Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/AgeqCKS085utxZ7wDbbNqhyKDk4.roa
File: AgeqCKS085utxZ7wDbbNqhyKDk4.roa (raw, json)
Hash identifier: EAgvAv4fKOOypUQiagl6nVIk33LE787PCWyQwPb36Cw=
Subject key identifier: 02:07:AA:08:A4:B4:F3:9B:AD:C5:9E:F0:0D:B6:CD:AA:1C:8A:0E:4E
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01939355702F57A942D2EEED6E1E3A696598
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/AgeqCKS085utxZ7wDbbNqhyKDk4.roa
Signing time: Wed 04 Dec 2024 20:21:10 +0000
ROA not before: Wed 04 Dec 2024 20:21:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35682
IP address blocks: 45.92.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:93:55:70:2f:57:a9:42:d2:ee:ed:6e:1e:3a:69:65:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Dec 4 20:21:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0207aa08a4b4f39badc59ef00db6cdaa1c8a0e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:94:36:13:ce:e3:2f:6a:2a:da:60:54:ed:
fa:01:c6:00:a0:55:f4:3d:98:ba:e4:e6:df:d3:5c:
f3:1a:f8:40:86:f2:22:5c:02:14:7d:0b:91:0e:7f:
d1:56:2c:cc:fa:5f:fe:b7:6a:3e:e3:71:e9:0d:14:
cb:93:b0:22:17:b9:fd:64:2f:97:ac:96:2b:e7:89:
59:71:9f:f9:c7:8f:fa:b5:ff:33:81:b3:34:34:b8:
65:24:39:64:31:16:3a:26:cc:ae:8d:29:2c:6c:bf:
42:ed:07:b6:a5:c0:f5:c0:48:75:92:b0:d8:e1:e8:
6d:e6:5f:9d:6a:15:7a:c0:12:fd:ed:14:1e:0b:ab:
77:61:8a:f0:be:b8:07:f7:d7:dc:85:bd:70:1a:13:
fb:66:b8:5c:6f:56:a0:35:c5:c8:ba:93:f7:5a:7a:
65:6e:32:b7:62:df:76:9b:48:e3:e8:23:6c:83:6f:
f6:e6:5d:1e:0a:88:d4:1f:c8:d7:1b:ac:4b:82:9f:
7b:41:56:e0:9a:6c:c7:96:44:e0:17:63:ee:98:4e:
68:2b:e1:ca:87:5c:20:1b:46:a9:23:28:b9:52:5e:
e8:a5:8b:ae:51:f6:8d:97:d4:83:43:8f:74:ce:f1:
5e:71:69:87:c9:ec:a5:91:3f:9b:91:eb:17:17:51:
9e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:07:AA:08:A4:B4:F3:9B:AD:C5:9E:F0:0D:B6:CD:AA:1C:8A:0E:4E
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/AgeqCKS085utxZ7wDbbNqhyKDk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.173.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:a2:42:1d:5a:eb:5d:21:9b:78:55:67:15:17:ff:89:22:dc:
b0:0d:40:eb:15:fb:86:1b:60:bf:fe:2f:82:ac:b8:0c:d6:c3:
79:f5:b9:72:9a:21:d6:4e:6a:8f:b1:e9:f2:f3:20:5d:d3:82:
37:1f:e3:97:c4:7d:ff:11:f9:f1:23:aa:87:92:5b:5f:b3:c8:
2e:21:19:a9:6a:8d:05:ea:4f:ae:1f:ef:66:1b:c8:35:b2:5b:
e8:86:06:dc:f3:c7:ea:5a:39:07:ea:d5:de:c7:10:b9:7a:b4:
37:08:7c:82:cc:c5:10:78:5c:74:47:46:9e:d2:28:41:72:b9:
4a:dc:a6:ee:fb:d8:7a:b2:a1:48:02:e5:76:a4:ee:a4:ed:01:
17:41:fb:16:aa:34:2b:b1:b3:70:42:40:8b:76:b3:67:2e:98:
ea:ca:73:5d:99:66:b2:e5:9b:fb:2b:8a:1d:a5:f6:d5:7d:17:
fd:38:36:e6:83:2e:9f:b0:77:f1:a9:2a:0f:f1:19:d7:be:d4:
54:09:c6:d5:d2:04:7b:d2:b7:3d:4a:62:94:62:7a:ba:a1:7e:
a4:a1:ce:1a:a0:1d:70:72:57:00:c9:0e:3d:50:ff:be:18:c6:
3e:dc:43:94:3c:c6:5d:fa:1b:b2:88:59:e4:9a:6d:79:16:3d:
f3:a4:63:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:15 2025 by rpki-client