Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/myLxlsE7YF5pqAjnIyhG8mYSkIs.roa
File: myLxlsE7YF5pqAjnIyhG8mYSkIs.roa (raw, json)
Hash identifier: 4F1NTJKqYartadqewBA3NsxKgM5lz+5Esd7cUMC/hRs=
Subject key identifier: 9B:22:F1:96:C1:3B:60:5E:69:A8:08:E7:23:28:46:F2:66:12:90:8B
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019290186955847E2CD55C9EDC19578BB74A
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/myLxlsE7YF5pqAjnIyhG8mYSkIs.roa
Signing time: Tue 15 Oct 2024 12:12:51 +0000
ROA not before: Tue 15 Oct 2024 12:12:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 15 Oct 2024 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:18:69:55:84:7e:2c:d5:5c:9e:dc:19:57:8b:b7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 15 12:12:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b22f196c13b605e69a808e7232846f26612908b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:c0:d0:2e:1b:35:b1:46:0e:67:0a:d7:04:
96:db:b5:6e:4a:6e:f2:9a:84:78:59:00:00:06:55:
70:b0:3f:33:d0:61:d8:d4:10:fd:24:19:b1:2f:dc:
18:c5:df:b0:47:3e:99:5f:0c:f3:bb:8d:93:df:e6:
bf:25:4d:a9:ad:13:54:12:f7:47:1c:43:7f:8b:28:
79:8c:b1:0b:60:16:01:15:bc:b3:90:5b:c8:48:1b:
d6:58:5c:56:c3:05:8e:97:b4:24:cd:5d:5e:21:99:
c8:61:b0:b5:75:70:a3:8d:bf:49:a3:5f:f4:a7:31:
63:a9:9e:f7:21:11:a1:55:af:f3:f9:39:8a:ec:fd:
f5:71:ce:80:43:f2:bf:22:ba:16:5d:52:10:15:99:
03:d4:84:61:0a:39:1d:5b:a3:6c:c6:8c:08:23:26:
f1:3c:06:bc:13:cf:1b:4c:a0:13:70:e4:24:15:fb:
e7:51:02:04:f0:ba:4e:98:62:af:4a:b6:6c:23:3c:
42:6a:81:31:7d:c4:0c:86:18:a0:59:c5:a2:38:c4:
7c:77:a1:30:75:2a:1b:3a:51:60:0a:7e:cd:86:34:
10:75:c9:22:07:9a:10:4e:a2:69:16:b7:db:17:d0:
b3:4b:5d:36:87:3e:ed:6f:5a:6e:0a:b4:22:d0:04:
a7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:22:F1:96:C1:3B:60:5E:69:A8:08:E7:23:28:46:F2:66:12:90:8B
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/myLxlsE7YF5pqAjnIyhG8mYSkIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd03::/32
Signature Algorithm: sha256WithRSAEncryption
2f:19:2c:55:65:8f:44:54:75:01:06:8b:b1:48:49:a0:d1:97:
8b:53:ca:b0:d2:41:59:e3:10:77:37:27:1c:18:a6:91:0f:99:
f9:54:cf:7f:f9:32:15:39:3c:ba:80:b3:9a:1a:1d:92:d7:41:
15:68:d7:f1:02:07:75:c6:d0:7a:8b:55:00:cb:fe:0d:00:3e:
89:db:06:f7:28:2d:0f:24:b6:30:65:af:3b:55:84:82:98:9e:
3b:40:38:ad:d0:c0:ae:05:60:b1:25:f8:b6:b4:4f:51:fc:80:
a3:1c:62:23:8c:21:9d:9f:fd:ae:54:be:19:ed:a6:b0:8d:d0:
92:a3:8d:2c:a2:7b:7c:cc:2d:86:ab:84:9e:ec:13:12:30:f0:
6a:d2:e5:18:8a:b7:47:51:f8:50:4e:f9:81:df:22:9d:ff:8a:
7a:46:17:1d:75:5b:98:2c:5c:6e:7b:8f:87:f9:d7:c6:fd:24:
e8:68:34:d4:ad:b3:6f:ab:94:03:c4:a4:81:6c:65:59:82:5e:
5c:aa:71:72:16:5b:1d:d6:a1:ce:20:c4:32:18:3b:0e:8f:0a:
c5:79:8f:39:44:6e:a4:a9:ac:67:d0:56:68:55:73:22:04:32:
93:a8:64:98:0d:e1:a1:fc:ba:01:54:0d:ba:b1:76:a2:2e:6a:
ea:b1:c1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:56:52 2025 by rpki-client