Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/F581LUNu44AMIi4MTMSy4FU7Cck.roa
File: F581LUNu44AMIi4MTMSy4FU7Cck.roa (raw, json)
Hash identifier: nCkfnwHC8Qa9aTji3nxRvQET+ieAtPrRZbbCCvcUoeU=
Subject key identifier: 17:9F:35:2D:43:6E:E3:80:0C:22:2E:0C:4C:C4:B2:E0:55:3B:09:C9
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019424B3847E022FDF95269762E4095C20BA
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/F581LUNu44AMIi4MTMSy4FU7Cck.roa
Signing time: Thu 02 Jan 2025 01:48:52 +0000
ROA not before: Thu 02 Jan 2025 01:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 45.85.12.0/24 maxlen: 24
45.85.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Feb 2025 08:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:84:7e:02:2f:df:95:26:97:62:e4:09:5c:20:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jan 2 01:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=179f352d436ee3800c222e0c4cc4b2e0553b09c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:96:9d:ba:6e:16:e2:f7:d0:60:ee:30:56:11:
75:62:65:90:2f:dc:bd:ec:25:4a:ea:7c:50:97:34:
b3:8b:7f:5b:3e:ec:b9:c1:03:bb:7f:d2:ad:34:6f:
ea:a1:e3:96:90:12:80:bd:44:c9:51:ef:25:7d:79:
03:db:a9:0c:28:ff:5e:fd:a2:85:ac:6e:76:c8:09:
a3:ee:ba:b8:1e:6e:90:b7:a1:d5:80:f0:3e:61:f4:
7b:57:f8:ba:8e:4f:3c:80:f4:a8:58:81:e1:83:3a:
d0:94:ed:cb:9f:e3:c2:09:dc:d1:6b:ad:85:ac:b1:
3f:0b:87:81:8a:73:94:cd:88:af:89:51:7b:f2:75:
2a:28:f8:3b:a6:d6:77:68:d3:f1:ff:19:9a:ef:3c:
ea:3f:2b:1e:26:e8:fe:68:b5:b6:1d:68:46:53:47:
06:e2:f7:7e:46:f7:16:d6:52:95:10:cc:17:cd:e0:
9e:a0:53:a1:2c:fb:53:2d:5c:e9:cd:43:55:c7:3c:
db:1e:ab:cc:7b:56:0d:69:ca:03:99:ac:d0:81:93:
bc:39:02:94:6f:7b:45:db:34:27:1c:7b:30:16:10:
5a:db:6f:04:a9:d5:48:26:f1:c7:7a:2c:70:d3:3e:
06:f0:09:a3:7e:88:2a:ab:20:d2:f3:62:28:ed:34:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9F:35:2D:43:6E:E3:80:0C:22:2E:0C:4C:C4:B2:E0:55:3B:09:C9
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/F581LUNu44AMIi4MTMSy4FU7Cck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.12.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:56:1f:93:8c:24:10:68:b0:2a:71:94:b4:91:40:2b:e2:c2:
df:32:f5:31:16:41:83:91:d7:67:49:be:dd:93:38:45:df:5f:
79:e9:94:ac:a4:0f:ba:17:28:36:64:83:36:e1:d3:61:39:e0:
69:ef:bb:8c:66:cd:dd:9d:59:d8:98:fb:a9:2e:9f:d0:27:dd:
a5:71:79:d2:b6:b4:45:30:23:06:1b:da:2b:6f:93:32:9f:21:
34:56:e1:ae:1b:f5:db:54:85:15:ab:2d:16:c0:7b:a3:55:5e:
b7:02:d1:6b:24:a8:06:c3:20:b7:bd:4e:43:5d:98:45:07:51:
80:fe:b9:e5:73:c3:47:80:7f:a0:0e:54:7e:a7:6a:44:9a:c1:
7f:2d:a7:2c:f5:60:42:cf:dd:1e:d0:fd:94:23:a2:8d:85:da:
fa:5e:b0:ce:d0:92:c5:14:af:50:0c:3a:04:54:4b:49:53:b4:
f1:36:2f:8d:86:2c:bd:08:b7:34:76:2a:29:13:05:29:d7:6a:
1c:60:64:7f:26:a6:78:47:33:a5:0d:c9:3e:3b:f4:b4:3a:f5:
d9:a6:4b:de:17:9a:db:fe:1b:4d:42:9b:b1:c3:ea:e4:4f:0c:
ae:d0:e6:3f:8f:ab:fb:e0:9f:60:49:d2:56:59:18:77:b9:20:
87:57:ab:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:52:42 2025 by rpki-client