Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/n9FpxGcgRcG4LPTaXOSWTTGgkHI.roa
File: n9FpxGcgRcG4LPTaXOSWTTGgkHI.roa (raw, json)
Hash identifier: rH9r1XJhIgT4Icjk6T3tg9atSTDlj9Z2c1Z6zVOQne4=
Subject key identifier: 9F:D1:69:C4:67:20:45:C1:B8:2C:F4:DA:5C:E4:96:4D:31:A0:90:72
Certificate issuer: /CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Certificate serial: 018CC94D7DD9D88FFA8FA667847B13917F98
Authority key identifier: 57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/n9FpxGcgRcG4LPTaXOSWTTGgkHI.roa
Signing time: Tue 02 Jan 2024 08:32:28 +0000
ROA not before: Tue 02 Jan 2024 08:32:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62199
IP address blocks: 185.45.76.0/22 maxlen: 24
2a01:49a0::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:7d:d9:d8:8f:fa:8f:a6:67:84:7b:13:91:7f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Validity
Not Before: Jan 2 08:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fd169c4672045c1b82cf4da5ce4964d31a09072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3d:fb:1b:9c:37:7b:55:57:63:90:e5:30:02:
65:dd:70:c3:fb:2b:d1:75:f1:c1:e8:a7:cd:8c:22:
84:f4:dd:75:ae:25:05:aa:0d:bb:76:9e:68:05:54:
b9:d8:33:65:ec:32:32:23:da:fe:68:81:72:f6:dc:
62:9c:83:b3:28:03:0e:6e:bf:98:9e:68:29:00:9c:
4f:e4:37:17:9a:9c:9f:75:cb:26:a8:5c:03:c7:46:
20:69:bf:6a:e9:42:e1:60:3c:3f:b3:98:88:29:75:
a2:bc:02:0c:ca:c3:79:98:f5:fc:9d:2c:e1:9a:02:
ed:3c:18:29:2a:18:b3:c1:28:dc:1f:19:e5:63:69:
b6:e9:f6:10:56:27:6d:c0:0b:4f:ad:89:80:8a:b5:
d5:e1:ad:6a:d7:05:bf:76:00:63:c9:9c:62:05:01:
3a:d1:47:35:65:d8:13:6e:e9:7e:43:8e:63:d4:41:
af:0e:85:88:8e:52:ca:2a:43:b1:2a:69:fe:1b:5c:
77:1f:41:5a:da:56:d6:dc:f6:0c:99:e3:03:81:85:
90:93:37:d9:bd:92:92:57:13:05:bb:26:15:61:ad:
f6:40:83:dc:4e:f1:6e:67:07:2a:9a:41:a4:da:1a:
38:ba:24:79:13:e0:58:89:74:60:da:71:e2:22:5f:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D1:69:C4:67:20:45:C1:B8:2C:F4:DA:5C:E4:96:4D:31:A0:90:72
X509v3 Authority Key Identifier:
keyid:57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/n9FpxGcgRcG4LPTaXOSWTTGgkHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.76.0/22
IPv6:
2a01:49a0::/32
Signature Algorithm: sha256WithRSAEncryption
12:26:5a:43:cd:82:80:cb:34:cc:8e:95:de:15:a2:b2:7f:c8:
64:e4:9a:ae:d8:d4:b9:d1:bb:dd:84:35:84:b6:c0:3a:c0:bb:
d0:2a:3f:75:52:2f:4c:bb:cd:4f:00:a7:e9:8c:80:42:b3:73:
99:54:6b:76:2d:ca:b8:db:08:dd:67:bf:93:a3:ad:84:35:34:
4e:82:18:c7:a4:eb:d8:a4:69:b1:56:c5:c6:18:12:0c:e2:d5:
ae:e0:bb:37:61:1c:c6:d6:5d:0a:e4:25:0c:45:be:4e:cc:14:
52:7a:a5:65:78:1b:20:ee:28:b0:ae:80:b5:ed:67:e6:cd:30:
bb:69:27:ea:9a:78:69:57:d7:54:0d:cc:88:d7:81:ef:c8:b1:
2e:4f:89:97:21:5a:81:36:ad:55:b9:3e:2d:2c:ad:f1:e4:ec:
c8:ac:09:0b:3e:fd:3c:ff:cf:82:63:d0:79:ec:b1:f2:4c:03:
a1:89:57:66:d9:53:b1:c7:61:78:ca:66:c8:95:9c:14:24:80:
4f:1c:f5:d2:30:a5:c4:5b:09:0a:0a:6f:b2:09:c3:da:71:1b:
7f:0f:10:47:32:17:ae:4a:00:67:b9:fd:ca:9e:38:bc:ab:7d:
6e:19:53:23:cc:c5:67:2a:bc:1b:a3:5b:c8:17:ee:ae:75:bd:
c6:57:d7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:51 2025 by rpki-client