2MCjkwo5NqEg2I.roa (raw, json)
Hash identifier: 9+EbiPqioxspSFIlJxLdhykCnjWvGbWTQUeKd4iPRXI=
Subject key identifier: 1F:FA:D9:D1:F4:EB:39:6B:B6:1B:63:02:8E:4C:28:E4:DA:84:83:62
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01907D1AFC1E8A35D72951A5BEAB6088EFC5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H_rZ0fTrOWu2G2MCjkwo5NqEg2I.roa
Signing time: Thu 04 Jul 2024 09:37:18 +0000
ROA not before: Thu 04 Jul 2024 09:37:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399989
IP address blocks: 45.128.26.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 01 Nov 2024 07:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:1a:fc:1e:8a:35:d7:29:51:a5:be:ab:60:88:ef:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 4 09:37:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ffad9d1f4eb396bb61b63028e4c28e4da848362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c8:fc:2d:c1:0c:bd:61:4b:f5:b2:76:a4:73:
ae:04:0d:c2:df:d9:ed:7c:8a:01:32:16:52:5f:32:
f1:9a:a7:c8:f8:ce:a7:2b:e4:74:61:1d:de:f5:7f:
90:a2:20:92:f1:ca:87:f8:7a:8e:31:4e:ed:f7:ba:
fc:0d:47:04:f5:7a:ff:6d:67:cb:41:5d:ff:18:fe:
c7:2e:cf:92:a2:b2:24:e6:88:83:66:68:50:63:ab:
d9:84:46:b9:58:6a:9d:8f:5b:ca:1a:5d:71:b3:44:
cc:31:13:c7:be:d8:89:4f:56:ca:30:2b:e8:d3:23:
6e:85:7e:6e:0a:65:63:eb:3a:cd:c5:b9:d4:fc:f9:
c8:a6:4a:67:e2:89:f2:20:db:ef:ad:40:66:5e:10:
4a:9b:d1:5f:20:eb:59:44:54:03:b4:1b:f3:dc:9d:
55:09:97:4c:07:33:f2:dd:9d:d8:f5:97:b9:72:52:
51:b5:22:07:08:d0:a6:d7:c0:4a:88:1c:f9:3e:65:
54:12:b1:bb:a1:9a:14:9a:bc:ac:98:ed:54:f4:dd:
97:6d:cb:d8:50:f9:41:8d:dd:6d:11:96:a4:0e:df:
5b:9e:8e:df:85:22:8c:e2:67:d3:45:60:bb:58:18:
e9:ed:34:db:1a:e3:f5:7f:06:74:d7:d2:65:36:47:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FA:D9:D1:F4:EB:39:6B:B6:1B:63:02:8E:4C:28:E4:DA:84:83:62
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H_rZ0fTrOWu2G2MCjkwo5NqEg2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
93.190.246.0/23
Signature Algorithm: sha256WithRSAEncryption
62:fb:73:26:ff:5c:7e:f6:f0:00:30:3f:65:08:41:d3:96:dd:
18:9d:0c:98:92:9f:da:c7:ce:b1:8b:79:93:07:d5:b8:18:a3:
09:9f:e4:55:4b:fb:4d:aa:6c:ed:d3:c6:32:c2:4f:b1:40:d8:
c4:da:ed:67:23:ec:ef:93:f7:5a:9e:6f:af:15:ea:fd:2c:a0:
79:68:7c:ef:f9:5d:ed:33:b0:ca:17:b7:e2:e4:3c:fc:1b:ff:
08:72:97:6e:f9:13:ce:dc:b6:e9:cd:7b:dd:99:56:d9:e5:e9:
9e:92:4f:d1:11:37:6d:82:73:41:3c:e0:b4:f9:29:5e:15:9a:
a1:1f:9a:0d:80:73:b1:17:c4:99:5b:ed:ac:70:e5:5c:db:fc:
0c:74:44:35:d3:ce:80:d8:d1:17:07:fb:ba:17:f8:b4:cb:b1:
63:a3:dc:2b:59:b5:8c:21:1a:88:a1:8a:e8:02:0b:c5:d5:44:
be:ad:ce:9c:17:00:9b:d6:24:63:05:7d:85:71:cf:e3:19:2f:
b6:2d:e2:30:6a:65:2c:1c:5f:e9:62:89:47:03:99:a5:33:03:
b7:01:99:13:eb:a0:74:1c:39:db:e1:3a:c4:b3:31:47:4d:ee:
fe:e0:98:16:7c:e3:80:2b:d2:0c:de:59:9b:22:7a:cb:2b:73:
ae:59:b2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:28 2025 by rpki-client