Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vuCaaH1zAQDJglT9Xe7CQ6UzmEs.roa
File: vuCaaH1zAQDJglT9Xe7CQ6UzmEs.roa (raw, json)
Hash identifier: eymnSHsTBL6bCvQevfDs3F9VK5fyDqufAQCH9PwcKCY=
Subject key identifier: BE:E0:9A:68:7D:73:01:00:C9:82:54:FD:5D:EE:C2:43:A5:33:98:4B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01928E8016030DCAD74074AD7A4D787BBB7B
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vuCaaH1zAQDJglT9Xe7CQ6UzmEs.roa
Signing time: Tue 15 Oct 2024 04:46:51 +0000
ROA not before: Tue 15 Oct 2024 04:46:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13332
IP address blocks: 45.115.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8e:80:16:03:0d:ca:d7:40:74:ad:7a:4d:78:7b:bb:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 15 04:46:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bee09a687d730100c98254fd5deec243a533984b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:b2:6e:54:27:0e:98:c2:64:42:52:14:22:
f8:69:0c:f3:86:f2:4e:de:86:31:5a:dc:95:7c:e3:
5e:04:79:bb:31:ce:91:9e:d8:32:02:e9:4a:cd:aa:
d9:5a:ac:c7:34:4e:21:20:5c:ab:ce:90:16:89:bc:
59:f5:93:63:5d:fc:12:2d:be:3c:bc:19:74:16:74:
3e:9f:70:4a:90:eb:88:5a:eb:59:4a:0a:b6:76:a6:
30:79:85:eb:65:da:68:e5:1d:af:3b:ef:25:6e:b1:
43:93:d4:2f:d6:6c:a0:6b:73:cd:06:19:d3:47:aa:
94:a7:a5:5e:87:97:a6:5e:7d:8d:68:76:0d:92:98:
50:3b:95:be:9f:9d:01:6e:71:4d:70:fb:72:b7:39:
45:38:86:4c:ea:8b:34:9a:3f:5a:32:9f:7a:c4:59:
01:f8:c0:11:fc:4b:84:a5:22:36:f5:5b:07:81:c0:
0d:f6:9e:92:bd:ac:08:de:bd:de:1e:47:a2:0a:01:
23:17:93:7a:9e:2c:53:15:3a:62:c6:0c:5d:10:e0:
35:c9:6d:7c:0b:aa:dd:79:54:d7:53:3a:4e:22:84:
82:27:6c:f4:61:71:b9:25:73:cb:0b:1b:8d:07:d6:
9b:e2:f9:55:d8:17:13:b0:22:0a:3f:e2:7a:4d:a1:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E0:9A:68:7D:73:01:00:C9:82:54:FD:5D:EE:C2:43:A5:33:98:4B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vuCaaH1zAQDJglT9Xe7CQ6UzmEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.192.0/22
Signature Algorithm: sha256WithRSAEncryption
28:15:5f:d3:43:5a:9e:35:a3:08:bb:d7:7a:61:4b:e4:16:c7:
f2:6b:8b:c8:49:23:84:05:e4:f4:5f:31:c3:04:58:65:a8:66:
c6:81:a6:75:ba:93:5c:bc:73:43:39:08:c2:a6:93:d3:82:3e:
a5:ba:9b:3f:2d:3c:e9:6f:74:7e:27:73:90:03:59:47:b0:22:
ae:36:b0:18:eb:b3:8b:d6:6b:bc:4e:f2:81:c4:71:94:9c:42:
cb:2a:f9:33:06:af:f7:ca:f3:69:c5:7d:44:be:50:eb:a1:53:
03:ad:e5:3a:38:41:f9:b8:18:df:fa:53:2f:8e:ff:c9:a5:ad:
92:62:e1:7f:e0:65:3d:35:82:fa:f7:f8:4d:8a:92:c0:5a:f4:
2b:46:e9:36:93:7a:f7:90:13:15:97:7d:36:8f:89:24:fb:f0:
f8:fc:ef:88:7c:6b:b1:84:c6:2e:9b:93:72:33:5c:b5:8a:18:
d7:e7:c5:3a:f9:bf:42:e3:2e:07:aa:ab:38:28:02:33:db:7a:
09:2c:b7:d8:76:d1:c7:49:71:7c:3a:08:0b:fe:f4:a8:d7:2e:
59:d5:82:5e:1a:c4:a9:99:d2:dc:82:2d:57:3a:df:57:ea:19:
34:99:d1:7b:56:72:20:e0:6d:c1:98:11:54:d4:2c:e4:4b:c1:
bf:ce:9a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:40 2025 by rpki-client