Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/uu2fP02eA8E5tK4Zr6FrtNRtpwo.roa
File: uu2fP02eA8E5tK4Zr6FrtNRtpwo.roa (raw, json)
Hash identifier: CNFYTCLPv0vZVVT1ja9S1TODl23i9N9abooEAkYUIAg=
Subject key identifier: BA:ED:9F:3F:4D:9E:03:C1:39:B4:AE:19:AF:A1:6B:B4:D4:6D:A7:0A
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 01929C235FAB42C4E7E5444A91FC4AD6C3DF
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/uu2fP02eA8E5tK4Zr6FrtNRtpwo.roa
Signing time: Thu 17 Oct 2024 20:20:16 +0000
ROA not before: Thu 17 Oct 2024 20:20:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd00::/29 maxlen: 48
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 23 Oct 2024 10:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9c:23:5f:ab:42:c4:e7:e5:44:4a:91:fc:4a:d6:c3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 17 20:20:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=baed9f3f4d9e03c139b4ae19afa16bb4d46da70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:7f:1d:43:c5:bf:7a:9d:89:40:fd:74:f4:
42:1a:fd:ab:f9:bb:5c:bc:26:65:70:5b:1d:7d:64:
e6:4a:4f:2d:4a:84:c3:a0:4f:cc:4b:15:cf:7e:18:
72:56:eb:c2:ed:1b:6d:81:9d:41:58:a9:27:85:1d:
f2:22:e8:94:f7:0a:ea:0f:12:ef:e7:5d:be:23:72:
32:4f:39:bc:0f:46:42:b8:2e:ed:d7:0c:29:5c:ae:
c6:ab:3e:ec:76:a7:65:37:0b:24:2f:ec:fd:78:4b:
29:b0:39:1f:5b:7e:fc:d5:4b:7c:14:fc:6e:f0:94:
dc:c3:8c:65:8f:8f:8c:a8:25:02:8a:71:d9:3a:de:
d3:9b:b9:a2:d4:a3:2f:34:84:94:24:a9:45:a6:8c:
b9:94:73:e7:68:07:09:82:d7:ce:a3:da:87:01:b8:
3e:a4:78:fd:9e:a5:c8:a7:91:9c:85:0f:9d:d9:ca:
74:be:dc:e3:4b:75:9a:6c:51:98:bd:0c:32:a2:eb:
c0:9e:62:cf:4f:94:b2:97:44:e5:cc:dd:8a:da:39:
76:1a:c4:4b:11:5a:91:d1:e5:c6:6a:56:6d:ba:b0:
a7:da:3c:71:56:e7:49:39:a2:7e:07:18:84:1f:8f:
c4:0e:80:36:8b:fc:ec:bf:6b:78:9c:92:3d:3f:22:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:ED:9F:3F:4D:9E:03:C1:39:B4:AE:19:AF:A1:6B:B4:D4:6D:A7:0A
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/uu2fP02eA8E5tK4Zr6FrtNRtpwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
a7:f2:1d:59:0d:d5:27:ed:e1:56:bb:b7:ee:d9:4e:44:82:92:
45:07:4b:76:db:9a:df:e3:5f:51:e2:b5:ff:46:2a:ef:f4:b9:
c7:13:9d:e6:4f:46:63:77:a9:da:24:8d:2f:60:91:79:cb:48:
c4:de:38:90:9b:09:56:1d:b9:b2:dd:bb:79:58:5d:0d:e1:e8:
c5:1b:9e:b1:db:71:80:76:7e:9e:25:0a:5c:6d:22:47:98:1f:
1b:43:cb:57:51:77:52:0a:a9:03:bd:2a:f6:4f:f5:e4:a8:52:
8d:f8:0e:67:1c:e3:b0:59:6d:47:8b:85:3d:b2:20:1c:f2:65:
c6:88:e7:db:03:37:2c:c6:e8:7f:e0:ac:11:fc:59:a8:28:7b:
6d:75:d3:e4:37:6e:c8:fe:50:03:17:d2:66:28:78:98:31:bf:
1c:d8:f0:eb:49:44:fc:bc:e1:6b:c9:1d:5f:df:40:8d:67:48:
93:6e:a3:d5:c2:c7:38:ba:6c:78:37:d7:a7:06:78:6e:c6:8f:
95:54:b9:84:95:d5:e8:23:21:9c:4f:97:67:d2:90:19:b5:f3:
6a:6f:00:29:09:5d:9a:74:44:cd:01:00:65:c7:c3:d7:f6:f1:
d8:55:1f:ad:23:4b:78:9f:b2:fd:2d:69:d1:05:46:87:88:07:
a5:65:89:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:57:54 2025 by rpki-client