Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/1-ti1KDll78OfoLSIXYNxD4k-doE.roa
File: 1-ti1KDll78OfoLSIXYNxD4k-doE.roa (raw, json)
Hash identifier: ejM6y1xGgTBNsXRfZZVbcPRhEHex6fP8UU/4wT1TVDo=
Subject key identifier: FA:D8:B5:28:39:65:EF:C3:9F:A0:B4:88:5D:83:71:0F:89:3E:76:81
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 018CC5DBFB0D1600CABF6D7C0438F7A9B870
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/1-ti1KDll78OfoLSIXYNxD4k-doE.roa
Signing time: Mon 01 Jan 2024 16:29:37 +0000
ROA not before: Mon 01 Jan 2024 16:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48072
IP address blocks: 45.90.194.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:fb:0d:16:00:ca:bf:6d:7c:04:38:f7:a9:b8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Jan 1 16:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fad8b5283965efc39fa0b4885d83710f893e7681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fd:2f:f5:1a:9b:c8:6f:92:fd:24:58:c9:de:
e2:38:5b:7f:12:05:0f:19:f0:74:a6:46:f2:0f:26:
4d:1b:37:36:91:7c:e3:12:ce:aa:21:73:e1:74:d0:
c9:91:98:43:f5:99:37:83:f7:a6:a4:4c:55:e1:3a:
c6:5e:1e:c0:ce:72:fe:1c:f5:1d:e6:ca:16:36:1a:
c3:7c:cf:fa:b9:c8:b8:de:d4:05:47:ab:9f:19:fa:
9e:3e:96:73:43:16:ed:f5:f7:28:e6:74:8e:64:b0:
29:24:bc:d3:b0:1d:7b:08:ca:6a:00:f8:65:1a:63:
c2:53:10:70:c5:5b:95:80:de:0a:ee:70:7a:f0:64:
49:38:4a:bd:ee:f8:49:cb:07:c7:74:af:d1:0a:69:
70:b4:93:e1:eb:a9:1c:2d:ee:dd:d0:7e:8a:00:77:
4a:3e:81:8f:f1:52:8e:b9:18:d1:da:5e:f9:3a:4a:
c7:49:91:af:1e:2d:35:f0:47:ec:78:d8:23:48:27:
19:89:4e:78:81:0b:bb:f6:f7:3e:aa:b0:ad:ed:81:
71:76:25:4e:11:0d:04:a7:c5:7c:67:ec:b5:55:28:
4f:1b:26:fe:30:8b:c3:c9:98:99:6e:f3:9a:d4:1a:
aa:93:80:20:0c:22:18:21:93:52:7b:c3:b3:7a:c6:
86:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D8:B5:28:39:65:EF:C3:9F:A0:B4:88:5D:83:71:0F:89:3E:76:81
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/1-ti1KDll78OfoLSIXYNxD4k-doE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.194.0/23
Signature Algorithm: sha256WithRSAEncryption
30:48:01:65:0a:8b:b3:e9:c1:9f:22:51:76:ee:f7:fd:fb:4a:
b1:8f:e6:b2:17:32:7f:7a:fc:03:6d:4d:f4:b7:1a:ad:59:93:
8f:bf:0d:70:4e:e8:7e:ab:cc:f3:10:c9:c3:20:14:0b:ba:41:
eb:99:6b:ff:80:85:a4:ac:3b:a4:e7:47:63:24:63:1c:4e:50:
d3:a1:4e:e8:97:e8:36:7a:fb:f6:e3:f9:69:00:81:e6:51:98:
91:15:90:ee:82:58:3b:5c:5a:2b:1c:fa:ae:d2:8d:5c:f6:3d:
8e:41:ae:99:07:f0:23:fa:7b:78:8b:15:b1:f1:88:de:b9:b5:
20:d7:9a:c7:37:cd:d8:de:af:70:5c:64:12:61:81:0e:32:c0:
93:4f:63:87:1a:d9:42:59:55:85:a4:6c:e6:75:0b:b9:7b:3d:
5d:f7:07:60:74:2a:12:d8:2a:ba:b4:83:85:5b:22:f0:3c:16:
f0:68:9a:c0:4d:0e:57:35:64:53:58:1b:e1:a0:e0:84:ab:e2:
88:d4:ab:be:92:51:76:67:d7:03:ca:dc:c6:a3:98:c8:09:94:
04:e9:b6:79:c2:87:fb:1d:fd:40:86:dc:ca:a0:3f:b4:66:ec:
6b:ca:7b:1d:db:55:d2:4e:22:c3:08:71:0c:c5:64:0b:0e:9e:
6a:ce:24:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:03:56 2025 by rpki-client