Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wu6d2sCygSavD5ipJ6Lzq8NRULo.roa
File: wu6d2sCygSavD5ipJ6Lzq8NRULo.roa (raw, json)
Hash identifier: hL1vyqZQJJ9PstviVJOydpw4aQLRRmifzk/YmuV4P1I=
Subject key identifier: C2:EE:9D:DA:C0:B2:81:26:AF:0F:98:A9:27:A2:F3:AB:C3:51:50:BA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018DEB5D7A17D48BD416C0E2964F64CB8B4D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wu6d2sCygSavD5ipJ6Lzq8NRULo.roa
Signing time: Tue 27 Feb 2024 16:19:48 +0000
ROA not before: Tue 27 Feb 2024 16:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.128.26.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
2a07:f300::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 23 Mar 2024 11:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:5d:7a:17:d4:8b:d4:16:c0:e2:96:4f:64:cb:8b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 27 16:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2ee9ddac0b28126af0f98a927a2f3abc35150ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:fc:b5:d7:af:44:a2:50:09:55:41:ae:ba:
b4:31:f8:0e:1a:4b:f2:05:c3:85:16:b2:e7:70:64:
a2:91:8b:2a:a9:0d:62:de:ef:c8:c9:11:2e:5c:0b:
b8:e4:8b:cb:89:c7:db:dd:a3:cf:8d:c3:21:15:06:
93:d1:39:22:c8:d6:18:aa:e1:ca:e2:51:2c:82:a9:
ea:8e:99:8f:c7:f7:d7:68:7c:d1:36:f7:4e:28:0f:
80:8d:ae:c2:15:1e:35:26:1b:a2:40:59:6a:ea:b2:
3c:22:0f:0a:e4:6f:bb:c9:28:a3:6b:98:77:7c:ab:
66:cc:7a:e3:02:55:9a:ea:45:0a:fe:a0:13:c1:bd:
23:7f:46:3a:01:d6:be:97:a2:29:26:7d:c8:49:00:
79:03:d4:e7:6e:0d:d2:b5:ad:bb:d3:15:3b:cb:77:
60:3c:c1:a8:42:7b:7d:15:b3:36:32:fd:5f:a0:57:
e7:10:35:99:d7:f4:35:5a:fc:59:81:23:3c:49:36:
d8:eb:4b:4c:a6:11:94:e2:41:e7:2a:de:da:58:33:
e9:76:bd:d5:d6:15:15:38:79:aa:94:87:d3:71:81:
53:dc:5a:63:17:ce:06:74:40:89:20:92:50:07:8a:
96:b2:9c:90:61:82:7d:4f:f8:47:1a:17:19:79:3e:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EE:9D:DA:C0:B2:81:26:AF:0F:98:A9:27:A2:F3:AB:C3:51:50:BA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wu6d2sCygSavD5ipJ6Lzq8NRULo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
93.190.246.0/23
IPv6:
2a07:f300::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:eb:c1:e1:14:f7:a8:b7:96:35:83:3a:c5:25:a8:ef:77:44:
44:ab:03:78:86:07:6f:05:62:c0:97:3a:f3:b6:01:5a:90:23:
b7:f3:af:0f:ce:fb:c2:b7:8d:ce:03:ea:78:b0:14:fa:5b:6a:
ef:32:98:a0:5e:bb:31:3e:cf:f9:25:d5:e9:9f:8a:dd:0b:0e:
fe:ad:3f:3e:08:ff:e2:82:6a:f3:75:33:ad:25:46:ed:ae:70:
4e:09:5a:fa:21:5d:51:cc:41:a5:ef:17:07:6e:d6:40:05:e8:
be:7e:6c:fc:70:4a:e0:3e:59:0b:e0:ef:88:d2:40:93:c8:ae:
c3:ad:15:c6:da:58:76:72:57:16:9f:f7:e8:2c:48:8d:3f:6c:
b3:5c:f6:19:9b:c8:f3:39:7f:af:b1:c3:d2:ff:33:00:c0:38:
c7:de:22:12:04:b2:d4:53:c6:85:a3:9a:e4:cd:20:de:0e:7d:
be:bd:60:2a:b6:cc:83:8d:d0:dd:64:49:1f:d8:32:b1:c2:b6:
ca:74:bd:59:36:aa:d3:92:1d:4b:12:44:43:cc:10:a8:3a:5e:
a9:11:91:ad:71:16:2f:b8:a5:b4:58:71:58:b8:4c:44:a0:0b:
66:ee:c3:dc:c1:db:98:14:70:4d:ca:4d:e9:1e:67:0c:a2:3b:
04:23:dd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:57 2025 by rpki-client