Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/MsG8jemqjxtywmYkmux4jursvbk.roa
File: MsG8jemqjxtywmYkmux4jursvbk.roa (raw, json)
Hash identifier: UPXCjtKWJbXWGMDaPDF09+1qP8c2HbZBkmTPoXFSYPg=
Subject key identifier: 32:C1:BC:8D:E9:AA:8F:1B:72:C2:66:24:9A:EC:78:8E:EA:EC:BD:B9
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0193C0A1B28D580A0F70FAB1CB18AB85B7DA
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/MsG8jemqjxtywmYkmux4jursvbk.roa
Signing time: Fri 13 Dec 2024 15:27:22 +0000
ROA not before: Fri 13 Dec 2024 15:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 45.149.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:a1:b2:8d:58:0a:0f:70:fa:b1:cb:18:ab:85:b7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Dec 13 15:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32c1bc8de9aa8f1b72c266249aec788eeaecbdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:23:0e:9d:77:c2:5e:d7:45:b1:68:4c:23:
f3:a4:1a:7c:d3:05:68:3c:63:d8:98:88:9a:65:e5:
41:c6:fe:ba:bb:17:92:77:72:3d:32:4f:6d:29:b1:
5e:5f:f5:a3:95:28:d5:a8:99:76:fd:94:cb:a7:3a:
5a:3a:16:32:0f:5c:ba:eb:ee:93:b1:df:e5:0a:e9:
bf:e1:33:43:af:f7:14:39:5f:7d:83:84:94:2a:79:
05:2a:a8:28:26:9d:3a:48:b7:35:f5:1a:7d:67:98:
0f:9b:a0:0c:ee:a2:41:fd:e7:3e:f8:b0:0f:6b:15:
3c:32:92:21:d4:39:89:eb:99:3c:19:f2:06:3e:5b:
42:ff:5f:c1:98:06:9b:94:d7:3e:f5:7a:34:ea:77:
e3:5d:a0:e9:de:db:a2:78:2a:05:a9:f1:95:e5:bb:
d4:da:b2:19:4b:0d:84:74:39:47:1a:1c:31:a5:eb:
02:38:28:af:e9:8c:b1:1d:a8:e5:63:a0:8c:35:f4:
72:60:6d:57:97:3e:f2:50:55:f7:fc:a6:47:c6:84:
5f:e8:49:73:56:27:a3:81:07:20:4e:ab:16:7b:56:
8a:03:95:36:8c:cc:e2:b2:8b:47:8b:85:82:1d:89:
1b:14:76:11:c9:73:8e:ba:7a:9a:21:b1:ed:ec:2e:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C1:BC:8D:E9:AA:8F:1B:72:C2:66:24:9A:EC:78:8E:EA:EC:BD:B9
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/MsG8jemqjxtywmYkmux4jursvbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.7.0/24
Signature Algorithm: sha256WithRSAEncryption
57:e9:a7:b5:5c:d0:ea:6c:36:d6:69:65:c3:1f:42:c5:3a:3c:
60:2f:dd:70:18:e7:21:13:eb:07:85:d0:10:0b:d2:71:d3:f3:
e3:72:68:85:51:00:65:f7:2f:83:bf:9d:50:40:1e:6a:71:10:
ea:61:42:30:3d:65:a4:49:57:07:f0:03:ac:f1:a7:3e:cf:b9:
a8:29:31:1a:af:dd:da:a3:57:21:86:63:b4:83:ef:c6:49:ff:
31:64:c0:37:43:1e:74:96:99:ce:ec:36:58:7b:37:45:69:7d:
a5:4c:24:bc:a5:95:ff:0c:87:cf:2f:6a:16:20:fd:5c:6d:f1:
c4:55:54:e7:1a:ea:62:85:a0:36:c6:02:aa:66:6b:96:10:53:
e7:70:8f:c5:b0:fd:63:1e:61:c3:72:81:f1:17:62:31:e6:cd:
8a:9b:98:53:21:b4:4b:c2:82:ef:db:39:38:21:cd:52:56:48:
b9:82:2c:a8:73:86:f5:f0:d7:da:85:a3:3d:84:70:3c:a2:48:
8a:06:77:be:a7:35:e5:ed:6f:73:4f:86:d7:2c:07:ad:be:25:
92:8b:b0:b2:3a:0f:e6:cd:54:61:2f:13:0e:35:0f:72:3c:33:
4e:4a:35:2d:21:0f:71:05:99:f7:1a:8a:16:79:a5:14:eb:a1:
32:68:a3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:28:21 2025 by rpki-client