Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/etsRsqvYL5TYTNofpSxnFUqsO6k.roa
File: etsRsqvYL5TYTNofpSxnFUqsO6k.roa (raw, json)
Hash identifier: wa3tpPOTQbgYWbNXOh3fymhe7I+xpmfhDPQ+SFsR8TQ=
Subject key identifier: 7A:DB:11:B2:AB:D8:2F:94:D8:4C:DA:1F:A5:2C:67:15:4A:AC:3B:A9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01907D1A110497D0EDDDB4342F1E575E4456
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/etsRsqvYL5TYTNofpSxnFUqsO6k.roa
Signing time: Thu 04 Jul 2024 09:36:18 +0000
ROA not before: Thu 04 Jul 2024 09:36:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.128.79.0/24 maxlen: 24
45.141.178.0/24 maxlen: 24
93.190.246.0/24 maxlen: 24
2a0f:7d03::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 26 Aug 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:1a:11:04:97:d0:ed:dd:b4:34:2f:1e:57:5e:44:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 4 09:36:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7adb11b2abd82f94d84cda1fa52c67154aac3ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:6f:e1:c6:91:11:90:d2:ab:d7:1b:56:d5:
c1:45:48:fc:e6:c7:c9:bc:dd:70:c8:d5:38:5b:0e:
5f:53:a1:f9:6b:b8:02:cf:35:38:75:f2:48:23:b9:
a5:6f:2e:4d:a6:9e:ed:0e:72:2d:96:70:b2:59:61:
04:f4:74:64:8f:13:00:c0:36:b9:bf:be:2f:15:77:
9a:03:e5:30:bb:9b:48:f9:6a:d4:12:ef:5a:0e:fb:
3e:69:5f:6d:40:dc:ee:d8:ca:bf:e2:03:49:c0:20:
81:7d:93:83:43:ef:54:e4:00:e5:90:4c:11:94:b5:
f9:4b:9a:06:5f:ce:12:82:07:2b:cb:28:4d:1b:76:
70:09:68:01:4b:4e:11:a1:88:34:ab:31:55:1e:0c:
40:95:ed:7a:ab:a7:6c:82:16:6c:68:b7:b8:dd:21:
00:08:e4:51:39:5f:3c:79:26:46:81:92:7c:a7:08:
bf:a6:79:77:c8:0f:b6:a8:01:fa:da:39:f9:69:9b:
ad:d1:85:31:5d:bc:b4:3f:da:4c:f2:32:cb:80:58:
c5:22:40:6c:5d:71:58:70:3c:60:13:ec:c7:f7:ec:
78:fd:33:39:91:a6:3f:fc:87:79:be:32:de:34:b7:
05:48:fc:20:2b:e4:a1:e3:35:ec:8c:7c:1a:7e:9a:
7d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DB:11:B2:AB:D8:2F:94:D8:4C:DA:1F:A5:2C:67:15:4A:AC:3B:A9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/etsRsqvYL5TYTNofpSxnFUqsO6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.79.0/24
45.141.178.0/24
93.190.246.0/24
IPv6:
2a0f:7d03::/32
Signature Algorithm: sha256WithRSAEncryption
a9:54:14:d0:66:71:c8:a8:1d:aa:bf:4f:12:d7:18:41:48:8c:
ab:4b:b9:2d:95:05:09:fa:cd:4d:83:32:f4:52:f2:bf:15:0a:
36:95:64:b6:f9:a1:6b:e9:32:cb:2c:b2:0d:5e:fa:56:66:1c:
d1:39:c7:37:d3:67:14:06:c1:9e:b6:94:b9:ee:84:10:e0:e7:
3d:a2:41:46:42:1b:8a:b4:1f:cf:41:4f:4d:e9:8f:fb:a7:76:
72:4f:f7:20:aa:70:45:71:e0:70:d8:66:38:ad:3a:18:9e:be:
99:06:76:7e:ed:86:13:34:a4:a7:8e:ab:c2:ba:83:eb:7a:9e:
6a:91:d6:45:90:cb:0c:b1:18:6d:3e:eb:a0:0c:26:5f:c9:54:
22:aa:b1:b9:ee:76:97:32:51:e2:52:19:6c:02:00:9d:80:81:
ec:a3:9e:df:1d:ab:45:ee:d5:f7:22:97:78:41:23:b6:9b:76:
8a:9f:4a:66:18:cc:ca:10:1c:f5:34:4d:b1:7d:b6:47:b2:d0:
e0:e7:d6:8d:f4:a0:11:68:48:34:0d:92:72:03:3c:64:1d:6a:
11:15:55:73:97:ab:17:0f:80:55:c8:2e:ed:c7:74:1e:aa:09:
2d:7d:0a:33:34:7c:de:3c:45:41:4a:ad:81:f3:a6:e9:d8:4f:
62:d3:2c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:17 2025 by rpki-client