Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/moPS659fWUJxB14Nldd-JTug4ks.roa
File: moPS659fWUJxB14Nldd-JTug4ks.roa (raw, json)
Hash identifier: PXB6BCoIRfIaagYLnK+6W2D8Qyj/zD7h0+2cL4Wf8Xo=
Subject key identifier: 9A:83:D2:EB:9F:5F:59:42:71:07:5E:0D:95:D7:7E:25:3B:A0:E2:4B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0192E6A36895EB4689B5FCFA44A337FDD80F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/moPS659fWUJxB14Nldd-JTug4ks.roa
Signing time: Fri 01 Nov 2024 07:32:01 +0000
ROA not before: Fri 01 Nov 2024 07:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
2a13:fc00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 09 Dec 2024 16:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e6:a3:68:95:eb:46:89:b5:fc:fa:44:a3:37:fd:d8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 1 07:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a83d2eb9f5f594271075e0d95d77e253ba0e24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:79:0e:2b:51:28:d3:19:cc:e8:f4:b8:92:
c7:d1:d1:68:90:d5:c6:40:e5:80:78:e5:d9:26:dc:
28:43:ba:70:0b:cd:ee:fb:ea:7f:f1:ba:d0:76:fc:
b1:ce:7a:ea:8f:cd:f2:b1:95:3f:10:66:a7:72:c0:
5d:37:58:65:80:5d:5c:13:66:78:76:e8:80:97:55:
a9:a6:bd:69:99:a5:f4:83:d7:17:da:b2:16:e0:ce:
44:16:bf:38:cb:7b:4f:59:f7:e9:ec:9f:c2:ff:f6:
39:09:cc:65:75:7b:e3:86:d3:c1:9c:de:d4:cf:d0:
6d:2c:2c:a0:9d:29:1b:9a:73:6e:e2:a0:10:9c:09:
ef:67:a9:17:74:9d:9b:09:77:2d:9d:61:69:0b:2a:
a3:2e:6f:32:06:70:6d:70:6f:9a:4c:f7:8e:39:90:
cd:fa:52:e7:99:d5:4b:97:2a:28:91:8d:ff:bf:65:
f2:61:a1:fe:10:f2:87:76:95:ca:e2:27:e3:1b:e3:
0e:ba:19:f0:f2:60:79:87:2c:6d:7a:fb:87:8d:e0:
94:26:42:84:e6:b4:81:ee:bd:f9:c1:aa:70:93:52:
49:2c:d4:1c:7e:42:82:af:d3:9b:93:f3:5d:41:e3:
8a:d7:3f:4b:7f:c0:7d:a9:12:a0:a2:90:39:a4:83:
e3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:83:D2:EB:9F:5F:59:42:71:07:5E:0D:95:D7:7E:25:3B:A0:E2:4B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/moPS659fWUJxB14Nldd-JTug4ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
93.190.246.0/23
IPv6:
2a13:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
0c:42:ce:42:cb:92:a6:64:53:fd:ed:5a:a5:0b:c9:33:10:de:
59:2a:24:f1:1f:c1:5f:65:9d:df:72:0e:32:5e:bb:fe:af:27:
b1:d0:1d:82:62:a4:56:a6:99:48:51:62:fa:2c:fc:17:60:04:
5c:97:f9:4b:c8:d2:fc:c5:99:64:1c:39:ba:04:99:2d:8f:6b:
49:25:48:1b:3e:bc:bc:df:96:68:48:65:75:d0:1c:fa:3a:ad:
28:cc:af:b4:c6:38:91:60:1f:ab:0f:cc:d4:2e:73:1d:1b:2a:
3d:f1:b4:38:34:48:bc:83:8d:eb:cd:2c:eb:f2:64:dc:02:99:
f4:b4:ff:87:31:7d:e6:34:65:7a:08:d3:b8:ea:b2:a3:92:45:
03:26:cb:42:04:6b:0f:34:8e:19:21:32:dd:3a:28:a6:8f:98:
97:44:11:64:ee:b7:f1:14:ba:56:b0:d6:3f:a5:f8:db:a4:e8:
6c:47:be:a5:0a:bd:3f:a8:88:07:e2:16:4d:17:3c:dc:ca:41:
5d:3f:f8:7e:55:1b:a1:63:53:b0:49:47:44:fd:6a:cc:12:a1:
60:7b:08:65:b5:ee:6f:dd:e0:f7:2a:98:d5:dc:91:74:33:71:
ed:34:94:b4:e8:8e:c6:db:21:9c:df:d1:05:ee:ad:01:b9:0e:
33:82:70:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:14 2025 by rpki-client