Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/rI3i95FwH0BwpPPJg9vCpi__ISI.roa
File: rI3i95FwH0BwpPPJg9vCpi__ISI.roa (raw, json)
Hash identifier: muXa+KtEhd3/C91bck05UMAGL73BWC/FMcq7/kYOdjs=
Subject key identifier: AC:8D:E2:F7:91:70:1F:40:70:A4:F3:C9:83:DB:C2:A6:2F:FF:21:22
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 018CC6B88F96548BE39D1BD2E800C87D86F2
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/rI3i95FwH0BwpPPJg9vCpi__ISI.roa
Signing time: Mon 01 Jan 2024 20:30:33 +0000
ROA not before: Mon 01 Jan 2024 20:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141384
IP address blocks: 45.129.227.0/24 maxlen: 28
Validation: Failed, certificate revoked on Mon 08 Jan 2024 15:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:8f:96:54:8b:e3:9d:1b:d2:e8:00:c8:7d:86:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Jan 1 20:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac8de2f791701f4070a4f3c983dbc2a62fff2122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:d7:3c:2b:11:49:0c:2c:0f:ae:8f:5a:05:
4e:da:e7:d8:54:46:10:88:a7:98:05:84:14:39:26:
2e:71:6f:b8:53:44:b2:24:43:45:e6:cf:cb:94:06:
73:85:3e:b6:37:8c:3e:3b:af:0b:02:cf:a1:17:6f:
cd:95:f7:d7:53:e7:9a:7d:40:01:24:a9:e5:0f:9f:
2c:04:a3:0b:0c:0f:58:f4:44:ad:77:ce:7c:5d:d8:
65:e4:de:68:06:cf:ae:27:d1:39:34:40:66:b4:36:
15:3e:5c:3e:d0:21:8a:3c:91:83:e3:48:92:a8:54:
1c:d1:85:58:ff:01:2b:a8:ce:82:75:37:ce:27:a7:
d0:fb:f7:5f:08:1e:0f:b0:30:21:e6:ff:f0:0e:db:
02:35:fa:2f:f1:1d:08:26:40:cc:db:3a:2e:f3:5a:
88:4b:c7:00:59:85:d6:03:80:67:64:0e:da:6a:22:
7a:22:98:34:9f:f6:4e:53:51:fe:f3:29:4a:1a:43:
12:00:7b:a4:52:bc:61:94:92:ba:77:d7:1b:3d:4d:
25:e0:90:9c:8c:d2:09:b6:2f:74:de:53:99:b1:4e:
ad:2f:02:42:81:57:c4:62:41:8d:f8:fa:d0:a6:b9:
0d:b7:85:08:79:06:4d:38:52:56:37:7d:ae:75:75:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8D:E2:F7:91:70:1F:40:70:A4:F3:C9:83:DB:C2:A6:2F:FF:21:22
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/rI3i95FwH0BwpPPJg9vCpi__ISI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.227.0/24
Signature Algorithm: sha256WithRSAEncryption
26:88:8c:2c:78:7f:6c:d5:56:ec:ef:44:35:61:34:32:15:38:
86:13:52:07:f9:d5:21:61:43:c1:3f:2f:e1:6b:e0:6b:20:36:
ab:d8:cd:a1:71:cc:68:e1:85:23:fe:06:4c:b3:97:79:9c:00:
cc:b1:cd:ee:7c:18:81:dd:ec:f2:86:71:4f:1d:72:03:e6:0b:
3d:4a:71:09:5e:4a:5c:c9:33:e1:1e:1a:86:c7:58:a7:66:85:
31:1f:92:13:d6:ba:dc:f2:05:51:c0:25:f0:68:e3:42:fc:a2:
e5:0d:d8:e9:15:58:9d:78:4f:99:b5:cf:40:c6:3a:89:1a:16:
77:0e:41:03:27:0c:d2:54:5f:44:39:89:e3:60:e9:5b:12:90:
35:a0:f8:7e:13:27:4f:dd:9d:90:d8:bb:7a:c8:d9:c3:04:16:
f9:e4:a4:98:91:e6:7e:00:ae:1d:55:3a:25:a6:c6:2f:2d:ff:
a6:ca:4d:2e:16:10:3f:8c:31:53:91:c3:9b:1e:17:2a:1c:da:
0f:ed:ae:e3:de:c6:66:58:4a:8a:fb:2c:c2:47:fe:11:90:5e:
f1:72:f3:d5:d8:7d:9d:f9:a4:45:06:92:23:bb:98:4b:a6:b3:
0e:37:1b:83:d6:e9:4f:dd:10:5c:e9:d3:2f:66:a5:5a:e0:55:
be:bf:0f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:01:09 2025 by rpki-client