Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TthldoAca6ErIda2qoZwF3yH_pU.roa
File: TthldoAca6ErIda2qoZwF3yH_pU.roa (raw, json)
Hash identifier: P7SSYp1Eai5dlP/VnQ6rCvCnQcAfqq0A6HT7lXPzoKI=
Subject key identifier: 4E:D8:65:76:80:1C:6B:A1:2B:21:D6:B6:AA:86:70:17:7C:87:FE:95
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01905D71D1D91A2B57F7AD7AABC76C08C66A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TthldoAca6ErIda2qoZwF3yH_pU.roa
Signing time: Fri 28 Jun 2024 06:04:18 +0000
ROA not before: Fri 28 Jun 2024 06:04:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397373
IP address blocks: 45.9.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 09:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5d:71:d1:d9:1a:2b:57:f7:ad:7a:ab:c7:6c:08:c6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 28 06:04:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ed86576801c6ba12b21d6b6aa8670177c87fe95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:4b:35:d1:e2:8f:b3:72:bb:f5:7f:09:b6:
82:a7:21:ef:b8:28:8e:eb:66:26:aa:66:90:70:a6:
f9:57:bd:ea:67:80:5c:d9:9e:f1:8d:30:65:25:83:
24:d1:dd:0a:88:82:eb:b7:4f:1e:41:fc:de:6a:4b:
85:94:24:d7:c6:1b:c3:d7:4a:c5:89:f6:3f:44:50:
e2:da:9b:8a:74:a0:68:8d:16:fa:d4:d6:3e:44:7c:
cc:24:aa:81:63:27:1e:51:7d:2f:fa:48:4e:ed:8c:
2d:87:65:36:59:99:fd:2e:0f:b9:c2:c2:26:5a:e0:
69:83:d8:52:33:13:40:23:88:cc:1f:94:dc:1c:6f:
83:8a:0f:22:44:1b:ef:59:80:b2:9a:19:ea:20:6b:
db:65:74:0e:4e:4c:70:e4:fb:89:9e:3c:77:76:a4:
aa:9e:15:b8:6e:49:46:09:f8:b7:2f:d9:99:d3:a1:
13:28:69:d8:0f:0d:17:e5:aa:ca:bb:b6:80:80:17:
b7:67:de:9d:a5:93:e4:af:6e:5f:dc:a2:35:91:3d:
6d:ba:d4:cb:bb:0e:73:33:b7:0e:75:6e:2f:91:96:
8f:fc:93:35:63:c5:5f:08:5a:2f:df:d3:b1:62:61:
1a:a9:14:f6:5c:9e:c3:6d:86:9b:03:51:7f:5a:a6:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D8:65:76:80:1C:6B:A1:2B:21:D6:B6:AA:86:70:17:7C:87:FE:95
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TthldoAca6ErIda2qoZwF3yH_pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.120.0/24
Signature Algorithm: sha256WithRSAEncryption
89:9a:62:a4:1f:73:32:56:14:ba:ce:91:52:95:df:d6:57:b3:
eb:8f:12:82:26:41:0e:ec:83:29:2f:f8:7b:fd:2d:b6:7f:22:
5d:3c:43:4c:91:fc:ff:fd:cb:05:0a:87:9c:8b:7d:73:c6:52:
72:fc:06:51:be:aa:3f:21:31:03:63:2d:21:fa:89:3c:88:5b:
50:e5:19:07:b9:72:78:e9:dc:df:ba:cb:ba:3c:14:09:3c:29:
af:f4:03:06:0e:dd:1c:05:f8:15:46:de:18:22:52:77:72:31:
ea:0c:d3:1d:5a:71:65:af:4c:26:75:19:3c:d0:6b:5c:b9:c8:
5d:02:61:ac:f8:e0:2a:0d:7d:3a:93:61:67:cf:20:3b:23:3e:
d6:05:9a:bb:b0:d5:33:9f:5c:95:0f:ef:4b:e0:e1:07:8d:57:
32:35:85:d3:cd:72:b9:38:14:6a:21:9d:f8:a6:9e:35:91:6f:
88:cb:8b:d7:53:de:17:0b:49:b1:57:c0:01:dd:85:87:f8:24:
f7:ac:a6:34:92:65:80:c3:c0:99:76:5c:e5:27:91:7d:dd:1f:
47:bb:e0:fc:19:03:27:92:a7:5e:f1:1f:21:d5:1c:61:45:ac:
9e:f0:71:af:a3:e3:d5:6a:c1:3d:7c:6b:2d:43:e6:bb:4a:aa:
e2:11:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:15 2025 by rpki-client