Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/rr593Ob00FYjAFlH0QZvzN-_Ayw.roa
File: rr593Ob00FYjAFlH0QZvzN-_Ayw.roa (raw, json)
Hash identifier: 5QNthqdRmtyYGix93PqWH6fjW8tm0D4fbxRPFM4Lli0=
Subject key identifier: AE:BE:7D:DC:E6:F4:D0:56:23:00:59:47:D1:06:6F:CC:DF:BF:03:2C
Certificate issuer: /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial: 01905D632B81C46DDE9146A981DE594D0860
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/rr593Ob00FYjAFlH0QZvzN-_Ayw.roa
Signing time: Fri 28 Jun 2024 05:48:18 +0000
ROA not before: Fri 28 Jun 2024 05:48:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 45.159.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5d:63:2b:81:c4:6d:de:91:46:a9:81:de:59:4d:08:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
Validity
Not Before: Jun 28 05:48:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aebe7ddce6f4d05623005947d1066fccdfbf032c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:b9:81:17:fd:6d:aa:ab:a1:dd:f8:eb:35:
60:db:39:22:b4:f4:69:f3:6c:9d:9a:7c:5c:20:2b:
39:9d:60:fe:25:6b:3c:c7:cd:9f:2a:34:3b:11:41:
57:a9:82:8f:46:43:69:01:bc:c9:12:82:52:00:40:
62:ca:db:9b:dc:e3:57:d3:b4:e6:ad:0b:0c:d6:67:
68:df:af:65:c6:81:5c:81:a4:2b:ac:08:2d:5e:ae:
ce:5b:f4:1f:81:25:e7:9b:7c:dc:3e:4f:5e:bb:e0:
bd:04:e4:9d:a5:ae:82:95:92:29:c3:b5:b3:45:a6:
03:25:6c:3a:c4:63:39:96:30:c4:f5:8c:5b:dd:f6:
65:ec:7e:e6:4e:95:2a:7f:4b:b5:1b:4c:4a:fa:75:
40:f0:8f:61:71:83:93:bf:d8:21:5b:05:b3:38:9e:
4c:af:f1:89:15:ba:f1:c4:1f:c7:04:3e:07:38:e9:
44:17:8f:f0:66:aa:fc:49:49:8e:a1:d8:f7:25:3e:
88:6f:70:e8:86:b8:84:b3:1b:67:f2:86:ba:14:e6:
d5:3d:e0:06:1e:8a:01:72:57:a7:0e:a1:7e:ab:32:
e2:c6:ba:42:76:f5:bf:d2:42:0a:c6:7a:25:cd:09:
35:60:20:d9:76:e8:1d:b7:1b:64:4c:c8:9a:c7:ae:
03:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BE:7D:DC:E6:F4:D0:56:23:00:59:47:D1:06:6F:CC:DF:BF:03:2C
X509v3 Authority Key Identifier:
keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/rr593Ob00FYjAFlH0QZvzN-_Ayw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:72:1a:94:90:9b:39:fe:2c:20:ff:e7:43:66:b7:cf:05:7b:
5d:21:eb:bd:fa:4c:f3:83:e3:c2:3e:00:66:11:04:22:89:56:
89:7d:7d:c8:00:9d:d2:1d:91:55:6d:20:35:c8:01:e5:fd:61:
28:8b:c8:48:4a:aa:39:d4:28:e2:0f:9f:96:19:d1:04:0a:6f:
ca:04:c0:c0:24:8d:cd:25:c1:d7:7c:47:08:23:12:75:e7:70:
d6:8a:d3:53:2c:56:b8:1d:35:28:84:d8:5d:31:dc:fb:b3:00:
f7:32:15:76:c5:7f:f4:3f:7f:7b:86:ab:eb:8b:c5:2e:0a:bd:
94:db:34:39:87:94:a8:53:f5:d3:40:b6:d0:60:0c:bd:07:21:
f3:11:cd:f7:bc:ed:f5:4a:ec:27:32:85:79:af:3b:dc:e2:a0:
8f:4d:91:b6:89:3c:25:b1:69:70:02:bd:4e:bc:bd:eb:b7:91:
7e:a7:7d:d7:fe:19:5b:23:1c:02:37:21:90:ff:56:3e:c0:77:
70:a1:a9:14:33:27:01:1f:b1:0a:63:df:33:77:71:60:e7:03:
fb:90:4c:dc:3b:a0:e9:b6:20:86:86:51:ee:b5:dd:e8:88:1c:
b1:24:7b:52:2e:e2:3f:e5:93:22:09:a7:34:a3:69:b6:fd:c9:
2c:c7:b1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:43 2025 by rpki-client