Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/9X-xF8bKD8hTpyOln_gnN8xBzLQ.roa
File: 9X-xF8bKD8hTpyOln_gnN8xBzLQ.roa (raw, json)
Hash identifier: Ph6dlK3iHFhp6T/AO6B6JoOFEFAMkwPzGMpa+UlqEXQ=
Subject key identifier: F5:7F:B1:17:C6:CA:0F:C8:53:A7:23:A5:9F:F8:27:37:CC:41:CC:B4
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019295FF0836509C250B0A7AAA4B9E0F8575
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/9X-xF8bKD8hTpyOln_gnN8xBzLQ.roa
Signing time: Wed 16 Oct 2024 15:42:51 +0000
ROA not before: Wed 16 Oct 2024 15:42:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Oct 2024 16:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:95:ff:08:36:50:9c:25:0b:0a:7a:aa:4b:9e:0f:85:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 16 15:42:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f57fb117c6ca0fc853a723a59ff82737cc41ccb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:2e:76:f1:8f:ed:3a:cc:f4:d4:5e:a5:98:
70:08:71:0c:78:ab:2a:83:bf:d2:92:28:24:33:3d:
6f:78:a6:66:6e:c3:7f:4a:05:51:5e:e9:12:88:7b:
94:65:14:d8:47:c2:e9:23:d0:7a:98:a9:bf:4f:d3:
5b:df:42:d7:47:6c:09:c5:57:1f:e6:f9:fd:a2:d6:
96:c6:42:33:d2:89:47:c1:5b:30:68:9f:6d:03:af:
ea:b3:a3:56:68:92:88:90:6c:97:63:67:1c:6a:eb:
33:80:59:5c:1d:91:6d:68:04:c6:d9:be:60:6a:88:
70:57:8b:be:ed:0a:c0:24:6f:e0:31:64:c4:91:d8:
7b:9f:7f:4f:6d:1a:41:c6:41:83:e8:a5:73:68:d4:
8a:8e:2c:92:49:e6:f9:83:06:4d:8e:fd:e4:cc:1a:
2a:b2:db:c3:61:9c:33:6e:6a:81:43:ab:f5:ee:5e:
bc:80:d5:22:e4:99:80:d4:5c:36:a8:1c:84:b5:11:
97:57:e3:c5:87:2a:25:56:31:7e:62:78:a1:e2:29:
b8:ec:e0:8e:01:57:ac:02:b1:19:74:aa:51:12:e2:
d8:f4:d8:39:58:2e:61:9c:f6:fa:39:05:1f:da:bf:
ef:6d:35:ba:a1:64:0d:16:75:b0:b6:7a:c0:8c:aa:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7F:B1:17:C6:CA:0F:C8:53:A7:23:A5:9F:F8:27:37:CC:41:CC:B4
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/9X-xF8bKD8hTpyOln_gnN8xBzLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd03::/32
Signature Algorithm: sha256WithRSAEncryption
96:79:20:cc:5e:47:0f:dd:fb:d0:97:eb:01:7c:66:d2:94:29:
60:46:5a:a7:8d:23:f6:ef:8f:f9:79:4b:92:a2:df:96:7a:9f:
ff:ae:ab:79:fe:75:34:48:d0:51:3a:88:36:e9:38:32:fa:8d:
8f:35:e4:8a:fc:43:85:ec:56:72:71:66:d5:d0:26:75:96:08:
fb:33:a6:7c:fb:4c:96:e1:39:73:b1:80:c0:4e:0e:f3:f6:0b:
08:c9:92:72:f1:2a:6b:c5:b9:d6:45:51:53:d9:77:fb:96:fb:
85:8e:b6:91:96:b6:7e:5a:25:1b:e0:79:39:c7:c0:1e:73:ff:
11:92:a1:e0:01:49:dc:cc:f8:5b:f1:35:df:c2:d7:ab:d5:de:
e3:57:91:65:fd:c2:4f:b2:e0:d1:ac:8b:e8:02:27:8c:7b:48:
ff:a2:3f:f5:57:3c:ec:a4:65:b8:04:25:3a:32:03:40:5a:e1:
d4:ed:39:fc:26:12:7e:00:65:58:cb:ad:7e:b3:95:b8:e7:ef:
97:8e:1b:34:01:fe:d5:e4:35:dd:db:ff:bc:f9:7f:c5:28:a2:
12:8f:07:f7:32:22:67:c0:49:39:76:fb:01:74:d7:82:03:c1:
07:e9:f3:e9:e4:0a:84:60:e2:58:50:38:f7:95:25:80:89:9b:
55:7c:12:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:51:22 2025 by rpki-client