Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bynLk4b6C5SEngfrocVJFP5FTSo.roa
File: bynLk4b6C5SEngfrocVJFP5FTSo.roa (raw, json)
Hash identifier: cO1rslddVjgNwJEDlsKBTxSJKA6P3fYIwhG7KaLPr7s=
Subject key identifier: 6F:29:CB:93:86:FA:0B:94:84:9E:07:EB:A1:C5:49:14:FE:45:4D:2A
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A50C4A3ED94DDD30C098137670980
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bynLk4b6C5SEngfrocVJFP5FTSo.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209537
IP address blocks: 45.67.18.0/24 maxlen: 32
2a06:82c5::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 04 Jan 2025 06:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:50:c4:a3:ed:94:dd:d3:0c:09:81:37:67:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f29cb9386fa0b94849e07eba1c54914fe454d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:8e:2a:1e:0b:55:0a:93:34:1c:8e:1f:94:
0c:77:76:6e:fb:8c:11:d6:60:75:59:50:94:a4:88:
98:22:fb:c5:51:6c:ef:d9:7d:62:73:2f:7f:76:5b:
f0:f4:37:1a:e2:f6:5c:41:d6:3d:d7:f0:6d:d3:72:
b4:0f:d0:ae:be:c3:bf:62:bd:de:c3:02:b3:d5:2d:
50:48:65:2f:03:0b:f3:8c:69:d5:0c:d4:87:ef:bd:
88:de:ed:2b:bf:71:24:e5:14:cd:9c:64:04:a8:67:
ca:29:91:7b:d9:94:02:e0:f8:55:39:0d:92:b8:70:
de:da:7c:fd:a5:09:e6:ad:13:b5:da:8f:1c:cc:83:
54:86:18:b3:88:5c:3e:3b:f7:4d:9d:fd:f1:73:e7:
33:bd:6b:50:76:f7:2d:4f:a5:33:fa:e2:c3:4d:ef:
a0:de:59:89:ca:07:b2:6b:21:89:14:7a:98:61:94:
56:9e:bd:d8:0d:96:19:c8:47:b2:cf:7e:51:96:12:
53:3e:f2:96:1d:bf:3f:33:4b:da:9b:ae:fd:e1:8c:
ae:22:04:fb:50:cf:a4:a9:59:5c:f2:61:30:e1:87:
c0:0d:12:a1:cc:e8:42:f7:39:43:d5:80:47:6c:da:
d1:2c:99:81:4e:7f:be:cb:f2:a5:8d:e1:88:69:72:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:29:CB:93:86:FA:0B:94:84:9E:07:EB:A1:C5:49:14:FE:45:4D:2A
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bynLk4b6C5SEngfrocVJFP5FTSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.18.0/24
IPv6:
2a06:82c5::/48
Signature Algorithm: sha256WithRSAEncryption
bc:32:e1:30:98:e0:fe:09:30:89:b2:75:d9:e8:a3:f1:58:f8:
85:17:af:e5:11:27:20:4c:f4:2f:d5:a2:c9:1a:57:e3:2b:de:
94:46:f3:d1:c2:6f:b1:eb:07:2e:aa:b5:00:1d:5e:f1:92:44:
78:90:2d:12:8f:55:a0:02:a1:28:8d:d5:46:83:95:15:f4:a6:
c2:07:a8:43:28:4a:92:81:3f:e7:1e:34:b5:84:3e:7a:39:f3:
1b:9a:56:cd:35:02:04:e7:c5:da:22:42:94:16:6e:3b:ab:8c:
36:b2:16:ee:d6:36:c8:ea:af:9f:25:05:9e:6f:b8:49:a2:27:
0d:bd:06:8f:e1:a3:8c:53:00:63:d9:8b:4f:a1:28:e1:41:34:
1d:e9:b4:65:1e:55:31:fe:53:57:30:d1:85:70:80:de:d2:38:
d9:7b:23:a6:fc:cb:dc:99:a6:86:77:f5:6e:53:43:81:74:63:
08:a6:dd:35:ee:bd:ee:16:e2:5e:2c:9e:b3:87:d7:4c:d9:57:
e2:3c:07:c4:2f:a5:0b:84:bc:2a:cd:10:5c:29:6b:46:3f:47:
ab:3e:11:7f:91:f8:99:68:f6:f6:80:82:66:12:f9:ec:ea:97:
d9:2a:d7:d6:e4:54:5a:2b:ae:ca:37:31:e6:cd:94:4c:46:a4:
b7:66:2f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:48:06 2025 by rpki-client