Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/vPPfMGiWNgdo6-4_QCg8wX-6LyU.roa
File: vPPfMGiWNgdo6-4_QCg8wX-6LyU.roa (raw, json)
Hash identifier: 4R6ElXFPGzaN5XEPF8RA3BKgvlb12RlqkIQm0BR+16I=
Subject key identifier: BC:F3:DF:30:68:96:36:07:68:EB:EE:3F:40:28:3C:C1:7F:BA:2F:25
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019294630C1FD0BD5EF628E59E5437E63B72
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/vPPfMGiWNgdo6-4_QCg8wX-6LyU.roa
Signing time: Wed 16 Oct 2024 08:12:52 +0000
ROA not before: Wed 16 Oct 2024 08:12:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Oct 2024 09:27:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:63:0c:1f:d0:bd:5e:f6:28:e5:9e:54:37:e6:3b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 16 08:12:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcf3df306896360768ebee3f40283cc17fba2f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:ff:b7:f3:5d:18:00:b7:29:5a:5c:79:72:
b0:d2:ae:59:4c:26:a7:6e:d6:0d:7c:32:d3:6b:a3:
ad:d1:1c:97:47:91:90:b2:50:4d:3a:7c:69:ed:af:
ae:74:e0:a3:78:66:ef:64:3f:1e:c7:19:1e:1e:18:
0d:85:c7:9b:03:59:49:d2:29:12:a7:24:dd:84:ca:
64:9b:7b:2e:7d:4f:ed:24:6d:38:1b:5d:f9:d4:dc:
3c:be:fc:b0:12:00:01:04:3e:0c:90:e5:83:62:e8:
7a:ad:66:37:e0:a6:5e:53:c8:95:36:58:01:44:9a:
08:61:08:84:23:48:07:84:e7:e9:24:8c:48:38:26:
6f:c4:64:24:bb:32:86:ad:5d:15:e4:6f:b6:62:bd:
df:98:89:f2:15:b0:f7:d1:46:bd:51:74:a3:ff:ed:
f3:83:b3:2e:5f:42:48:80:01:e8:0e:22:16:e6:84:
0d:4e:a2:25:03:74:73:10:56:e7:1f:20:83:5c:ab:
ce:ca:5a:2c:9e:ff:e4:70:07:68:2e:c6:ed:99:0e:
f7:20:ee:8e:db:39:9f:dc:63:c1:a1:57:b3:54:7e:
0d:6c:0c:0f:4f:c1:7f:6d:6b:e6:7f:99:f5:73:04:
40:26:83:30:6d:5c:f4:3e:c4:37:a3:12:46:31:29:
dc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F3:DF:30:68:96:36:07:68:EB:EE:3F:40:28:3C:C1:7F:BA:2F:25
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/vPPfMGiWNgdo6-4_QCg8wX-6LyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd03::/32
Signature Algorithm: sha256WithRSAEncryption
0e:1c:d1:04:f6:6b:7e:42:07:ee:a2:6a:e9:62:8f:1c:01:37:
32:ee:01:ae:a3:4e:a8:e9:33:de:99:c3:7c:49:dd:eb:26:bd:
ea:81:95:95:45:bc:7b:f2:16:fc:f7:bb:ba:3e:45:4e:9f:4c:
9c:8e:67:c4:16:b8:63:a4:d1:df:6a:f9:54:ba:9e:3a:f2:06:
0c:84:94:3d:90:46:bb:62:49:e2:d7:87:4d:a7:57:de:03:d6:
9f:93:81:5d:5d:ff:03:32:f8:00:75:d9:a6:c8:28:48:f3:f0:
29:f2:07:25:94:33:4a:21:02:7b:9b:36:03:7a:3d:37:47:71:
3e:24:7c:41:a2:fd:6d:d2:e4:e2:f9:2c:75:c4:51:f3:8b:31:
1d:b1:aa:86:39:8e:4b:b0:15:ca:1b:96:e4:85:4d:31:90:75:
1c:e6:77:3a:bf:84:b7:9f:73:b7:c3:cb:d4:35:b1:42:1e:b1:
ff:e6:25:bb:99:b8:e6:ad:3b:ff:51:73:ac:f0:2b:ba:ec:75:
1d:30:15:7b:5d:e8:5a:33:53:00:cf:3e:2e:3a:30:51:b7:85:
c8:e4:73:51:40:42:f8:14:f8:97:85:94:e4:94:f6:49:3e:fa:
4d:5b:0e:01:31:49:89:11:a7:df:35:59:31:4b:3f:97:7b:a8:
7c:3d:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:00:03 2025 by rpki-client