Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/e5kXOC7wYvmDA80sIXHlBPY1pRM.roa
File: e5kXOC7wYvmDA80sIXHlBPY1pRM.roa (raw, json)
Hash identifier: g3rd603b2rDvQcz8qR3ZvbDWul29yHK4jN9sze5AYyQ=
Subject key identifier: 7B:99:17:38:2E:F0:62:F9:83:03:CD:2C:21:71:E5:04:F6:35:A5:13
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 01928F0042D5A95602DEDB2051BEFE0705E6
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/e5kXOC7wYvmDA80sIXHlBPY1pRM.roa
Signing time: Tue 15 Oct 2024 07:06:51 +0000
ROA not before: Tue 15 Oct 2024 07:06:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd00::/29 maxlen: 48
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 15 Oct 2024 09:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:00:42:d5:a9:56:02:de:db:20:51:be:fe:07:05:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 15 07:06:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b9917382ef062f98303cd2c2171e504f635a513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:75:db:f1:91:0d:48:6e:67:88:8e:fe:4c:
da:1c:26:da:e9:89:a9:0b:0b:2e:3e:bb:f5:5d:f6:
ff:dc:d0:e0:93:e5:e7:c7:0e:08:af:15:4f:9d:24:
c8:64:c0:f6:cf:d6:f5:fb:cb:85:88:fc:39:fb:c3:
78:94:9c:e1:7f:dc:90:f8:f3:39:22:fd:46:d7:2d:
a4:f5:40:22:c7:10:06:79:33:93:00:24:8a:0a:fb:
f8:a6:47:0e:f1:fd:05:5f:df:c8:3f:c1:10:56:98:
9b:7b:66:f0:8f:52:35:bf:28:6c:b3:2f:7c:28:b1:
98:a7:89:ac:a8:35:b7:bc:4e:0d:fa:92:91:45:37:
dd:eb:fa:de:58:10:31:78:16:c7:84:45:aa:1e:bb:
2f:33:42:9c:3d:2c:db:bb:49:e1:22:2a:98:2d:8b:
89:5d:ea:8d:ff:52:55:a0:dd:bf:ad:df:08:dc:b3:
e5:d5:26:e8:2d:c6:0d:25:7c:a7:2f:6e:3e:cf:9d:
1d:e6:38:36:a4:6c:b2:6b:12:56:62:13:ea:9b:4d:
d4:39:48:a5:53:d5:49:4d:a9:d3:d6:4c:d0:ad:ac:
a4:0a:f7:36:6d:24:74:96:af:a5:58:99:b9:53:22:
1b:c3:ac:17:0a:e3:81:53:b8:b0:f1:53:1e:10:db:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:99:17:38:2E:F0:62:F9:83:03:CD:2C:21:71:E5:04:F6:35:A5:13
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/e5kXOC7wYvmDA80sIXHlBPY1pRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
0f:88:bc:b0:a0:54:b0:52:9f:4c:8d:35:8d:be:ee:39:4c:27:
8c:b9:69:29:f8:86:9a:73:61:a6:d7:69:3a:bd:ae:ba:dc:a8:
e4:19:ea:97:10:d4:76:ff:b5:3a:e6:49:58:69:ae:7f:93:cb:
e0:ed:b3:66:d2:38:9a:8f:fc:3f:a4:a9:4c:b8:37:d0:0a:ee:
b3:ea:0c:f6:49:63:b4:3f:75:b8:73:0b:6f:bc:ed:3e:68:c0:
cb:76:39:2f:ee:e1:13:5f:7d:03:69:62:d9:c5:6d:58:04:a0:
3d:bf:c3:0c:46:6a:88:68:40:fd:3a:84:1f:6a:58:04:15:7e:
d2:81:50:13:1f:7c:e7:11:42:4d:2a:98:9f:3e:6a:12:69:37:
52:16:7d:dd:d9:03:07:52:22:ed:bc:c9:d0:af:9c:28:dd:ab:
99:c5:25:f2:da:a8:40:5c:2d:53:73:a9:d1:23:66:70:56:6d:
86:8a:b2:92:f7:70:d7:8f:f3:f3:22:ff:9b:4b:63:10:68:06:
27:81:a5:ee:34:44:c8:a8:9a:61:88:ac:63:bf:d1:d4:70:3a:
81:f0:03:ec:ae:3e:03:86:ae:f5:85:17:d6:80:28:0d:35:af:
3e:68:99:de:57:14:6a:92:00:bf:35:cf:ba:62:bf:fd:99:41:
26:75:cb:f0
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZKPAELVqVYC3tsgUb7+BwXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWYxZTNiODA1NTFlOThhMTZmYzJiYmNiN2RkODdjOWEw
ZWZlMjUwHhcNMjQxMDE1MDcwNjUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Yjk5MTczODJlZjA2MmY5ODMwM2NkMmMyMTcxZTUwNGY2MzVhNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3912/GRDUhuZ4iO/kzaHCba6Ymp
CwsuPrv1Xfb/3NDgk+Xnxw4IrxVPnSTIZMD2z9b1+8uFiPw5+8N4lJzhf9yQ+PM5
Iv1G1y2k9UAixxAGeTOTACSKCvv4pkcO8f0FX9/IP8EQVpibe2bwj1I1vyhssy98
KLGYp4msqDW3vE4N+pKRRTfd6/reWBAxeBbHhEWqHrsvM0KcPSzbu0nhIiqYLYuJ
XeqN/1JVoN2/rd8I3LPl1SboLcYNJXynL24+z50d5jg2pGyyaxJWYhPqm03UOUil
U9VJTanT1kzQraykCvc2bSR0lq+lWJm5UyIbw6wXCuOBU7iw8VMeENuWpwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFHuZFzgu8GL5gwPNLCFx5QT2NaUTMB8GA1UdIwQY
MBaAFDWfHjuAVR6YoW/Cu8t92HyaDv4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEt
M2YzYTAyNzQ4YzJhLzEvZTVrWE9DN3dZdm1EQTgwc0lYSGxCUFkxcFJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEtM2YzYTAyNzQ4YzJh
LzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQCLYHgMBQE
AgACMA4DBQMqDlBAAwUDKg/9ADANBgkqhkiG9w0BAQsFAAOCAQEAD4i8sKBUsFKf
TI01jb7uOUwnjLlpKfiGmnNhptdpOr2uutyo5BnqlxDUdv+1OuZJWGmuf5PL4O2z
ZtI4mo/8P6SpTLg30Arus+oM9kljtD91uHMLb7ztPmjAy3Y5L+7hE199A2li2cVt
WASgPb/DDEZqiGhA/TqEH2pYBBV+0oFQEx985xFCTSqYnz5qEmk3UhZ93dkDB1Ii
7bzJ0K+cKN2rmcUl8tqoQFwtU3Op0SNmcFZthoqykvdw14/z8yL/m0tjEGgGJ4Gl
7jREyKiaYYisY7/R1HA6gfAD7K4+A4au9YUX1oAoDTWvPmiZ3lcUapIAvzXPumK/
/ZlBJnXL8A==
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:00:04 2025 by rpki-client