Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/o_LWOWNZHyUpyFIz2glavZ8eckk.roa
File: o_LWOWNZHyUpyFIz2glavZ8eckk.roa (raw, json)
Hash identifier: nz7hO/IeuISTjJtAinfjZZVYYIhwCI0rj9pS8T4ksdo=
Subject key identifier: A3:F2:D6:39:63:59:1F:25:29:C8:52:33:DA:09:5A:BD:9F:1E:72:49
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0194321EFD1903082B9FEF3A2A33EF4374C3
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/o_LWOWNZHyUpyFIz2glavZ8eckk.roa
Signing time: Sat 04 Jan 2025 16:21:19 +0000
ROA not before: Sat 04 Jan 2025 16:21:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214192
IP address blocks: 45.11.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Jan 2025 12:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:32:1e:fd:19:03:08:2b:9f:ef:3a:2a:33:ef:43:74:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jan 4 16:21:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3f2d63963591f2529c85233da095abd9f1e7249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4c:ce:58:40:73:56:28:f7:35:90:62:d2:8e:
fd:2e:2a:c1:47:36:4d:fc:94:86:b6:a4:17:21:03:
98:23:5c:d1:89:4a:da:05:17:23:50:f5:72:b8:2c:
1b:1b:48:72:9c:32:94:bd:60:d5:9e:7d:b5:e1:20:
bf:d0:5d:77:4d:ce:e3:83:1e:42:02:cd:81:26:78:
8e:86:4c:fb:cf:21:25:86:f3:71:da:d9:84:73:1e:
d3:f7:1d:a9:3a:50:f5:8d:62:0f:23:21:3f:2b:36:
1e:c5:2d:65:d1:8c:d3:c7:ae:b3:a9:40:75:fd:dd:
a3:40:73:d7:32:9a:49:e3:3b:e1:53:34:fb:41:5f:
2e:bd:80:89:46:ab:42:2e:e7:72:71:a9:5d:de:c6:
e4:63:52:17:49:e4:ad:3e:70:9a:df:7a:04:c0:27:
4b:82:4b:cb:04:52:90:c0:0b:15:ec:a7:82:05:b6:
56:66:57:5c:3f:60:ad:dd:d5:2d:c7:4e:07:12:8b:
4a:0b:93:9d:0f:fc:49:e4:24:03:51:f1:c5:3a:27:
ec:81:57:e5:ab:78:73:0c:e7:83:7f:38:e8:ff:9b:
d8:00:35:51:1d:92:3e:15:dc:cb:0c:5e:bb:95:67:
e6:4f:74:99:fd:a8:43:5e:04:0a:b2:72:2d:e6:33:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F2:D6:39:63:59:1F:25:29:C8:52:33:DA:09:5A:BD:9F:1E:72:49
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/o_LWOWNZHyUpyFIz2glavZ8eckk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.185.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b3:c1:a1:b4:bf:28:96:7b:67:ae:74:17:f1:24:45:57:3d:
b9:ba:f9:1a:7b:a8:26:6e:28:11:93:bb:d9:a2:6d:53:b0:be:
f9:eb:ea:64:cd:e9:8c:30:64:54:17:ef:6f:e1:30:c3:fa:c0:
5e:cf:b2:75:f5:19:0f:60:26:bb:03:ed:1a:69:39:26:1a:37:
e8:ef:01:67:9c:02:73:7b:9c:d7:4c:de:f5:f7:31:6f:40:24:
00:86:b0:1e:45:5e:09:42:31:f3:91:1a:93:8f:65:3d:94:b6:
05:09:e9:34:1e:a4:d7:61:77:a2:cc:e3:97:ed:dc:79:88:10:
15:5c:55:e1:cf:5e:15:80:4c:33:c9:c9:dc:c4:e3:33:45:20:
85:a8:df:6f:57:e3:be:f0:61:4a:9c:e2:52:95:d6:4b:45:88:
34:c9:6e:df:96:ed:8a:c7:cd:fd:28:b3:81:fb:55:a9:3a:15:
9c:38:0d:b0:fa:78:30:7b:81:81:8c:f4:64:a2:76:49:4b:99:
d1:98:e0:ed:8f:d6:9c:aa:ad:bb:e7:04:88:83:34:36:ed:51:
b1:a9:22:4a:3e:8e:77:d0:c3:bc:0e:25:d9:cc:53:66:1c:fe:
b2:81:6c:32:fe:18:34:bc:fa:3e:96:23:7b:79:7e:49:fd:e6:
ab:d5:e0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:40:55 2025 by rpki-client