Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/_umrbkRAi1RzHrS8bL50TIkGU1Y.roa
File: _umrbkRAi1RzHrS8bL50TIkGU1Y.roa (raw, json)
Hash identifier: o7Js0nSFCvNlLCgKv6bbeLN/RAUXte59AKhPhFtzdgM=
Subject key identifier: FE:E9:AB:6E:44:40:8B:54:73:1E:B4:BC:6C:BE:74:4C:89:06:53:56
Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Certificate serial: 018CC2DB189B92E7598992794BA983638675
Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/_umrbkRAi1RzHrS8bL50TIkGU1Y.roa
Signing time: Mon 01 Jan 2024 02:29:47 +0000
ROA not before: Mon 01 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25465
IP address blocks: 45.83.96.0/24 maxlen: 24
45.83.98.0/24 maxlen: 32
45.83.97.0/24 maxlen: 24
45.83.99.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:18:9b:92:e7:59:89:92:79:4b:a9:83:63:86:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fee9ab6e44408b54731eb4bc6cbe744c89065356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:a0:59:52:ec:b5:5b:c8:4f:af:d6:cb:8b:
1a:1f:89:d6:d0:88:20:31:cc:eb:32:36:11:1f:07:
01:59:13:8b:33:a3:dc:08:23:ae:1a:c3:cc:34:f6:
10:2e:d0:7e:2e:0f:4e:5e:dd:85:82:61:41:37:fe:
54:4c:b7:3e:db:31:b9:9a:6f:35:a4:0d:df:d8:56:
53:f7:d9:8f:c9:f9:39:ff:9f:c1:d3:d4:d9:a4:07:
ad:a5:70:7d:29:46:b5:a2:ce:59:81:5b:c0:bc:8b:
aa:d4:63:0f:e4:75:39:2a:a6:82:df:c5:ff:2b:bd:
5f:5f:2d:d2:87:26:f6:1f:83:39:68:70:bc:8c:2f:
44:0d:f4:da:55:e7:46:aa:27:5b:c8:12:84:ae:e2:
04:6c:33:5f:c5:41:8c:95:ea:20:82:1d:d5:52:c3:
06:e0:ed:f3:7b:4d:e5:40:78:4d:e2:c1:80:7e:9e:
6a:ea:28:87:cd:e8:82:28:cb:f0:a2:24:b4:af:73:
26:1a:48:44:a9:25:eb:46:f4:5c:3b:a7:df:9b:67:
8d:d8:fe:e1:e1:60:2c:3d:7e:e1:e3:9f:4e:d4:df:
b6:03:8a:55:ab:1b:f7:d5:94:d2:33:ee:13:bc:bb:
df:3e:19:4f:14:dc:b3:57:a7:4d:45:e2:9f:4e:a6:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E9:AB:6E:44:40:8B:54:73:1E:B4:BC:6C:BE:74:4C:89:06:53:56
X509v3 Authority Key Identifier:
keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/_umrbkRAi1RzHrS8bL50TIkGU1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.96.0/22
Signature Algorithm: sha256WithRSAEncryption
65:b8:6b:3c:c4:d7:d7:4b:6c:90:68:8b:24:fd:34:83:9e:b6:
c4:49:7b:00:48:ca:f5:34:a2:2f:30:14:22:eb:94:3f:be:56:
d1:6e:3d:38:7d:76:12:7f:d0:05:8f:34:aa:b8:a7:38:7f:69:
e7:8d:0d:17:d6:e2:23:a8:cc:40:21:11:21:2d:40:94:25:f7:
c5:7a:a1:26:5d:4f:24:25:1f:2f:8c:87:20:b5:70:64:94:23:
ca:1e:70:26:f3:1d:77:cf:a3:7e:be:9b:e9:07:db:5c:33:9d:
eb:ad:2e:0d:9c:f2:76:1b:eb:16:5a:1f:d9:25:46:a0:58:17:
ef:b2:74:c7:e3:c2:d1:8e:3d:bc:3f:31:ce:d2:85:74:bc:06:
53:b6:83:13:76:17:48:f5:00:71:bf:f2:a9:be:4c:88:55:e7:
60:2b:a6:c4:21:54:9d:f6:a0:45:00:5b:81:1a:a8:6c:af:40:
d2:04:ca:33:9e:1e:13:99:71:3b:1a:2a:1b:da:f6:d0:ee:a4:
9e:c1:6b:ed:e1:66:2f:0f:b8:2b:09:5a:d2:67:d8:49:5c:46:
4d:e1:4d:65:45:68:87:f0:92:0b:b1:5a:d8:a3:b2:5e:77:0e:
70:8a:24:9d:6f:8c:f9:42:6c:dc:ca:de:4b:9d:36:5d:ff:d8:
45:e1:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:29 2025 by rpki-client