Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/g8Ccl3WtffzxWm1IGDPc1bd7yQA.roa
File: g8Ccl3WtffzxWm1IGDPc1bd7yQA.roa (raw, json)
Hash identifier: u8lfzvU6hSLVqukC+MO42TzfYGa+ZxRXmiGLmrfamNU=
Subject key identifier: 83:C0:9C:97:75:AD:7D:FC:F1:5A:6D:48:18:33:DC:D5:B7:7B:C9:00
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0191295FB948783A6DFF9660A2906596A6B6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/g8Ccl3WtffzxWm1IGDPc1bd7yQA.roa
Signing time: Tue 06 Aug 2024 20:27:04 +0000
ROA not before: Tue 06 Aug 2024 20:27:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 45.9.117.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
103.114.40.0/24 maxlen: 24
103.114.41.0/24 maxlen: 24
103.114.42.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
185.155.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Aug 2024 10:34:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:29:5f:b9:48:78:3a:6d:ff:96:60:a2:90:65:96:a6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 6 20:27:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83c09c9775ad7dfcf15a6d481833dcd5b77bc900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:ed:04:35:ab:82:5c:0a:9a:39:33:0d:8b:
3d:1e:4d:9c:e5:d8:12:73:44:79:77:2b:dd:0d:85:
c5:a5:04:de:32:e1:a4:64:5e:10:ad:30:ac:73:81:
5a:a1:f7:71:8b:ee:eb:ae:d0:06:47:29:a1:a1:95:
85:02:5b:fa:90:24:33:a8:3b:a6:f6:06:d7:66:d9:
c4:e6:31:e6:fc:b6:2a:36:e7:d2:60:62:b1:80:0c:
1a:68:82:f3:31:ba:cb:94:d9:fb:16:53:ee:c9:9c:
9a:be:b6:9b:f0:e8:47:4c:87:0a:c7:36:e6:63:ac:
6e:e4:db:6c:63:43:61:42:81:26:77:2f:0d:dc:38:
dc:87:d3:41:79:4b:0b:30:54:cf:a2:95:fd:c3:c1:
68:84:da:04:9c:15:34:89:53:1f:ff:70:76:0b:5c:
ab:1c:ce:23:87:54:18:e5:83:c7:ed:f6:52:e0:9b:
2a:f5:de:a4:45:26:60:6b:8a:e1:19:26:d5:16:4e:
fe:a3:a5:c8:47:ae:7f:b4:6d:fb:80:c2:10:a0:ee:
04:25:d6:56:58:fb:3b:b4:97:bc:0d:a6:17:b8:cd:
51:9f:93:90:2e:85:6f:50:14:46:56:33:3c:a8:37:
da:45:17:c5:2b:5f:76:b7:89:a0:70:15:38:fd:ee:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C0:9C:97:75:AD:7D:FC:F1:5A:6D:48:18:33:DC:D5:B7:7B:C9:00
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/g8Ccl3WtffzxWm1IGDPc1bd7yQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.131.215.0/24
103.114.40.0/22
185.155.200.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:ea:38:ad:90:76:13:88:4a:50:c2:f9:24:0f:7d:cf:2a:a2:
56:2a:b5:52:51:23:44:14:6b:7c:67:cd:20:09:56:0a:51:04:
4a:ba:20:4e:67:c7:00:58:32:51:42:5a:f9:e8:80:cd:fc:24:
a2:0d:37:d9:b0:4f:8e:51:2a:e8:fe:6f:cc:80:12:42:9a:ee:
53:87:bf:5d:7d:12:56:77:97:c3:fd:59:de:8e:39:9c:6a:54:
53:6c:80:62:6c:06:61:00:2c:9d:94:b7:83:87:7f:f8:ef:1c:
42:14:84:0c:db:aa:e7:8f:07:24:a0:ee:81:f9:e7:da:64:14:
c6:05:42:44:60:ea:8e:c7:f6:90:91:f7:67:0e:89:fd:c4:23:
97:ab:2d:0f:2a:a9:79:29:6e:eb:21:34:b4:7f:88:3c:af:82:
79:93:ed:5d:3f:93:e3:99:fc:97:47:7c:89:fd:56:9a:5c:04:
ab:08:9b:68:b4:0a:ac:1e:a8:18:43:89:1c:6d:8f:a2:5a:0e:
c1:97:05:f3:dc:2c:e7:4e:78:0b:f8:d8:ff:77:19:c4:39:8c:
29:b7:3c:0a:3a:0c:fd:36:69:a7:98:f3:d4:bb:f5:f9:a8:35:
9f:b2:88:74:2c:a6:45:0e:4b:96:c2:24:63:aa:22:64:a5:ab:
de:14:48:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:55:01 2025 by rpki-client