Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/1-0zG9WayWHJgDOWktR4aowUae-s.roa
File: 1-0zG9WayWHJgDOWktR4aowUae-s.roa (raw, json)
Hash identifier: mBt+tDypkU+IUGbG/8Oz1eQ63VaXgA6qNWNtriCSkPI=
Subject key identifier: FB:4C:C6:F5:66:B2:58:72:60:0C:E5:A4:B5:1E:1A:A3:05:1A:7B:EB
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019296CD068132D084D03EE6B890DAAFFC85
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/1-0zG9WayWHJgDOWktR4aowUae-s.roa
Signing time: Wed 16 Oct 2024 19:27:51 +0000
ROA not before: Wed 16 Oct 2024 19:27:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd00::/29 maxlen: 48
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Oct 2024 20:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:96:cd:06:81:32:d0:84:d0:3e:e6:b8:90:da:af:fc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 16 19:27:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb4cc6f566b25872600ce5a4b51e1aa3051a7beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:ab:d6:79:e5:9f:a8:c1:92:fb:1f:a7:93:
4a:86:77:af:68:58:6c:a5:7a:aa:7b:c5:b6:6e:2e:
bd:3f:1a:5c:ac:70:2d:2f:ec:b4:f4:27:6d:3e:52:
39:dd:3b:73:fc:28:17:62:77:28:d7:ac:81:58:98:
1c:7c:02:9e:92:e4:92:d3:27:91:cc:34:d2:ec:af:
9f:6e:63:a8:67:8b:51:b6:2b:14:72:ca:91:1e:4d:
ff:88:c5:76:b8:77:19:e9:06:9c:a2:4c:8e:f2:cb:
41:77:a2:08:f1:40:aa:74:16:07:41:8f:de:37:0f:
89:54:13:7e:8f:de:23:0d:b1:7c:5d:4c:52:b0:bb:
8c:5c:03:c7:ec:16:d3:4c:34:11:8e:56:d2:1c:72:
49:0d:cd:72:14:2e:17:e0:8d:50:7e:2a:44:e3:a6:
63:18:c7:2c:e9:a5:3c:30:70:ba:53:a9:44:ca:28:
37:25:ad:4f:2b:65:7b:9b:3e:d1:71:53:c9:f4:83:
79:0e:c7:15:87:1b:96:2d:0c:93:0b:b3:56:82:23:
f0:dd:7d:30:1b:86:c5:38:00:b1:09:8a:73:8e:d5:
ba:17:a8:fa:91:72:cc:9b:9f:01:b1:c5:26:c3:bf:
c5:c9:00:53:2a:0f:e3:1a:89:d6:55:15:0f:d4:35:
1b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4C:C6:F5:66:B2:58:72:60:0C:E5:A4:B5:1E:1A:A3:05:1A:7B:EB
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/1-0zG9WayWHJgDOWktR4aowUae-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
2f:bd:ce:a3:7c:38:29:22:56:9c:d1:c1:8a:e2:bc:df:7f:bd:
63:d3:cd:d4:7d:8b:3e:29:13:a6:8b:e0:98:94:4b:33:4a:93:
59:be:52:bd:f9:c6:02:c6:06:cd:1e:83:d0:f1:69:9a:1c:f7:
7d:e9:cc:cd:29:3f:c3:0b:4c:c1:32:c5:6b:f9:08:2a:15:2d:
e3:13:79:c7:4f:9a:a5:91:97:67:b9:46:35:fc:13:dc:c9:b1:
f8:a9:c6:fb:db:43:68:c6:f3:38:00:18:81:63:1d:7a:35:7d:
c9:4f:1a:9b:70:d2:ce:f8:f4:96:60:5f:6a:91:bb:83:40:45:
7d:12:e0:f7:4e:54:a4:e5:9e:ee:74:f6:d4:e9:df:e0:7d:8e:
cc:33:4a:dc:8f:b9:54:0f:7e:ab:9a:c8:10:36:51:bc:93:e6:
00:a6:49:69:96:41:64:c5:18:74:80:7f:49:bf:02:93:bf:26:
d2:12:9d:eb:ee:1d:a1:21:93:dd:95:54:35:02:ea:36:48:64:
27:bb:16:19:a8:c7:4b:8c:d2:bc:52:06:1a:21:c4:f4:08:d1:
59:e6:90:24:4b:0c:f7:77:be:81:d5:7b:60:41:58:b3:af:f4:
cb:47:a5:2c:b4:db:28:34:13:f2:9c:eb:b2:ab:a7:95:6d:71:
97:3e:9b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:56:58 2025 by rpki-client