Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O54ZhLk3AkOlUqPEZrsfsEhdJGU.roa
File: O54ZhLk3AkOlUqPEZrsfsEhdJGU.roa (raw, json)
Hash identifier: M767HtfJY3k4bK2xqrNtEqc74xxDmTyWoviRuRR0Z1A=
Subject key identifier: 3B:9E:19:84:B9:37:02:43:A5:52:A3:C4:66:BB:1F:B0:48:5D:24:65
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193B163B8983CBCA8E19C1B12620F7CAAB4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O54ZhLk3AkOlUqPEZrsfsEhdJGU.roa
Signing time: Tue 10 Dec 2024 16:25:22 +0000
ROA not before: Tue 10 Dec 2024 16:25:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214927
IP address blocks: 45.131.215.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b1:63:b8:98:3c:bc:a8:e1:9c:1b:12:62:0f:7c:aa:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 10 16:25:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b9e1984b9370243a552a3c466bb1fb0485d2465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:56:1b:c8:b6:a0:5f:b6:39:28:7e:5e:e8:
77:2e:3c:6a:19:e2:a3:a5:e4:54:5b:08:c4:fc:79:
02:b7:6d:ac:64:0b:38:4e:aa:51:d1:fe:7a:d1:46:
7f:5d:c5:61:b0:c5:7e:e3:27:36:09:90:4e:44:da:
d5:29:f5:4b:a0:11:17:5c:ec:54:ee:3d:5b:0d:ee:
0d:66:34:71:f3:c1:86:46:bd:b8:9d:dc:c4:33:1d:
b2:3c:16:60:50:1c:c1:22:ee:76:a5:0c:e0:4a:72:
19:be:72:2f:7c:e2:12:79:d5:83:de:f7:ba:fa:7b:
e7:2a:7f:fe:fa:5b:75:e7:b8:a0:5e:70:02:d5:90:
98:31:54:45:ef:b6:07:d5:48:65:ad:8c:31:8c:00:
3b:c0:9e:f7:80:7d:70:39:51:38:95:df:1f:55:20:
84:80:ae:90:05:eb:59:25:3a:42:20:33:e5:8d:2f:
4f:8b:1d:92:83:f1:73:91:b1:9c:77:a7:65:c5:de:
a3:ec:47:17:ad:eb:b0:c9:3c:9d:ea:d1:05:c0:f4:
0a:b3:6a:d9:85:34:09:c6:cc:3f:96:a0:78:60:b6:
57:3d:df:1e:80:9c:02:c9:42:ad:ea:e5:a6:37:3b:
80:e0:5d:6b:f6:83:61:15:c7:0e:6a:06:2a:ac:78:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9E:19:84:B9:37:02:43:A5:52:A3:C4:66:BB:1F:B0:48:5D:24:65
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O54ZhLk3AkOlUqPEZrsfsEhdJGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.215.0/24
45.137.81.0/24
45.141.177.0/24
85.209.128.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d8:5e:dc:d5:13:2f:f3:27:18:5c:f1:6c:ca:17:5f:b3:16:
3e:11:93:d9:fc:2f:a0:04:f1:ca:df:ed:d4:a2:77:4f:88:5b:
63:ed:c8:69:06:47:90:5e:ac:37:92:19:6c:c8:40:99:b0:a8:
02:60:fd:02:85:af:61:06:aa:d5:03:03:a9:eb:c5:1d:fa:85:
dc:ed:c8:be:6f:b7:c4:f2:5f:4c:87:9c:fe:d6:49:ff:c3:0f:
99:44:74:c0:e0:1e:08:d7:e0:48:d4:a9:ce:86:91:8e:8d:79:
23:94:80:ae:4f:b6:dd:96:85:e6:18:ed:2b:da:f1:c9:da:17:
67:ed:12:a5:ca:95:6a:c9:2f:fc:70:6d:ed:78:05:25:a6:09:
8d:29:b1:9e:8c:b0:a3:c6:13:eb:02:c7:d9:d1:17:64:fa:e4:
7b:ea:f7:26:cc:3c:c8:05:fa:0c:49:4f:8d:1d:04:52:6a:ee:
08:0e:20:5c:04:f0:ac:55:53:c5:96:47:37:0f:34:93:5a:12:
e0:0c:e7:d4:41:fe:8b:3b:e4:90:df:74:53:e6:7b:1f:50:dd:
85:52:44:15:38:56:59:38:05:61:5f:a5:62:de:dc:7d:27:22:
0b:a0:d3:c0:c4:39:3a:fd:59:07:82:a4:da:f0:ed:00:dc:bd:
69:fd:04:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:18 2025 by rpki-client