Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/PX7jnfJ-GQ63ZXhESKa-7dyj3as.roa
File: PX7jnfJ-GQ63ZXhESKa-7dyj3as.roa (raw, json)
Hash identifier: SI+xYnjW5Yzfv/cd1FMz5qgFJlZ0Gx5/fh7uQLlxGZc=
Subject key identifier: 3D:7E:E3:9D:F2:7E:19:0E:B7:65:78:44:48:A6:BE:ED:DC:A3:DD:AB
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0194258F2AEA1F03F07B4139D565D9F2C5E6
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/PX7jnfJ-GQ63ZXhESKa-7dyj3as.roa
Signing time: Thu 02 Jan 2025 05:48:47 +0000
ROA not before: Thu 02 Jan 2025 05:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215340
IP address blocks: 45.131.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 15:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:2a:ea:1f:03:f0:7b:41:39:d5:65:d9:f2:c5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 05:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d7ee39df27e190eb765784448a6beeddca3ddab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:db:5f:13:05:58:c4:07:fd:7a:4a:c5:55:
0b:e1:24:15:1d:c0:fc:50:93:28:0a:17:03:7d:d3:
b5:63:1f:44:b2:a7:8e:55:4b:d4:90:76:e4:87:49:
fe:ec:af:40:63:99:f7:3a:cc:bc:b5:8a:98:4f:bc:
47:b2:40:48:b0:e0:44:67:b4:a8:99:1a:b9:f8:4f:
a0:3f:29:3c:70:84:41:b6:d2:c4:cd:fe:81:e9:4f:
74:c3:36:d2:2a:ac:e9:4a:47:df:e0:3c:9e:80:77:
fa:07:92:fd:0d:25:7e:2e:54:cf:13:55:1d:71:e5:
f1:d9:a3:30:a0:23:8d:98:a3:db:03:22:e1:58:ff:
e0:37:fd:2a:a5:d8:aa:ba:d0:f3:b6:e7:98:6d:e9:
c9:50:38:96:56:3f:f0:08:9e:b2:b1:57:2e:8f:f6:
af:fc:78:b6:8e:7d:c5:df:33:d0:c4:8f:fd:1f:17:
8d:2c:7d:96:88:57:a2:2a:32:f9:3a:0a:20:2e:aa:
a6:8a:60:21:dc:d0:70:ec:f9:d9:7f:3c:ee:24:63:
e1:9f:7e:b5:c0:12:44:c4:0a:5a:ce:fc:b1:26:e0:
6a:b2:d1:a1:13:dd:11:7c:62:12:e9:75:9f:cb:87:
84:3b:a8:19:a0:12:92:69:5f:fc:56:89:ba:69:af:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7E:E3:9D:F2:7E:19:0E:B7:65:78:44:48:A6:BE:ED:DC:A3:DD:AB
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/PX7jnfJ-GQ63ZXhESKa-7dyj3as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:41:ed:8a:83:b8:c2:12:f3:84:51:1e:9a:81:31:9c:d5:74:
e5:2b:67:ec:bb:a6:1a:63:fc:97:d4:c5:d9:dc:7c:59:cd:f7:
6a:66:a1:fe:33:b7:93:a4:4b:0d:b5:52:f5:3b:77:9a:fe:8e:
6f:31:b2:31:ca:da:8a:10:4e:c4:48:7f:82:ba:3d:f1:7c:1c:
93:b6:95:33:4a:e2:6e:4e:0c:5c:02:46:22:40:b4:7e:4d:80:
36:3d:24:58:f9:9d:9d:b4:90:68:a7:90:c6:74:7f:45:1a:e5:
7d:c1:a6:2d:d2:ef:e6:80:3c:a1:94:88:4e:08:4d:86:a3:3f:
91:88:b1:fc:95:86:be:74:66:c4:45:fc:61:06:d2:52:2d:14:
af:63:5c:b0:3e:67:6b:21:71:a7:74:ed:89:7c:c7:a4:32:6b:
4f:ad:42:41:6b:1c:41:74:1e:90:ec:3e:c1:a2:58:57:03:c9:
9f:bc:52:63:b6:fa:ef:81:d5:3e:0a:04:01:2d:16:ce:ec:4f:
58:04:ec:58:1c:93:85:64:d7:75:0d:76:c2:d5:47:0e:cd:cc:
17:50:92:c4:02:ba:10:b5:ed:bc:d5:9d:ba:f8:90:20:8a:9c:
89:c2:bf:13:26:1c:91:83:c0:b0:0c:0b:16:e5:ab:d7:b1:46:
16:e2:a6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:40:09 2025 by rpki-client