Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/TGL3pRxfR4ga8Yltb8i9ZSRQKrg.roa
File: TGL3pRxfR4ga8Yltb8i9ZSRQKrg.roa (raw, json)
Hash identifier: VlwjCvABQ9A0HmlcMOiB6mZfXBSi5/fRG8Jov2SH0YI=
Subject key identifier: 4C:62:F7:A5:1C:5F:47:88:1A:F1:89:6D:6F:C8:BD:65:24:50:2A:B8
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 018D511DBD0BC8E2FCEFF6EDF91C5BEA74BB
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/TGL3pRxfR4ga8Yltb8i9ZSRQKrg.roa
Signing time: Sun 28 Jan 2024 17:28:39 +0000
ROA not before: Sun 28 Jan 2024 17:28:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
2a0e:5040::/29 maxlen: 29
2a0f:fd00::/29 maxlen: 32
2a0f:fd00:cafe::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 29 Jan 2024 17:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:51:1d:bd:0b:c8:e2:fc:ef:f6:ed:f9:1c:5b:ea:74:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Jan 28 17:28:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c62f7a51c5f47881af1896d6fc8bd6524502ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:48:88:3c:18:af:bc:fc:28:32:a1:07:0b:
05:92:36:1a:62:d7:02:89:1f:b5:e6:40:fe:7c:fc:
6d:4f:0b:4a:0a:23:a4:32:b6:88:5e:c6:c6:ce:ca:
85:22:2f:47:db:0d:3a:bc:1e:f3:c6:67:bd:42:1e:
ad:74:c7:d0:88:83:04:aa:84:3b:dc:a6:b3:6b:1f:
18:f1:43:0c:ce:9e:11:1c:32:81:07:fb:04:e9:b5:
a6:d4:a9:7f:59:ed:96:76:24:fb:c1:8f:55:e2:31:
36:fd:45:0f:c7:5e:4b:b8:93:08:00:df:90:5f:13:
03:49:82:be:87:05:ee:6b:fc:ad:8d:04:3d:86:54:
31:fe:18:0e:60:75:df:1d:ed:a9:7a:06:72:77:3c:
cc:3e:d4:a9:ce:fb:32:4b:92:78:cc:b6:9b:08:25:
84:9c:e6:6a:0e:41:5d:fe:db:ac:91:d0:ad:62:22:
9b:a3:75:d9:01:2e:8c:85:9d:2c:5a:b3:79:e7:40:
f3:e1:00:38:bd:dc:8b:87:51:dc:0c:1d:10:5e:e8:
f4:cf:9a:d0:e2:cb:dd:b3:1e:fa:99:52:7b:54:50:
69:d7:d6:02:bb:93:b0:36:40:73:9e:77:9b:fe:33:
34:aa:87:eb:e4:af:5b:60:36:d0:fa:94:d7:7c:5f:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:62:F7:A5:1C:5F:47:88:1A:F1:89:6D:6F:C8:BD:65:24:50:2A:B8
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/TGL3pRxfR4ga8Yltb8i9ZSRQKrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
9a:00:b5:c2:a4:92:5f:9e:86:8c:f8:05:29:59:8c:30:f5:15:
71:bc:4e:61:6c:7e:8c:3e:00:7b:e1:65:fe:92:bc:aa:f6:b5:
74:48:aa:a6:32:96:bd:b5:cc:09:86:94:46:95:66:2d:ee:66:
69:36:ac:31:98:b9:34:ee:fa:e1:27:a8:aa:7e:2c:ae:df:6f:
b1:0a:0a:de:80:fd:21:30:c3:3e:9f:70:1f:4e:2a:2e:a5:1b:
59:23:09:4a:47:be:6b:e7:13:2f:64:4c:ef:08:91:f2:27:7a:
7e:dd:d6:aa:24:ff:1d:96:1d:eb:d7:70:42:56:37:43:ef:0e:
c5:4c:f2:f9:8e:0a:e9:99:f4:b9:5f:0e:5f:ea:0c:10:0e:c8:
73:94:23:a8:04:e4:f4:2b:5a:57:01:22:33:6d:66:10:a4:5f:
0a:be:57:7e:77:45:84:97:f5:07:ed:48:cb:81:22:fb:b4:35:
40:1f:44:b5:c4:90:2c:b9:22:9c:be:9f:32:5a:f4:41:34:56:
ab:dc:86:21:ce:8d:f0:3e:f0:d3:36:8e:13:5e:1e:64:22:ba:
df:77:29:bb:7e:33:a9:ab:2c:48:89:88:cf:6e:00:2a:ca:62:
23:29:22:47:37:bd:03:2d:ca:55:8c:0b:6b:8e:ef:ba:66:6b:
e5:66:0d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:58:57 2025 by rpki-client