Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/FLjHJCzwaRjsNevvFk1_CV6pQ1M.roa
File: FLjHJCzwaRjsNevvFk1_CV6pQ1M.roa (raw, json)
Hash identifier: 4MHIHxsOFQw5cEqdxfLaeS0L8Vq4s62MFX+RxMAy+QE=
Subject key identifier: 14:B8:C7:24:2C:F0:69:18:EC:35:EB:EF:16:4D:7F:09:5E:A9:43:53
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 01944F8BF1F27BBF5DF8D24DFE759D67B299
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/FLjHJCzwaRjsNevvFk1_CV6pQ1M.roa
Signing time: Fri 10 Jan 2025 09:29:19 +0000
ROA not before: Fri 10 Jan 2025 09:29:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8899
IP address blocks: 5.45.0.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 10 Jan 2025 14:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:8b:f1:f2:7b:bf:5d:f8:d2:4d:fe:75:9d:67:b2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Jan 10 09:29:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14b8c7242cf06918ec35ebef164d7f095ea94353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c7:a0:02:08:f1:cc:cc:5e:d8:3b:d3:7a:0e:
cd:5b:e7:6c:8b:9b:1e:37:02:8f:f6:40:10:9f:5c:
c4:68:ce:14:30:57:91:e6:4d:96:bb:83:05:9d:e4:
2c:11:88:90:06:6d:76:ee:09:c2:a1:aa:1b:5f:36:
db:15:4c:de:81:d1:a0:62:1e:16:98:42:36:7f:d9:
ae:97:24:59:a9:22:9c:9b:51:21:41:5a:54:cc:33:
bd:ce:7e:a6:4f:b1:e5:ba:23:91:21:1b:6b:c0:6e:
b3:81:9b:ba:d8:d4:3c:89:93:67:ae:a8:d1:19:1e:
60:39:84:7c:91:87:90:18:a6:f5:a1:d6:6d:41:1f:
87:e6:6e:a6:44:3e:b4:31:59:ae:60:e2:f8:d1:b6:
92:2b:a0:3b:70:dc:c7:e5:a1:f5:15:ab:8f:66:ab:
d5:d1:a0:8d:ee:98:45:45:fa:f2:cd:26:8d:3d:6d:
14:b5:ab:60:54:cf:cf:80:1f:37:ea:ef:68:fd:8e:
34:29:2b:a7:5b:c1:80:2c:9f:01:dc:66:32:3c:25:
21:76:64:b5:16:a2:26:96:cc:ff:7f:5d:3e:dc:c5:
4a:59:c7:51:ce:c3:ba:45:b6:c6:3a:8f:33:35:eb:
71:72:34:8f:c9:2f:3a:e4:99:1d:06:aa:fe:5e:1b:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B8:C7:24:2C:F0:69:18:EC:35:EB:EF:16:4D:7F:09:5E:A9:43:53
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/FLjHJCzwaRjsNevvFk1_CV6pQ1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.0.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:cf:49:1a:b0:0f:45:20:a2:eb:71:de:b7:8a:06:9e:cc:10:
9b:f4:e1:a1:39:ac:78:c5:d4:45:24:ed:5e:a8:59:66:a3:27:
bd:95:8f:12:34:ae:65:d4:07:2d:53:f5:48:a4:00:de:ab:af:
f9:9d:83:96:73:e4:3c:ff:7b:48:f1:16:d8:cf:2c:aa:97:33:
1e:bd:91:9d:22:af:b2:89:76:f1:71:e4:0f:b9:9f:93:24:14:
da:5b:f4:6c:30:b1:c9:2f:cd:af:42:5c:b6:37:48:c0:fe:e2:
08:97:f6:9b:44:92:29:f5:43:8c:ed:e9:63:60:35:e2:5c:b4:
8f:b9:1d:36:c8:9c:26:5f:1e:3f:10:cf:b2:15:db:ae:05:50:
74:dc:11:b6:cd:cd:9a:c1:05:10:f8:3e:d0:35:25:d2:7e:2b:
c1:25:ca:ff:8c:d7:17:b5:83:1d:3c:0f:12:30:a9:d6:b9:ee:
06:12:50:6f:4d:78:d7:03:55:23:41:8e:2c:3a:f4:7c:de:3d:
fc:0f:1a:da:eb:86:77:01:df:19:90:85:36:cf:d9:c5:82:b8:
fa:ca:dc:35:57:db:a0:31:fd:42:f3:18:54:f7:27:cb:5f:b3:
5e:93:21:1c:49:c8:ff:1c:9e:8f:c7:61:81:25:fd:09:bb:3f:
75:e9:8d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:45:03 2025 by rpki-client