Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/FNRcNVKxE7QUv6q7N8fJEY-chUI.roa
File: FNRcNVKxE7QUv6q7N8fJEY-chUI.roa (raw, json)
Hash identifier: UFp8dTWeKIivjKDXTJJwEUMYYeSJCkMrsP9v+Ap1Ais=
Subject key identifier: 14:D4:5C:35:52:B1:13:B4:14:BF:AA:BB:37:C7:C9:11:8F:9C:85:42
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 01928BE2D5B0328F74AE2E9FCFB6BC2FFC3B
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/FNRcNVKxE7QUv6q7N8fJEY-chUI.roa
Signing time: Mon 14 Oct 2024 16:35:51 +0000
ROA not before: Mon 14 Oct 2024 16:35:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd00::/29 maxlen: 29
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 15 Oct 2024 07:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8b:e2:d5:b0:32:8f:74:ae:2e:9f:cf:b6:bc:2f:fc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 14 16:35:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14d45c3552b113b414bfaabb37c7c9118f9c8542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:a7:6b:8c:bf:65:c6:3f:db:c2:66:29:0f:
8d:82:78:72:e3:de:ed:a9:df:f8:59:57:97:bf:19:
e3:66:60:51:21:7f:7f:0a:d6:49:f7:74:8f:d1:01:
18:4e:a2:9e:a4:00:d2:c9:d7:2a:be:d6:08:c5:c0:
a7:81:3e:e9:e5:8b:9e:1d:64:5b:20:dc:db:3d:44:
64:ff:d3:97:2e:f5:29:5e:d3:f6:f7:5b:32:5d:ca:
56:64:66:e6:4b:2e:11:e5:72:4d:28:49:62:6b:47:
1e:e7:d0:5b:19:09:ad:12:b5:23:60:68:7a:ba:7a:
ff:fd:a9:8c:91:23:9d:54:20:d6:00:33:9d:40:1d:
56:17:cb:5a:f4:af:32:eb:1e:0b:69:73:c9:0b:e9:
6f:87:e1:78:59:12:dd:87:50:5c:3b:cc:43:a1:06:
6a:48:0d:81:b3:ee:1c:62:49:10:b6:81:f8:69:40:
51:77:05:c3:91:bd:a0:91:f1:62:2a:bd:f3:94:99:
4a:8f:0d:17:4a:2c:d8:9d:c5:28:1d:4d:e7:1b:a9:
71:f6:e1:30:b1:df:3e:97:5d:59:ad:45:da:c2:de:
98:17:8c:35:7d:d0:3a:87:a1:ae:dc:d4:aa:49:15:
4d:36:d4:a3:ac:22:d1:33:89:94:5d:93:75:d2:2b:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D4:5C:35:52:B1:13:B4:14:BF:AA:BB:37:C7:C9:11:8F:9C:85:42
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/FNRcNVKxE7QUv6q7N8fJEY-chUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
5e:ad:d3:17:d8:bd:9d:5c:01:a8:a4:01:d2:5f:c2:9a:d6:bd:
f6:36:e3:cc:3d:02:36:16:7a:94:ff:ea:0d:2a:1d:cb:d2:8e:
96:c2:d2:c0:85:dc:e6:55:0c:b5:a8:89:2a:59:53:b0:0a:7d:
41:cc:90:e9:e2:51:cc:5a:28:60:ba:04:19:00:74:b3:99:db:
67:a0:07:d1:bb:ef:ab:d3:b1:c7:de:9b:b5:95:73:5b:b8:66:
1c:5a:17:bc:d2:44:72:a6:48:9a:e8:84:e3:75:5c:b7:38:d1:
41:01:88:c1:37:59:07:00:25:e5:eb:91:75:10:9e:ae:02:9b:
df:eb:af:c5:0e:c5:db:ba:93:27:d4:de:46:47:28:3d:79:1a:
11:a7:c8:49:9a:57:84:34:a1:99:8b:d3:1d:0f:03:06:68:9c:
5e:9a:08:27:3b:8b:80:99:aa:e1:52:09:0c:5e:06:aa:c1:86:
e3:93:ff:e8:b8:d2:13:ad:65:fe:15:29:dd:03:e4:4e:99:df:
e9:57:8a:04:57:c1:8e:4a:44:d9:a0:15:a6:84:fa:c0:ca:48:
f7:62:b0:ec:bb:42:c4:07:16:5f:12:f5:59:13:46:fc:13:67:
f9:5e:09:ad:88:44:b0:e1:12:0c:f4:c2:32:4a:8c:cb:0b:cb:
ba:e7:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:53:49 2025 by rpki-client