Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/qw9br5PEtk3HedsJS9QRbVqNS0c.roa
File: qw9br5PEtk3HedsJS9QRbVqNS0c.roa (raw, json)
Hash identifier: UJseU2AQMB9YhqBZZvjdKl5Mim3dx2YeMJD1W/BhtD0=
Subject key identifier: AB:0F:5B:AF:93:C4:B6:4D:C7:79:DB:09:4B:D4:11:6D:5A:8D:4B:47
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019294EC5F882DE177F2737FED4159163BDF
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/qw9br5PEtk3HedsJS9QRbVqNS0c.roa
Signing time: Wed 16 Oct 2024 10:42:51 +0000
ROA not before: Wed 16 Oct 2024 10:42:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Oct 2024 11:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:ec:5f:88:2d:e1:77:f2:73:7f:ed:41:59:16:3b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 16 10:42:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab0f5baf93c4b64dc779db094bd4116d5a8d4b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:ff:71:25:4e:5f:05:82:8f:5f:f9:36:30:
e3:d7:04:9c:3e:42:70:25:0d:a1:2b:ba:31:ea:48:
45:76:b7:2c:b3:4f:1b:62:39:96:9f:f6:04:06:58:
94:93:99:c7:4a:c4:63:1b:b2:45:fb:06:9e:75:0c:
2f:82:4d:dd:41:d2:db:20:94:72:a6:7f:bc:d1:e5:
40:22:71:95:47:55:d8:23:93:06:d7:f2:cd:8a:81:
5a:8d:c2:d1:18:7d:4f:8c:ba:33:0c:87:13:7c:b3:
10:66:b8:74:51:8d:47:f4:96:7e:b7:17:cb:54:35:
4e:e7:cf:5a:93:a2:1e:6f:d8:f9:f7:62:c9:1f:32:
8a:11:d5:0e:2a:8e:48:b8:5a:dd:d4:08:e3:02:96:
0c:0d:2a:aa:5b:c4:70:a7:64:64:ba:24:43:52:02:
d0:f7:4b:ba:c3:2e:7e:34:b9:f4:00:d5:d0:25:a3:
a1:cc:3c:79:e2:6c:08:3a:c1:1f:4f:54:23:82:a1:
98:e9:a8:ce:63:9f:5a:44:31:5a:6c:dd:4c:48:08:
7d:75:f6:8f:22:e3:8f:01:df:9d:e6:40:b1:f6:95:
df:d3:c8:85:94:c0:ab:1b:20:32:03:9f:17:66:29:
9f:1c:3f:7a:ec:7f:0e:c4:32:5c:b0:34:1a:f9:97:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0F:5B:AF:93:C4:B6:4D:C7:79:DB:09:4B:D4:11:6D:5A:8D:4B:47
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/qw9br5PEtk3HedsJS9QRbVqNS0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd03::/32
Signature Algorithm: sha256WithRSAEncryption
23:5e:12:70:28:97:bf:0a:b6:be:e1:54:ce:c7:f5:bf:91:a7:
07:cf:35:f5:c3:45:62:29:f0:83:75:db:a8:bd:1b:ff:6b:c4:
1f:6c:e1:4d:55:b6:0e:43:5d:de:38:63:c8:84:48:ec:f9:18:
cc:dd:5c:0e:a8:4e:40:ef:12:54:0c:0d:6e:98:8d:c8:f6:3e:
da:f9:3c:f0:eb:59:f1:33:47:92:68:9b:21:84:b8:ae:91:5e:
09:58:2a:2a:f2:de:01:1f:5b:65:17:5f:ca:5e:25:91:6f:ae:
56:90:2f:f7:b0:a0:32:d7:b1:7c:62:e9:a1:8a:38:ff:f2:46:
d4:b7:be:06:4d:ae:fd:7e:5b:e2:02:de:a4:7e:03:38:26:07:
fe:50:61:7e:b3:32:c8:45:33:49:ba:dd:d8:6a:32:87:da:31:
c2:35:e1:17:75:09:6d:c7:b3:bd:fe:db:b9:52:0e:c4:a4:85:
e0:dd:91:64:4d:8c:dc:04:f9:3c:31:d1:e1:bd:8a:ea:62:9e:
03:3c:f2:50:6d:1b:28:e9:c8:50:7b:4d:88:82:72:81:6d:65:
66:2c:38:e1:71:e3:22:35:b2:bd:be:9e:9a:37:e3:c3:0b:ae:
a8:2d:89:cf:35:c2:52:c5:7e:ed:4e:db:76:18:9c:5d:e5:48:
24:e5:3e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:41:38 2025 by rpki-client