Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/1Xq1InJPb6m1N9t-RvJTlroKe_g.roa
File: 1Xq1InJPb6m1N9t-RvJTlroKe_g.roa (raw, json)
Hash identifier: SWubei8s8vF5LP3mFwiyCMOMkvBFx6i0OX0zzBg2Bbs=
Subject key identifier: D5:7A:B5:22:72:4F:6F:A9:B5:37:DB:7E:46:F2:53:96:BA:0A:7B:F8
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 01969057B98E5BAD4F34AC91BBDEABF8B59D
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/1Xq1InJPb6m1N9t-RvJTlroKe_g.roa
Signing time: Fri 02 May 2025 09:33:10 +0000
ROA not before: Fri 02 May 2025 09:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 45.123.146.0/24 maxlen: 24
45.123.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 09:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:57:b9:8e:5b:ad:4f:34:ac:91:bb:de:ab:f8:b5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: May 2 09:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d57ab522724f6fa9b537db7e46f25396ba0a7bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:59:cd:12:7a:53:f0:e9:f3:15:a3:1d:60:
12:59:dd:f6:85:03:a5:72:06:8b:0a:3a:47:b0:60:
51:92:02:42:cc:57:ac:7d:a1:a1:4d:8b:88:66:b6:
30:93:fd:45:dc:46:95:4f:0f:db:be:93:06:e5:76:
2e:cd:01:a0:a7:ff:22:18:97:6d:fd:74:ee:8c:05:
ac:75:01:c3:25:49:07:41:f1:81:d8:91:9d:cc:09:
63:bd:6a:26:cf:08:a6:83:da:32:79:68:cc:8f:8d:
c4:4a:74:d4:c6:99:20:55:df:b9:06:52:5f:23:5e:
4c:3d:5f:e3:a7:45:31:5c:35:0b:71:95:70:59:2a:
f2:f7:38:9d:42:ff:51:6f:45:67:cd:31:3b:f0:68:
00:83:91:58:00:80:ac:93:04:9d:a5:c7:57:4f:44:
76:2a:cf:95:9a:cc:9d:28:5e:30:53:15:e5:82:cb:
30:bf:93:1a:ea:cb:d4:57:38:f5:5f:68:96:27:da:
c1:ef:2a:6f:1c:ab:4b:1a:22:98:e9:99:9b:3b:aa:
ee:1b:3b:c7:07:12:e8:65:49:75:ac:f5:c3:d4:91:
00:10:51:5b:20:54:a4:1a:a3:37:be:6f:98:2a:62:
94:eb:bb:ea:b2:e4:0b:ca:ab:15:ad:4b:23:5b:15:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7A:B5:22:72:4F:6F:A9:B5:37:DB:7E:46:F2:53:96:BA:0A:7B:F8
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/1Xq1InJPb6m1N9t-RvJTlroKe_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.123.146.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:b3:75:f8:59:06:20:c5:74:e1:b5:f6:85:62:57:bd:93:81:
de:88:10:c4:84:a3:48:3b:42:f3:2f:fc:f8:60:74:fa:67:46:
fe:69:72:f2:c1:60:33:4e:01:b5:47:be:5a:9a:11:66:fc:47:
f5:06:91:88:20:ce:7c:00:1a:f7:4e:fa:dd:bf:3f:51:47:67:
5e:20:c5:b9:d5:84:67:0a:83:22:0b:3c:57:33:9e:2d:ec:83:
ae:b3:d1:7d:bd:99:34:55:67:86:0a:be:c8:7a:af:c4:cc:0f:
a3:2b:0f:7b:5c:a5:37:85:3a:0c:f5:9a:4a:79:3c:fe:e1:c0:
7e:fb:5c:03:3e:87:16:3b:ed:e3:e4:cd:76:19:99:e7:f9:d5:
43:67:96:0e:4e:8d:c6:23:36:d7:e3:d4:74:ba:6d:e9:cc:3e:
49:47:8f:d8:73:e2:76:e4:1c:30:21:0c:22:4a:35:b3:00:6d:
d8:9f:b9:1b:b5:81:76:84:0e:db:f6:e1:17:9c:24:45:d3:75:
6d:09:f9:bb:71:5f:80:f2:4f:63:bb:5a:9a:7f:6f:70:e5:31:
5b:eb:69:a1:82:94:00:32:67:89:7a:2d:83:65:bf:48:20:50:
74:dc:8a:ef:b4:47:f8:c7:5f:05:ab:9f:e9:c6:83:30:8d:64:
aa:c1:c1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:50:24 2025 by rpki-client