Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/gsZe2SAIVDCJYuU7vORJaqXgJEg.roa
File: gsZe2SAIVDCJYuU7vORJaqXgJEg.roa (raw, json)
Hash identifier: QnlOBqSgLxve5o1W2ymW5Zxupg2IpKO/VAbeqmhDpvI=
Subject key identifier: 82:C6:5E:D9:20:08:54:30:89:62:E5:3B:BC:E4:49:6A:A5:E0:24:48
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019293950C8046DB1382C91C06064515F03B
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/gsZe2SAIVDCJYuU7vORJaqXgJEg.roa
Signing time: Wed 16 Oct 2024 04:27:51 +0000
ROA not before: Wed 16 Oct 2024 04:27:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd00::/29 maxlen: 48
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Oct 2024 05:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:93:95:0c:80:46:db:13:82:c9:1c:06:06:45:15:f0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 16 04:27:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82c65ed9200854308962e53bbce4496aa5e02448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:85:e8:d6:0e:a9:f9:7e:6b:c7:1f:8d:78:d8:
ef:5f:74:4f:05:f1:c7:d4:4a:89:2c:39:ad:ce:db:
de:21:f8:21:96:a3:46:d2:e3:3f:56:d4:8f:9f:eb:
73:6f:a6:25:3d:17:ef:5d:42:96:92:f1:46:01:75:
8a:a5:38:cb:e4:71:84:86:0d:3c:f2:ee:fd:8e:5d:
69:51:36:d6:24:62:64:0c:a2:19:b3:00:ee:b1:1a:
8d:f3:40:27:23:bb:b1:7e:44:83:c1:42:29:09:2b:
3d:46:c6:b0:4b:08:0a:e4:81:78:64:bb:89:e8:c8:
5b:46:b5:bb:39:f0:b1:da:69:d0:41:df:78:65:6e:
7b:94:c3:e0:98:79:db:48:66:0d:e0:65:fd:5a:71:
92:2b:2f:fe:a5:3e:51:4d:2b:bb:61:0d:42:9a:2f:
e3:58:ce:63:a0:40:b9:d7:8a:b2:0e:f8:24:01:69:
0c:dc:39:a3:cc:fb:b4:ca:89:6c:f0:cb:e2:7c:c5:
c5:bd:1e:6d:00:ee:99:28:78:3f:65:2e:d5:42:90:
29:fe:ec:54:42:11:4d:6f:aa:2c:c6:e4:23:ac:d6:
9f:82:51:77:09:6b:9d:b1:7e:42:a5:9d:3e:18:57:
c4:45:6b:15:32:82:d6:82:df:99:75:f4:d4:14:49:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C6:5E:D9:20:08:54:30:89:62:E5:3B:BC:E4:49:6A:A5:E0:24:48
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/gsZe2SAIVDCJYuU7vORJaqXgJEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
ae:72:38:48:80:c0:f8:ff:c0:f7:52:5d:75:2e:b5:d1:a8:4a:
8e:7f:34:ff:8f:c8:b1:94:ea:a6:d0:84:5f:fd:72:54:77:3b:
a9:18:c6:bb:63:8b:a3:d9:4f:3e:79:6a:a0:e7:2c:c5:6d:39:
c9:fb:01:ef:19:1e:8a:7b:7f:ef:91:ee:ca:d3:f3:3e:b0:76:
fc:c7:02:d9:96:70:a3:b4:1a:74:dd:29:5b:a9:56:e1:dd:77:
47:33:74:a9:12:7a:c6:63:43:1c:31:7b:a1:57:2e:22:f8:4b:
2b:4b:13:0d:a0:4c:5d:50:58:db:f3:e8:38:93:d6:e2:44:dd:
11:ae:77:07:1f:6d:36:ea:78:32:27:47:e8:14:96:16:38:74:
1a:e0:ba:10:11:06:85:5a:e5:1d:dd:e0:41:a2:a5:02:61:de:
90:3e:01:ba:77:39:c8:a6:e3:cf:22:24:a7:e3:84:db:16:32:
4e:bc:cd:28:e4:1e:08:a1:f0:dd:5a:8a:e6:25:52:0a:73:41:
1a:54:d3:25:1b:37:c8:13:43:1c:11:3f:16:4f:b8:cf:82:81:
fe:2b:38:ed:6a:59:62:b8:55:d8:3d:8d:56:1c:52:17:ad:bc:
39:0d:af:c6:bd:ba:e4:b5:47:0d:58:eb:5f:60:48:de:41:7f:
6e:20:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:58:54 2025 by rpki-client