Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/SpwXtxMbUKmk_iqPc5nd-Lz0pNc.roa
File: SpwXtxMbUKmk_iqPc5nd-Lz0pNc.roa (raw, json)
Hash identifier: eVUialGL2bhoFRutpbarLFeAAnGqeok3JIoHhn3SEWc=
Subject key identifier: 4A:9C:17:B7:13:1B:50:A9:A4:FE:2A:8F:73:99:DD:F8:BC:F4:A4:D7
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 019423D71D91E21DE32A4F40D3F8A5E827EC
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/SpwXtxMbUKmk_iqPc5nd-Lz0pNc.roa
Signing time: Wed 01 Jan 2025 21:48:07 +0000
ROA not before: Wed 01 Jan 2025 21:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44213
IP address blocks: 45.149.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Mar 2025 22:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1d:91:e2:1d:e3:2a:4f:40:d3:f8:a5:e8:27:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Jan 1 21:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a9c17b7131b50a9a4fe2a8f7399ddf8bcf4a4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:80:0e:bc:ac:03:f7:73:43:c4:ed:1d:53:
a2:a4:ee:a8:8b:6b:0a:a1:23:af:60:d4:30:1e:ff:
c5:4b:f9:f9:d3:4c:33:82:d8:5d:c1:06:d5:b4:95:
1f:1d:6d:a1:0b:4f:81:55:73:fd:e3:d4:fb:dc:1a:
5c:69:7b:2a:f5:86:18:9b:3b:4a:ac:12:57:b0:88:
24:71:dc:ea:92:b0:2f:d5:ca:56:0e:73:56:69:72:
8d:5a:57:03:c5:87:cf:93:09:dd:f0:2e:74:ab:dd:
ab:0c:ec:65:11:7d:9d:0d:e5:a8:7b:df:49:d3:d4:
ea:b6:69:f1:51:d3:23:2e:df:8f:84:df:1d:48:35:
d4:58:b7:35:a2:27:54:d5:b4:e7:68:bc:d8:22:bf:
0a:a6:db:fe:28:9b:05:56:20:d0:49:e0:80:56:fa:
2d:60:2c:d6:5d:02:36:fd:f4:b1:5c:55:4e:c9:ed:
e9:7a:5b:f3:e1:30:f4:fa:20:5a:f1:a6:05:26:6f:
37:c0:03:26:4f:d6:8b:cd:6e:6d:c3:6a:f4:21:82:
2c:1b:31:7c:06:3b:00:b9:be:72:69:c2:68:07:cb:
99:11:8f:25:e8:14:ae:22:18:82:2e:f5:e9:78:6c:
8a:a4:32:30:90:8a:3b:5f:dc:8d:eb:31:dd:09:aa:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9C:17:B7:13:1B:50:A9:A4:FE:2A:8F:73:99:DD:F8:BC:F4:A4:D7
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/SpwXtxMbUKmk_iqPc5nd-Lz0pNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.62.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f4:77:6c:3b:71:59:bb:8f:aa:da:a1:0b:56:dc:2b:e6:ac:
bc:0c:c2:64:4e:8a:92:32:66:05:bc:c9:f5:99:82:8b:01:71:
77:49:9a:a0:56:44:be:a4:fb:7f:70:0a:ba:9a:6f:f4:ae:5f:
97:7e:99:8e:bf:e4:8c:71:63:7b:7d:bc:8d:da:c7:13:36:70:
2b:6e:83:45:b9:f7:8d:9c:a7:44:26:ee:65:f0:c9:25:d6:05:
1e:6a:43:22:8e:5d:f5:50:5a:a2:59:48:06:45:8a:be:ca:8a:
25:64:15:5c:2a:07:d3:44:7a:69:eb:3b:cc:5d:fe:9e:b1:d4:
bf:63:36:66:93:95:4c:1b:78:ed:06:8b:da:50:03:dc:60:15:
b8:6a:ca:d6:bd:fd:1a:ca:04:ae:a5:eb:b3:fe:55:6d:c1:d6:
cd:4c:06:63:14:8f:99:e1:9e:45:5e:a5:a2:ee:e7:af:55:d4:
60:6f:2f:80:d3:9b:fb:3f:90:54:68:e6:5d:15:66:14:3b:57:
33:37:bc:8f:89:58:37:f7:68:b1:3b:db:d7:69:5a:80:2c:a1:
d2:7e:27:fa:8f:0a:51:2c:bb:08:14:64:2f:d4:78:bb:e6:d2:
e3:00:bf:d4:90:ec:8c:76:15:f7:eb:74:aa:57:19:14:d2:ec:
1b:e0:97:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:06 2025 by rpki-client