Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fPIKMW_3xpZOmWV0LyidLk6V6LQ.roa
File: fPIKMW_3xpZOmWV0LyidLk6V6LQ.roa (raw, json)
Hash identifier: 2V2d4uFQCiwOLIDSQrfTulOFfRWEGYFmEdMeXwP5VMo=
Subject key identifier: 7C:F2:0A:31:6F:F7:C6:96:4E:99:65:74:2F:28:9D:2E:4E:95:E8:B4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0192B4E93D96960067FB380D37A078862F92
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fPIKMW_3xpZOmWV0LyidLk6V6LQ.roa
Signing time: Tue 22 Oct 2024 15:47:17 +0000
ROA not before: Tue 22 Oct 2024 15:47:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.128.26.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
2a13:fc00::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 01 Nov 2024 07:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:e9:3d:96:96:00:67:fb:38:0d:37:a0:78:86:2f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 22 15:47:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cf20a316ff7c6964e9965742f289d2e4e95e8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:04:ee:22:eb:d1:f0:49:aa:16:1e:95:3c:
ef:8b:3d:7e:05:19:77:0d:ec:0f:71:bf:38:91:99:
b6:01:b6:a3:4b:48:0f:70:a0:5c:b7:f2:9b:77:9c:
e4:99:5c:52:03:eb:4a:66:2a:e6:b9:7f:76:9b:bc:
cd:7c:e6:08:fa:15:17:a5:ff:62:e6:5a:68:1c:28:
a2:da:28:cc:13:c9:f6:e1:9c:b4:a5:26:0a:2b:01:
f6:32:1b:62:3c:83:2d:60:ce:4a:1b:01:9c:d4:d3:
0d:81:c4:44:da:03:07:57:d0:61:be:82:e2:41:c6:
86:7e:ed:cf:ee:d9:46:c1:27:bd:b7:7f:10:34:28:
46:c9:22:9b:9c:f3:5f:82:0e:98:39:c3:1e:1c:11:
f6:c3:27:ae:ea:4a:fb:15:e7:b2:5a:fc:cd:2d:7f:
3e:91:df:ad:a7:a6:6d:e6:49:16:f3:81:47:46:0d:
71:b0:42:96:10:1a:10:7c:fe:e5:0d:89:62:09:ac:
8a:b8:46:95:3a:bd:23:3b:bc:e6:8e:72:b7:c5:ae:
96:db:fb:ff:bc:d8:3c:56:59:07:0b:4d:23:5d:8d:
0b:c4:1e:d6:ea:2c:5d:94:ac:e8:31:3e:23:0f:ad:
0c:47:93:32:ee:49:a6:f6:ac:0d:0b:ce:cb:ec:57:
e6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F2:0A:31:6F:F7:C6:96:4E:99:65:74:2F:28:9D:2E:4E:95:E8:B4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fPIKMW_3xpZOmWV0LyidLk6V6LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
93.190.246.0/23
IPv6:
2a13:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
21:06:98:e3:66:20:9f:8d:38:96:cb:d3:2d:01:a4:5d:0d:75:
19:87:8f:6b:69:3e:2f:8f:7f:8e:08:47:42:96:1d:78:e7:64:
87:46:21:ff:9b:a5:8d:e7:dd:33:7f:01:6f:b1:ec:62:e9:d2:
37:87:4e:e0:6a:84:d8:19:d7:c1:4d:8b:71:dc:fb:ae:c0:ab:
e8:50:9f:2b:d2:ff:4d:ca:52:f7:fa:4c:24:a8:90:12:54:4e:
22:c5:d9:c9:bc:62:da:d9:32:b0:58:dd:87:2e:4f:bd:1e:31:
b8:be:91:8d:30:80:51:be:6d:fa:dc:ea:89:2a:ef:dc:07:f7:
66:6f:1c:34:82:10:1c:04:5d:6c:7d:c1:64:ea:47:98:1a:10:
7b:5d:96:00:f1:0c:ea:9e:07:3e:3e:65:55:a1:0b:f5:cb:d4:
e6:14:9f:34:25:8a:29:80:68:e1:ed:03:f5:86:1b:32:fa:f0:
f0:fc:21:ef:e5:17:5e:70:f7:1a:1b:72:e1:64:73:2f:4f:bc:
ea:53:c5:ae:75:5a:7e:36:a0:1c:14:d5:b2:89:7b:40:fa:07:
48:84:c7:f3:56:70:db:fa:f7:0f:83:25:9c:45:7d:07:6c:b5:
54:97:a1:31:05:61:ef:df:23:d8:89:e3:21:ee:ed:ea:c9:49:
54:85:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:39 2025 by rpki-client