Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/_eMrNpTJZnN33BcHj9vE6XJjpdE.roa
File: _eMrNpTJZnN33BcHj9vE6XJjpdE.roa (raw, json)
Hash identifier: o4ETVxBYGdfK2+htXh4Y7UPvKSxunktXYcJ4FQik6H4=
Subject key identifier: FD:E3:2B:36:94:C9:66:73:77:DC:17:07:8F:DB:C4:E9:72:63:A5:D1
Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial: 0193E36F91B47CF3280D44A17CEE78351B85
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/_eMrNpTJZnN33BcHj9vE6XJjpdE.roa
Signing time: Fri 20 Dec 2024 09:39:19 +0000
ROA not before: Fri 20 Dec 2024 09:39:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208012
IP address blocks: 45.129.120.0/24 maxlen: 24
45.129.121.0/24 maxlen: 24
45.129.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Dec 2024 14:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:6f:91:b4:7c:f3:28:0d:44:a1:7c:ee:78:35:1b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Validity
Not Before: Dec 20 09:39:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fde32b3694c9667377dc17078fdbc4e97263a5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:07:3a:93:26:2f:8a:0a:83:9b:24:c2:63:
a4:2f:24:95:af:65:2e:b4:7e:45:1f:fb:88:09:ae:
89:b9:37:5f:81:ff:f0:ce:84:7c:17:0f:3e:59:98:
d6:63:e8:16:f2:79:31:8e:92:eb:0a:42:4a:eb:cd:
33:25:0b:be:b0:4c:39:8c:05:6f:ed:ee:71:14:68:
00:0d:79:2d:d2:8d:0c:8e:f4:7f:ad:d8:77:af:1e:
fe:be:b3:75:c9:5e:27:5f:25:91:0d:ca:17:3f:4e:
53:21:76:c4:75:a3:2f:3b:b2:ef:d9:ed:0d:98:b7:
f3:15:2a:ca:54:bc:1e:f0:ab:46:39:6a:53:2a:aa:
b1:19:b8:a5:ae:42:53:b7:ee:29:74:da:20:e3:38:
5f:53:f5:60:06:96:a2:0c:37:83:ee:70:60:0e:21:
91:a2:47:30:24:58:13:65:55:22:e9:99:cc:d6:15:
ed:ed:1d:02:bf:b6:2e:0f:b0:5e:53:ee:ca:99:0f:
e3:44:dd:85:a8:a9:6c:7d:4c:8c:69:a0:71:5a:e3:
aa:54:11:c9:00:21:a2:50:10:70:35:73:8e:2f:c3:
11:f7:2f:a3:4e:8a:56:81:f4:cb:7e:4f:d3:15:ca:
15:bb:45:df:6e:ac:43:01:bc:08:f9:34:63:cb:47:
65:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E3:2B:36:94:C9:66:73:77:DC:17:07:8F:DB:C4:E9:72:63:A5:D1
X509v3 Authority Key Identifier:
keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/_eMrNpTJZnN33BcHj9vE6XJjpdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.120.0/23
45.129.123.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b8:ab:27:d2:50:29:d4:08:1b:03:e3:94:18:f1:3a:1b:ee:
7c:5c:1f:6d:8b:c8:d6:03:48:5e:56:eb:3c:40:ab:2e:a9:2b:
6e:69:e4:4d:f5:db:31:39:96:b5:4c:9a:38:e0:e5:1f:cb:4f:
8f:c3:72:0c:22:8d:bc:ac:60:d0:65:4b:16:a8:a4:c0:e4:48:
8c:33:e7:f1:d7:4b:5e:33:ec:bb:19:15:95:46:f4:f7:b0:56:
5c:b3:c5:56:d1:c5:95:db:7c:50:78:15:54:4c:ca:a6:cf:19:
50:22:9c:31:b9:ec:70:1a:1e:c6:bf:19:08:48:e1:95:1a:03:
dd:8f:ca:43:55:05:fe:92:4f:40:91:be:52:08:c0:66:cc:4d:
a2:c6:0f:17:53:31:fa:b7:16:51:db:6c:b9:30:91:f7:b0:79:
a8:bc:32:00:a2:b4:e5:ba:06:87:05:94:b2:d6:61:2a:74:2a:
78:df:1f:59:4d:fe:3a:40:aa:a8:3f:39:94:aa:88:54:b9:dd:
ce:68:ec:38:15:6c:b1:fa:93:2f:1a:31:2a:04:86:b5:d5:7c:
8b:47:08:bb:78:36:75:08:02:ab:52:07:b8:2f:1e:9a:31:f4:
6a:68:0d:3b:39:81:04:7f:2d:38:4c:24:d0:70:1f:55:cd:b8:
6c:81:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:36 2025 by rpki-client