Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/k7VKvFtx8zsfxGgQNKe390OdtwE.roa
File: k7VKvFtx8zsfxGgQNKe390OdtwE.roa (raw, json)
Hash identifier: 4khhIDSuGdPn4RI71wSAHxQW8UImr/617uLqNws73Mw=
Subject key identifier: 93:B5:4A:BC:5B:71:F3:3B:1F:C4:68:10:34:A7:B7:F7:43:9D:B7:01
Certificate issuer: /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Certificate serial: 018CC3B73717C23978FF28FCBB65F5898B8F
Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/k7VKvFtx8zsfxGgQNKe390OdtwE.roa
Signing time: Mon 01 Jan 2024 06:30:13 +0000
ROA not before: Mon 01 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.91.61.0/24 maxlen: 24
45.91.63.0/24 maxlen: 24
45.91.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jan 2024 15:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:37:17:c2:39:78:ff:28:fc:bb:65:f5:89:8b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Validity
Not Before: Jan 1 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93b54abc5b71f33b1fc4681034a7b7f7439db701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:84:7a:3d:c8:e8:43:ce:c8:d9:d5:01:a2:
4c:7f:7e:9f:fc:4a:02:04:39:c4:e9:46:80:b8:d2:
52:4c:44:54:50:17:0d:cf:04:76:ca:8e:87:a0:65:
ac:e5:bb:09:95:6c:ac:a0:8a:70:ab:ee:7e:4e:54:
55:c4:58:26:47:cb:4b:59:a6:55:f6:76:33:97:55:
05:94:f9:66:63:46:ee:b1:aa:f6:40:f9:85:b3:29:
ba:c2:d2:fd:70:32:3f:63:22:ae:26:66:62:e9:47:
f6:fb:14:25:9f:5e:f8:bb:67:d7:7b:ea:94:3c:d4:
fc:24:dc:81:79:0c:52:3e:5e:b5:88:90:2a:e6:21:
40:2f:98:0d:fb:1f:79:0e:b0:68:a7:11:0f:eb:e9:
c0:d1:4a:d8:9b:66:14:ba:30:6b:6a:b5:59:20:3a:
ec:9b:ef:65:03:db:10:7f:a5:6a:24:06:67:d3:dc:
7c:d9:6b:96:64:f4:1e:a6:ec:59:38:55:5e:f0:7d:
e0:70:9e:17:8d:4c:f0:8a:73:68:6f:65:aa:87:5e:
e7:19:0b:ca:8d:23:c4:82:52:38:4c:6d:6e:e3:02:
82:b0:2b:86:43:66:5d:e6:f1:d6:22:21:30:49:cf:
53:bf:9c:73:55:f4:67:e0:94:98:87:08:c0:f2:c7:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B5:4A:BC:5B:71:F3:3B:1F:C4:68:10:34:A7:B7:F7:43:9D:B7:01
X509v3 Authority Key Identifier:
keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/k7VKvFtx8zsfxGgQNKe390OdtwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.61.0-45.91.63.255
Signature Algorithm: sha256WithRSAEncryption
6a:12:13:7f:00:e6:2a:35:e9:d3:83:90:b3:0b:59:b4:02:48:
7a:d9:a4:50:2d:c1:3a:0b:da:ff:05:43:bb:5c:a9:29:df:55:
40:0f:14:39:df:52:92:6b:ec:ee:3c:fe:2e:dd:04:8e:94:43:
02:ce:8c:e3:61:a7:a8:76:cd:eb:3d:8f:9a:7f:00:71:94:7a:
2c:4b:90:ba:08:16:c9:3d:6b:a4:61:27:a6:95:1e:ff:22:42:
f3:87:84:18:bf:68:38:16:d5:3f:ca:3b:0b:62:2a:1c:8c:00:
df:fb:59:45:ab:0b:c3:08:08:1f:40:44:b2:54:fc:77:80:a9:
41:16:ec:6f:43:c4:a6:8b:04:7f:63:89:ca:24:dd:c9:1b:72:
bb:09:58:13:13:6f:7d:98:42:6f:20:90:35:3d:2c:23:29:1b:
4a:eb:67:31:36:2b:d6:c0:bd:21:a5:a3:d3:ad:d3:9a:56:7b:
38:af:85:b7:48:8c:c1:53:d2:14:05:15:46:83:d5:ed:88:f3:
32:c8:48:5c:1a:e6:af:51:02:ab:5a:ae:94:5e:df:f2:9a:4e:
23:ba:b3:b9:24:2c:19:ec:0c:0f:54:8c:03:62:c0:99:6d:98:
9c:b0:1a:7c:b5:ab:46:c0:7b:97:8f:68:cd:5c:dc:d9:07:f4:
22:45:d8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:24 2025 by rpki-client