Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/wInI3m4Swb64wbd7m9BmbeEoF4A.roa
File: wInI3m4Swb64wbd7m9BmbeEoF4A.roa (raw, json)
Hash identifier: JmsU48OPER/9krBmLfIxwzr+gx71Jp6iD2gfcy5ordU=
Subject key identifier: C0:89:C8:DE:6E:12:C1:BE:B8:C1:B7:7B:9B:D0:66:6D:E1:28:17:80
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019482D46A9590042022D99365ED8D6A0F3A
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/wInI3m4Swb64wbd7m9BmbeEoF4A.roa
Signing time: Mon 20 Jan 2025 08:29:06 +0000
ROA not before: Mon 20 Jan 2025 08:29:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.140.57.0/24 maxlen: 24
45.140.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:d4:6a:95:90:04:20:22:d9:93:65:ed:8d:6a:0f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 20 08:29:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c089c8de6e12c1beb8c1b77b9bd0666de1281780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:fa:e2:6f:a2:40:8d:90:3f:2a:04:7c:53:
1a:42:c6:3c:5e:57:d0:b9:73:f0:2a:5e:78:87:1c:
bf:b4:6c:e9:d9:fd:35:15:ef:1b:83:8c:73:f1:f6:
29:cf:27:15:7f:52:80:82:68:5f:0f:00:98:4b:32:
05:97:70:e2:74:21:21:0f:9c:93:66:82:0a:1a:38:
e2:c8:91:96:7a:13:ee:e1:1e:3f:85:38:e6:7a:06:
e4:8b:b8:1f:a3:59:c0:14:1e:60:f1:05:4c:df:6f:
9e:84:2d:01:38:38:00:ac:21:8e:b5:a1:d2:16:ad:
f1:4e:2f:7c:33:ec:cc:e8:69:4e:83:91:80:6c:d4:
ee:00:26:67:75:36:f8:18:95:2c:91:4f:9c:71:4e:
2b:3b:ab:b2:55:86:48:35:b1:7f:03:c5:dc:32:99:
95:e6:b7:24:b1:0d:d3:bc:fb:43:b3:df:28:20:ba:
16:fc:4a:56:6a:f3:93:64:b7:53:0b:6c:c7:de:51:
85:3c:e5:2c:67:93:6c:94:5d:ca:c6:55:f9:84:7d:
da:7f:0d:44:89:c8:28:f4:a1:5a:53:70:07:20:62:
6b:46:cc:51:9c:a9:aa:ca:70:d5:f9:fa:c5:e0:4e:
93:be:cf:95:e5:fa:fb:e3:46:5e:61:c5:ca:a8:14:
9b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:89:C8:DE:6E:12:C1:BE:B8:C1:B7:7B:9B:D0:66:6D:E1:28:17:80
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/wInI3m4Swb64wbd7m9BmbeEoF4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.57.0-45.140.58.255
Signature Algorithm: sha256WithRSAEncryption
2d:02:a4:37:87:c6:f4:8e:97:a5:35:2b:06:88:b3:02:f4:98:
90:61:51:b9:76:1e:2f:94:82:22:38:3a:95:63:bf:bc:7c:af:
1f:cc:31:09:51:07:14:36:e1:4d:7c:18:e8:ee:3b:88:cb:8d:
c4:4b:61:84:c8:e7:89:60:98:67:a3:3b:d5:67:be:11:3b:24:
73:4b:d6:fa:06:f7:a3:4a:1a:aa:ed:34:ed:33:0b:51:9f:0d:
bf:d7:4c:65:ae:29:40:2c:c5:01:31:10:2b:82:70:96:9a:ab:
12:6e:bd:c9:c3:a7:65:24:c6:9f:1d:86:f6:88:97:81:8c:fb:
24:66:9f:ee:23:c6:85:c2:d0:7f:b1:52:d4:af:ac:42:a8:ca:
1a:1b:7a:de:fb:81:e9:27:06:a3:16:13:89:4c:ce:fc:93:cf:
ab:ee:57:d0:25:4c:c6:a4:7f:85:ee:c4:d8:d6:8c:2e:01:22:
93:90:d2:9d:8c:ab:82:63:d7:30:a6:cb:06:d7:73:a9:77:d0:
f5:2f:c3:dd:a5:14:31:7d:91:00:39:a9:60:bf:6f:de:3d:43:
4f:3f:e7:3e:12:83:e9:b8:68:f0:ae:d5:7d:60:33:9c:9f:ce:
8f:42:58:c5:bc:2b:13:bf:ba:34:4f:fb:93:14:7f:8e:fb:e5:
85:30:f1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:15 2025 by rpki-client