Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/FyS3VR9T2lVFQapPeSUyfqN8mqI.roa
File: FyS3VR9T2lVFQapPeSUyfqN8mqI.roa (raw, json)
Hash identifier: 1vu/ceqFFRlvjM+pR3uGHQikziBg+mT6zocoA6SJxOs=
Subject key identifier: 17:24:B7:55:1F:53:DA:55:45:41:AA:4F:79:25:32:7E:A3:7C:9A:A2
Certificate issuer: /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial: 018CC94E41BDE2EF621287B30BBAD7AE9583
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/FyS3VR9T2lVFQapPeSUyfqN8mqI.roa
Signing time: Tue 02 Jan 2024 08:33:18 +0000
ROA not before: Tue 02 Jan 2024 08:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209810
IP address blocks: 45.129.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:41:bd:e2:ef:62:12:87:b3:0b:ba:d7:ae:95:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Validity
Not Before: Jan 2 08:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1724b7551f53da554541aa4f7925327ea37c9aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:4c:b0:24:b9:6f:fd:51:a7:c9:0a:8f:9d:
86:f6:60:e7:e3:7f:68:a1:78:1f:6a:df:13:bc:e2:
c4:af:90:13:4e:3b:b5:53:ab:28:60:4b:42:c2:4c:
9a:c4:dc:93:81:07:a0:7d:46:99:f9:8b:a8:6d:b3:
5e:e3:27:59:fa:17:4c:2c:45:59:93:95:9c:c2:23:
d4:97:4f:a4:87:78:16:6d:f0:76:4a:67:59:a1:70:
2c:d5:e8:bd:62:e9:a3:89:ea:d1:65:00:75:e4:de:
f5:42:00:35:b2:da:99:2c:ec:8f:58:a5:a2:5c:31:
3f:38:75:f8:be:f6:48:20:49:22:01:c5:c6:89:ba:
9c:2f:1c:13:38:36:66:a2:e1:8c:c6:74:94:38:0b:
58:e2:5e:5e:06:0f:3c:a1:31:d2:3e:ef:90:00:dd:
6c:b9:cd:ed:ff:19:68:9b:a6:0c:f7:94:73:fb:4f:
a1:da:53:13:ac:cf:df:31:da:5d:14:bf:71:6e:68:
b6:91:32:68:86:c5:b1:22:a1:1d:67:35:72:83:d9:
10:c7:a0:2a:91:96:2c:ed:67:7f:cf:e8:82:fe:cb:
fa:07:3f:64:20:fd:ca:9a:ca:df:4c:cf:3e:5e:6e:
ea:de:75:46:90:4f:68:46:c2:4e:24:06:79:b6:73:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:24:B7:55:1F:53:DA:55:45:41:AA:4F:79:25:32:7E:A3:7C:9A:A2
X509v3 Authority Key Identifier:
keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/FyS3VR9T2lVFQapPeSUyfqN8mqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.106.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a3:14:43:2d:b3:02:ee:e4:95:ab:36:c8:c7:28:c3:28:8c:
a5:05:d4:6d:78:72:6a:80:60:35:51:ed:2e:8a:34:1c:32:4e:
f1:48:0c:44:20:c4:9c:bb:3f:d9:d9:79:55:94:5e:5a:e4:20:
d2:af:c5:c6:97:ac:09:d0:63:1d:e5:66:cc:fa:34:bb:92:fa:
a2:0d:74:ba:d7:5c:6b:34:0f:0b:95:dc:92:de:b6:31:a4:3c:
de:88:8b:95:50:1c:ad:b9:ba:86:f3:cb:ab:d1:de:3f:2b:b3:
ff:43:79:37:f5:ad:20:fd:76:40:c2:79:7d:26:52:9d:5b:46:
07:25:60:bf:58:f2:e5:b7:15:f8:2b:a7:98:5c:06:d7:d4:f2:
ca:b0:4a:cf:69:5a:82:08:ed:3c:9f:eb:1c:ee:7d:c2:bc:a5:
95:3e:a6:92:11:59:21:0c:e6:3f:37:5e:89:04:8e:ab:15:c7:
7c:96:8a:35:a3:4c:ee:0e:8d:bc:57:52:46:0d:ad:a2:c8:98:
ba:8c:05:fa:f6:a2:59:4a:4d:b4:49:e3:82:1c:b8:2c:1f:06:
39:d1:13:e6:bd:7b:5d:1a:90:1e:9b:4a:cf:83:7e:5e:6e:ba:
1c:92:d1:eb:28:d6:79:b2:fc:36:5a:d2:9c:1c:41:82:00:fa:
3b:b4:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:29 2025 by rpki-client