Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/xY5nmwpvVmbhtO5jt97nz9VIY-M.roa
File: xY5nmwpvVmbhtO5jt97nz9VIY-M.roa (raw, json)
Hash identifier: XBXVcjTSksAev+KgqXADXIkiKfRIlki3T0vUxF8byLE=
Subject key identifier: C5:8E:67:9B:0A:6F:56:66:E1:B4:EE:63:B7:DE:E7:CF:D5:48:63:E3
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0190C55F4A067404AF2D98575A3D5FAE01D6
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/xY5nmwpvVmbhtO5jt97nz9VIY-M.roa
Signing time: Thu 18 Jul 2024 10:24:34 +0000
ROA not before: Thu 18 Jul 2024 10:24:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215340
IP address blocks: 45.131.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:5f:4a:06:74:04:af:2d:98:57:5a:3d:5f:ae:01:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 18 10:24:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c58e679b0a6f5666e1b4ee63b7dee7cfd54863e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:05:cc:4e:84:47:bf:b5:40:b4:5b:63:51:
98:1b:b8:fa:5b:18:d7:59:0b:5a:ea:ca:7a:51:60:
9d:52:b8:11:07:0e:ff:6f:ca:81:41:a1:9b:20:13:
94:ef:30:40:9e:d9:16:37:73:56:8a:a0:c6:c1:31:
4b:68:c7:53:98:6f:33:d2:a2:45:85:29:e6:b0:25:
9a:4d:d6:14:89:31:9c:0a:86:9e:fa:d3:eb:0f:c0:
82:99:1e:9c:7f:40:68:2d:8d:a3:cb:3d:e3:24:34:
70:4d:9d:b9:5e:5a:48:bd:c5:76:8d:a3:46:e2:6f:
46:e2:95:09:14:d0:c5:a1:e3:1d:25:0e:5b:ad:98:
c3:55:9b:96:50:80:04:06:3f:eb:e7:c2:8e:80:53:
bb:58:f5:b2:de:1d:e1:f1:04:f8:2e:5f:d5:96:53:
4e:d5:c6:e9:8b:77:80:2c:b1:16:ee:f7:92:4a:f4:
02:71:e4:04:74:6a:78:01:ed:74:a2:8b:05:23:26:
b3:77:73:26:87:b1:db:75:be:fd:0e:e9:27:31:38:
b8:7f:0d:14:cd:55:25:72:ca:d9:ed:b7:3c:e9:be:
da:27:b1:a7:0a:a8:41:26:08:70:de:c7:1e:89:55:
da:55:04:27:d0:25:9c:56:43:7f:9b:f0:b3:d8:5b:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8E:67:9B:0A:6F:56:66:E1:B4:EE:63:B7:DE:E7:CF:D5:48:63:E3
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/xY5nmwpvVmbhtO5jt97nz9VIY-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:28:f8:f4:aa:06:7e:44:ba:d2:ec:da:0b:76:da:fe:47:01:
54:be:b7:81:a9:76:81:e6:a5:da:ba:a0:c2:67:74:56:b7:d2:
12:2a:25:63:1d:3c:4d:b5:fe:c9:01:1e:90:96:db:c3:06:ac:
7f:a2:2d:7e:73:16:29:6e:03:be:25:f6:da:9d:b6:e8:c2:7a:
7d:e7:42:7d:92:73:d6:09:0d:90:06:0c:6b:68:40:2f:85:d0:
1d:19:90:cc:fc:dd:37:2a:56:fc:58:8b:0b:1e:78:c1:d0:8c:
ce:ea:85:1b:c1:48:46:18:ee:8e:63:6b:0c:fb:54:73:b1:75:
5b:3a:bb:05:00:fa:47:73:2d:4a:1a:44:2c:ce:33:f3:49:3a:
2c:41:0f:35:61:47:86:9f:50:78:c3:9d:6b:15:32:0a:ba:b0:
f2:5f:34:a8:a6:50:0b:07:f5:d9:8f:bc:fb:e3:73:d4:3a:e4:
4a:4d:92:44:14:58:cb:98:4f:ea:b2:23:ed:f1:8c:73:05:4f:
c5:fe:f8:3f:7c:74:fb:46:cf:eb:b4:03:59:71:39:62:e6:46:
d0:e3:ca:d0:d9:c7:8f:e6:52:0a:73:fe:96:e6:51:f6:29:49:
b7:22:d6:f9:2e:c2:89:1a:3e:12:14:54:44:ad:af:76:78:89:
2e:76:47:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:38 2025 by rpki-client