Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s6EsO82JPAh-lMHk9BTNPN5Or_c.roa
File: s6EsO82JPAh-lMHk9BTNPN5Or_c.roa (raw, json)
Hash identifier: Oa8aVn3MT0qBTZOxhNNB6T5ePtjTui3/Hv8Jox83q48=
Subject key identifier: B3:A1:2C:3B:CD:89:3C:08:7E:94:C1:E4:F4:14:CD:3C:DE:4E:AF:F7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018E6AF3C92C254C03D5D6F898489ED4AADF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s6EsO82JPAh-lMHk9BTNPN5Or_c.roa
Signing time: Sat 23 Mar 2024 10:55:45 +0000
ROA not before: Sat 23 Mar 2024 10:55:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399989
IP address blocks: 45.128.26.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
2a13:18c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Apr 2024 06:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6a:f3:c9:2c:25:4c:03:d5:d6:f8:98:48:9e:d4:aa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 23 10:55:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3a12c3bcd893c087e94c1e4f414cd3cde4eaff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:ba:0c:bd:28:f1:a0:35:9f:8e:a4:0a:c2:
e4:6b:fa:46:24:f1:22:80:cb:ed:1d:33:b7:7d:c7:
d3:60:ac:74:e0:b2:0a:8e:0a:53:ed:a3:1c:44:cd:
de:be:c6:d8:f4:1c:72:81:aa:90:1c:98:d1:e9:3a:
20:95:74:d4:c5:3a:0a:f9:f1:30:ad:c1:c4:1b:fc:
93:25:22:38:04:17:50:5b:c3:e8:d1:42:cd:f8:02:
2b:4e:ae:14:17:9f:f8:4d:d4:31:54:71:51:15:a2:
14:b3:3a:9e:76:1f:01:e2:90:90:5b:3a:9d:0b:2f:
0a:83:0d:37:22:58:32:4a:8d:bc:76:72:fd:87:bc:
2f:63:57:bb:9c:21:f4:a3:0a:68:7a:b8:1f:e2:9a:
00:3c:27:41:2b:43:92:d6:b2:7e:e9:33:50:d5:a8:
20:d9:ad:ae:53:c9:ca:3c:e8:6f:fc:52:b7:23:0a:
6f:e3:2b:01:a5:33:0b:05:bd:08:53:49:32:e1:8c:
1d:a0:dc:b2:36:d1:01:a9:70:b3:05:82:4e:54:a3:
07:81:5d:46:5d:36:b7:5e:aa:57:70:9e:a5:1d:d8:
b9:43:b2:fe:85:05:a9:66:ce:0f:36:49:16:0d:36:
7d:a2:65:b9:d4:d8:73:6f:1b:16:39:14:f7:21:d0:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A1:2C:3B:CD:89:3C:08:7E:94:C1:E4:F4:14:CD:3C:DE:4E:AF:F7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s6EsO82JPAh-lMHk9BTNPN5Or_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
93.190.246.0/23
IPv6:
2a13:18c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
01:94:61:56:7e:3c:90:d6:c8:d4:2e:81:a4:02:21:63:db:4c:
df:7a:f8:30:66:a1:ef:3f:d6:32:c2:ab:07:18:f5:0e:0c:5d:
6f:7f:ca:94:be:15:30:85:51:5c:65:19:0a:cb:fa:d8:4b:cf:
ef:2b:1e:c9:6c:b2:67:18:d4:3e:d3:19:39:e8:32:27:02:15:
21:28:e7:bf:91:17:1e:d0:1f:df:1a:46:1b:0f:2c:f8:6d:7d:
84:5e:35:05:a8:a4:c6:c6:a9:58:a0:bc:a9:33:2f:3e:86:f3:
16:70:2a:54:6e:f2:05:cd:b6:f4:f3:85:88:51:94:76:29:e2:
cd:68:55:35:ab:d1:c0:3b:19:85:7d:37:c0:ec:34:90:73:af:
9f:8a:9c:85:ce:d6:d2:c6:b6:d2:6f:e0:97:8c:21:77:f2:cb:
2e:52:dc:f2:d3:3d:0c:b3:c5:6a:8b:dc:10:46:c8:13:aa:dc:
f9:af:e2:2f:9e:b3:08:fa:f2:0e:a0:15:ba:1d:6d:a0:06:fb:
da:c0:74:69:c7:0d:92:38:bf:91:86:8a:48:39:53:93:a1:3d:
37:6a:8e:51:36:ec:8d:ff:cb:1c:96:91:89:73:c2:87:68:22:
c2:75:40:1a:94:e7:4d:fb:a8:a4:5e:74:9b:cb:61:2d:35:8a:
8a:0c:d0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:00:24 2025 by rpki-client