Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RTY8qibPejHGQ_FMr-JbSBe37pk.roa
File: RTY8qibPejHGQ_FMr-JbSBe37pk.roa (raw, json)
Hash identifier: pOjG8sf8IVHZz+nG3wQZT9xEvfq2zq7lPi6iMpQ10Qo=
Subject key identifier: 45:36:3C:AA:26:CF:7A:31:C6:43:F1:4C:AF:E2:5B:48:17:B7:EE:99
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193A2FD32213584A1AF9D16A3DC81AEFB4B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RTY8qibPejHGQ_FMr-JbSBe37pk.roa
Signing time: Sat 07 Dec 2024 21:18:42 +0000
ROA not before: Sat 07 Dec 2024 21:18:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395954
IP address blocks: 45.145.58.0/24 maxlen: 24
45.147.100.0/24 maxlen: 24
45.147.101.0/24 maxlen: 24
45.147.102.0/24 maxlen: 24
45.147.103.0/24 maxlen: 24
45.152.201.0/24 maxlen: 24
45.155.200.0/24 maxlen: 24
45.155.201.0/24 maxlen: 24
45.155.202.0/24 maxlen: 24
45.155.203.0/24 maxlen: 24
193.8.8.0/24 maxlen: 24
194.41.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a2:fd:32:21:35:84:a1:af:9d:16:a3:dc:81:ae:fb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 7 21:18:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45363caa26cf7a31c643f14cafe25b4817b7ee99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:d6:b5:de:69:2f:95:ee:99:2e:3f:5e:5c:
da:f0:57:d4:64:e8:35:b7:2c:e0:60:2f:c7:66:03:
4b:33:18:e6:75:42:8b:39:ff:7a:85:0f:1c:18:3e:
84:a2:c7:35:73:33:5f:17:ed:28:46:4a:c3:b7:2b:
17:36:fd:c2:02:96:8e:db:a1:23:bd:d7:d6:2b:16:
53:49:15:08:3f:09:2e:9a:46:c0:de:e0:f2:ba:92:
57:67:25:d1:f3:72:62:7e:14:c7:94:10:18:75:c8:
9c:4b:c9:97:69:32:0b:c4:8c:89:76:21:d9:e9:ac:
1d:f3:d7:77:3d:95:56:76:1a:0c:b1:43:15:84:ef:
2d:22:72:ee:9d:90:f7:3d:f7:25:75:b9:a3:54:b3:
50:50:19:d0:db:5f:fd:da:32:07:58:fd:b3:b2:07:
d1:0f:3f:87:f7:ba:ad:be:76:2a:69:10:94:b8:f7:
13:6a:1e:47:74:80:c1:a6:a9:f1:76:ee:c1:9d:b7:
df:af:39:52:7a:cf:36:5f:73:10:79:9d:7b:43:06:
50:d9:bc:fb:9b:ca:46:8e:aa:05:ca:9c:ca:2f:68:
2c:18:52:75:00:9b:a6:85:8f:60:a1:d5:74:3b:fe:
78:b5:73:77:39:13:bd:88:21:df:e1:ae:3f:63:42:
ab:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:36:3C:AA:26:CF:7A:31:C6:43:F1:4C:AF:E2:5B:48:17:B7:EE:99
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RTY8qibPejHGQ_FMr-JbSBe37pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.58.0/24
45.147.100.0/22
45.152.201.0/24
45.155.200.0/22
193.8.8.0/24
194.41.56.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:dd:57:22:b6:56:27:8c:4e:21:fe:46:90:9a:8b:8b:4e:15:
79:cf:e4:a9:05:0f:d3:97:14:fc:e2:93:f9:e3:2b:c1:d9:fe:
f1:13:5c:35:73:ab:6f:a4:33:ab:e7:a4:4d:97:02:fa:ea:a0:
a7:1e:06:32:73:4f:5c:d8:aa:9b:22:84:6e:1a:a7:ff:84:0f:
07:cc:10:14:ab:90:5b:16:f9:b0:43:d4:ed:af:1b:4e:c2:42:
76:51:b8:63:67:47:b8:85:9a:55:e0:74:f6:73:6b:de:6f:cb:
a6:7e:de:14:bf:ba:f6:71:b9:e8:85:59:55:a4:da:d9:7e:35:
81:0b:c4:59:05:b1:99:f7:40:5b:b2:ce:49:23:ec:6d:e9:cc:
2e:5b:14:b9:6c:b9:62:0c:e7:6b:83:a1:3f:f4:3a:0b:f3:1e:
71:d0:9c:23:1d:36:e5:3f:fd:48:91:3a:a9:23:24:e3:2b:62:
bb:70:f6:34:cd:9f:45:49:42:ca:94:1d:87:e2:8d:a4:90:46:
ff:b0:f5:4c:1f:8a:3c:b1:71:2e:17:27:69:7b:fa:6d:d2:c5:
9b:73:5f:a5:db:dd:9e:d8:ae:b0:85:4a:45:e2:d0:19:89:1e:
62:c5:64:49:61:24:82:f2:14:a5:7d:df:79:2e:34:e3:5d:89:
09:b6:21:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:17 2025 by rpki-client