Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/Spsb837wcvd3p09WrUGbgN12cHI.roa
File: Spsb837wcvd3p09WrUGbgN12cHI.roa (raw, json)
Hash identifier: 3U1rJUChPj0xETK1o/xhYVd+meTyXwnit99hrSew8c4=
Subject key identifier: 4A:9B:1B:F3:7E:F0:72:F7:77:A7:4F:56:AD:41:9B:80:DD:76:70:72
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019298AE979BA1B62C82AB5B5E4C692F0217
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/Spsb837wcvd3p09WrUGbgN12cHI.roa
Signing time: Thu 17 Oct 2024 04:13:51 +0000
ROA not before: Thu 17 Oct 2024 04:13:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 17 Oct 2024 05:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:98:ae:97:9b:a1:b6:2c:82:ab:5b:5e:4c:69:2f:02:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 17 04:13:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a9b1bf37ef072f777a74f56ad419b80dd767072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:1f:7e:c7:44:27:5b:d2:9b:07:41:13:16:
60:34:66:fc:50:a1:e8:09:2c:13:5d:27:d2:11:15:
f3:80:b5:2f:f7:b8:16:9b:35:cf:d5:a6:7a:5c:ec:
5e:2b:7c:59:24:d0:30:67:a7:5b:19:e9:38:6d:4b:
b3:39:29:c9:a3:b6:b7:73:f7:03:71:5f:e0:63:ee:
55:27:c1:65:3f:b2:89:a6:cf:7a:24:47:06:4a:d7:
a8:9c:e2:0a:f1:22:82:c7:67:c4:14:99:7a:10:ed:
c2:01:8c:60:4f:5c:30:3e:61:48:8c:fb:df:b2:60:
c7:0e:ed:da:f0:09:fd:ae:9c:9d:2d:f1:93:61:f3:
25:71:78:9b:18:72:45:ce:1a:66:9a:d0:73:4e:61:
cb:1d:7c:66:ec:71:e9:4b:2a:67:ba:3c:da:ed:7e:
5d:65:7f:26:70:d0:c0:eb:b6:ee:86:d6:29:2b:ac:
68:40:ed:a3:16:9b:ea:e1:a1:16:43:7b:76:28:34:
0c:9c:41:db:cc:03:2d:52:38:9d:da:99:66:c2:09:
a8:e2:69:8a:66:78:12:ce:2c:d7:a7:5b:aa:e0:d5:
ff:a7:ce:6b:7e:7e:e4:fa:b9:ad:87:24:b2:07:a2:
a7:90:4a:40:63:7e:f5:98:4f:70:14:68:2a:26:55:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9B:1B:F3:7E:F0:72:F7:77:A7:4F:56:AD:41:9B:80:DD:76:70:72
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/Spsb837wcvd3p09WrUGbgN12cHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd03::/32
Signature Algorithm: sha256WithRSAEncryption
07:d5:24:e7:2a:18:15:42:0d:d9:b7:08:54:d5:4e:e6:41:2f:
12:0d:af:62:22:3b:21:03:77:08:24:26:15:1e:e5:b2:92:0d:
65:41:f6:70:92:b6:8b:9e:1e:61:c5:68:46:45:6f:47:74:3f:
72:e1:ec:1d:e8:2c:70:8f:15:35:7b:0d:f0:f1:b1:5d:da:a5:
e3:5a:ea:9c:b9:6b:f0:0d:d6:90:36:75:4f:85:10:b1:26:d7:
8a:4f:ef:2e:de:b1:fd:9b:ce:b1:cf:ba:1d:f1:90:5d:20:f8:
32:18:bb:86:9e:16:d2:22:c0:c1:82:7b:f2:55:13:ec:42:9c:
e1:8f:0d:58:2f:5f:3c:a0:a0:94:8e:0a:f1:d7:73:ad:29:69:
2b:e0:37:0f:e0:a0:08:ee:24:57:05:ac:9d:b3:bf:ca:9b:a6:
47:fe:92:58:00:30:16:f2:06:9e:de:1b:9c:89:bd:78:84:9f:
d1:1f:8e:6d:4e:78:37:71:7c:40:e5:65:36:a5:86:3e:47:52:
40:3b:92:82:45:97:1a:d3:c4:98:8a:ef:d0:8d:6f:7d:62:9a:
9a:2e:b6:a2:6e:3c:23:56:5b:91:20:69:04:57:16:da:3f:11:
31:52:e2:5c:26:a5:5c:f7:18:f1:f3:a5:dc:24:98:87:34:e5:
c9:a4:da:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:51:24 2025 by rpki-client