Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/gJlqBbZO9ONe9lmNewwv8tJARO4.roa
File: gJlqBbZO9ONe9lmNewwv8tJARO4.roa (raw, json)
Hash identifier: wZ42G4Gps1iRKol3qPtjPfbtxJ8Y+TK32Lyq5t3kykE=
Subject key identifier: 80:99:6A:05:B6:4E:F4:E3:5E:F6:59:8D:7B:0C:2F:F2:D2:40:44:EE
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 01929937ED3CF15E3860C2B149E6BD059B96
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/gJlqBbZO9ONe9lmNewwv8tJARO4.roa
Signing time: Thu 17 Oct 2024 06:43:52 +0000
ROA not before: Thu 17 Oct 2024 06:43:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 17 Oct 2024 07:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:37:ed:3c:f1:5e:38:60:c2:b1:49:e6:bd:05:9b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 17 06:43:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80996a05b64ef4e35ef6598d7b0c2ff2d24044ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9b:e1:1c:d6:f1:25:bf:d3:57:3a:dd:4d:69:
7e:e5:5c:0b:ad:eb:48:2a:5f:b4:24:3b:13:f1:d6:
bf:11:56:17:cc:3b:86:60:73:c0:6f:a1:30:a5:02:
51:be:d5:ab:f5:92:5f:48:12:7f:59:23:a4:0b:79:
2b:ae:4f:a2:0a:be:6d:a0:8b:c9:93:af:9e:fb:5f:
7e:f1:fc:d6:ce:89:cf:f7:2f:b9:57:06:45:b0:c9:
6d:03:5b:73:00:1e:1d:7a:cf:cf:ff:04:17:1d:72:
d8:0f:e1:86:b9:46:d2:e2:0b:9c:98:9d:60:56:2e:
20:64:41:2b:0c:a2:29:02:79:a8:b7:d3:02:5f:fb:
30:68:1e:85:05:3d:5e:93:37:8e:8d:ed:bb:02:8c:
3d:c9:ca:0e:0f:6b:8b:40:50:93:45:4f:11:24:8c:
3e:bd:63:45:5d:59:b9:94:4c:82:a0:18:3d:1c:cc:
e7:97:bb:eb:fa:d7:d2:b5:e6:99:79:45:f9:cd:67:
e1:a5:99:a5:c5:5d:79:7d:58:85:eb:d3:98:e2:72:
ff:30:89:b3:c4:84:63:88:00:c4:62:71:e5:c0:d7:
28:14:48:c7:13:90:c1:c5:8c:af:54:3d:33:b9:12:
8d:ec:59:48:f7:e1:2c:05:0f:85:61:aa:c5:8a:0c:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:99:6A:05:B6:4E:F4:E3:5E:F6:59:8D:7B:0C:2F:F2:D2:40:44:EE
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/gJlqBbZO9ONe9lmNewwv8tJARO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd03::/32
Signature Algorithm: sha256WithRSAEncryption
49:05:73:23:f0:cc:46:b9:02:44:67:24:77:49:ef:1e:0b:ba:
c6:22:fd:c5:a1:43:09:b4:0a:fd:2f:9b:67:d5:6f:5f:e9:0c:
1e:50:39:0f:76:5b:2e:c9:2d:e4:c5:fc:6a:c6:7c:d7:7c:70:
d5:0f:6c:f5:24:71:45:5e:30:fa:45:1a:16:5b:71:9b:82:b9:
13:80:79:66:95:bf:6f:e8:81:e2:be:5c:f3:d4:88:84:3f:2b:
2c:a8:e7:91:83:1d:05:ce:bd:f1:f9:96:41:df:54:ea:3f:d4:
15:98:9e:af:c4:09:b2:6b:e4:be:ee:c0:73:eb:c6:d9:17:b6:
b7:0a:8c:d1:51:a0:21:4a:a6:56:6a:fd:87:68:2f:32:3e:04:
ab:27:1b:89:a2:5a:1b:6a:67:7e:80:7a:1c:a2:ad:91:3b:87:
53:6b:24:50:b8:65:70:d5:8d:38:90:fc:95:27:de:8f:35:bc:
6f:47:de:2a:ca:19:86:b1:01:34:77:11:a0:bc:3d:ab:71:2f:
6f:62:52:7b:66:e0:fa:c8:ab:77:53:36:87:0b:7c:8a:8d:02:
18:8a:bd:71:96:19:d4:5a:f6:8f:4d:01:82:67:ae:3e:a0:c2:
f1:21:b2:69:23:01:5e:b3:84:35:3a:03:08:17:31:d6:c9:16:
1f:7d:86:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:02:43 2025 by rpki-client