Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zfjSvLKmqk-IiPDSQlibHTI7-SQ.roa
File: zfjSvLKmqk-IiPDSQlibHTI7-SQ.roa (raw, json)
Hash identifier: 6MuNvICF+H2D4lfyXsCyJIyoXiUa7Gqe0Bfor/km3kw=
Subject key identifier: CD:F8:D2:BC:B2:A6:AA:4F:88:88:F0:D2:42:58:9B:1D:32:3B:F9:24
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193AA595CE118DB12E1AAA019BC8424F77E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zfjSvLKmqk-IiPDSQlibHTI7-SQ.roa
Signing time: Mon 09 Dec 2024 07:36:43 +0000
ROA not before: Mon 09 Dec 2024 07:36:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 131642
IP address blocks: 45.12.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 08:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:59:5c:e1:18:db:12:e1:aa:a0:19:bc:84:24:f7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 9 07:36:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdf8d2bcb2a6aa4f8888f0d242589b1d323bf924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:ab:5c:f0:10:47:40:d2:be:8a:ac:75:58:
56:f4:ef:b3:a3:c0:f8:86:3a:dd:d9:6b:d9:28:6e:
bb:5e:2d:e0:70:8d:e4:c4:11:48:e3:ab:8d:26:39:
49:99:3e:75:4d:f5:89:03:60:f2:e5:53:7e:53:82:
1c:e0:29:dd:52:a3:63:fd:f5:71:ae:8c:21:08:ed:
7c:45:03:e0:fb:21:41:6a:70:c6:4d:87:5f:29:90:
1b:e8:8d:8b:1c:6b:f8:32:02:64:b6:0f:e6:ac:da:
cf:ff:36:84:d8:f6:db:f1:83:80:16:6d:3a:a3:0a:
ed:93:f7:8a:ed:24:58:1c:78:7b:6f:86:72:fb:e5:
9b:95:04:9f:b7:72:9b:9f:6b:a1:93:e2:1a:36:7b:
b5:d3:43:53:ae:5f:e9:5f:0c:7b:9c:66:c1:42:6f:
fd:08:d1:a1:21:a2:33:08:70:0d:4e:3a:d4:9b:2e:
d7:49:df:0d:b4:82:33:d5:c7:e5:d3:c8:c5:62:b1:
77:79:21:50:b3:d0:b5:e9:60:a3:e0:50:94:88:8a:
83:cf:12:e6:90:dd:24:ef:3a:11:11:2a:fe:9f:b2:
c6:a8:ec:80:87:43:c6:09:17:68:fb:fa:ea:26:a7:
7f:ba:58:7a:ab:62:6b:bf:70:45:c1:42:c0:97:7b:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F8:D2:BC:B2:A6:AA:4F:88:88:F0:D2:42:58:9B:1D:32:3B:F9:24
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zfjSvLKmqk-IiPDSQlibHTI7-SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.63.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:3b:8d:5a:c4:e8:bd:a9:8d:9f:28:21:bf:0c:88:18:17:1d:
34:fe:87:83:7f:e7:ec:c0:a5:ca:de:08:07:ce:17:f7:ed:08:
80:39:26:3f:2f:ec:60:e3:fb:dd:a1:47:61:91:b7:ed:ed:28:
cc:a4:a5:3e:99:32:11:c5:5d:5f:ea:0b:32:2c:bb:a2:9f:b5:
74:b4:88:86:f0:92:c4:da:2d:87:d2:0a:7d:82:b5:31:74:0b:
4c:d9:9b:f3:37:e1:db:5d:f6:91:49:16:c8:b6:1b:22:68:36:
08:60:03:a2:a0:0a:bb:e4:3e:9c:2c:66:32:82:e3:4a:39:0f:
87:34:41:0f:76:5c:34:ed:d1:59:fa:66:32:06:6e:43:6e:eb:
d2:1c:34:08:65:99:c5:58:0c:61:35:a8:76:e9:7c:cf:0f:81:
23:b2:04:11:38:67:6f:1c:10:73:7e:49:ff:a0:07:ff:f1:51:
72:9a:95:02:df:22:76:c1:e3:48:db:79:ee:a5:89:99:40:21:
01:03:95:e9:c4:17:62:10:a6:af:2a:93:e0:b2:27:8d:50:a4:
87:12:c3:a9:14:ed:c4:43:ae:6b:4a:c3:2c:17:03:76:f3:fb:
0f:aa:e8:bf:bb:3d:aa:5c:05:d8:bc:c9:fd:c9:6d:6b:02:07:
2c:59:db:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:39:52 2025 by rpki-client