Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/E_BI33WmamzmvOQ1GgAKIX0XG0w.roa
File: E_BI33WmamzmvOQ1GgAKIX0XG0w.roa (raw, json)
Hash identifier: lVgO0eydCsz0oYZfdI4rl3fSRJrQ+orenyEp+Ceue9s=
Subject key identifier: 13:F0:48:DF:75:A6:6A:6C:E6:BC:E4:35:1A:00:0A:21:7D:17:1B:4C
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 0191A9AF49306DACE50454BDE143473B8248
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/E_BI33WmamzmvOQ1GgAKIX0XG0w.roa
Signing time: Sat 31 Aug 2024 18:25:22 +0000
ROA not before: Sat 31 Aug 2024 18:25:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64286
IP address blocks: 45.84.102.0/24 maxlen: 24
2a10:3b04::/32 maxlen: 32
2a10:3b05::/32 maxlen: 32
2a10:3b07::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 31 Aug 2024 18:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a9:af:49:30:6d:ac:e5:04:54:bd:e1:43:47:3b:82:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Aug 31 18:25:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13f048df75a66a6ce6bce4351a000a217d171b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:5b:a1:2d:75:62:20:d7:13:e6:bb:33:23:
1a:16:3d:3f:5d:98:ae:8f:36:e6:f9:8f:2a:3e:ba:
8e:14:5b:d2:6f:4f:ba:b9:af:8c:e3:db:47:ff:30:
7e:32:8b:e8:ce:13:25:3b:5b:7f:39:00:69:fe:df:
31:b6:1a:e7:d8:85:59:e2:eb:11:74:ea:91:dd:d9:
e5:96:cf:97:a7:dc:e0:23:70:5b:00:0c:56:02:b4:
97:55:8c:bf:3a:69:ea:8e:38:ce:9e:e4:b5:69:3d:
ac:14:cb:ff:b6:cc:15:62:e9:16:72:9b:2c:9a:f7:
f9:50:ff:2e:e0:e3:01:f1:34:70:9f:7c:cc:e2:37:
e5:51:bb:ca:63:7c:36:88:b5:b6:4f:38:b0:e7:d0:
23:bb:31:d4:18:a4:eb:5e:22:27:f2:c0:f0:e6:60:
14:45:0c:e1:c6:c7:f3:97:44:8e:89:8b:88:f0:97:
d5:20:7e:76:0e:85:8a:fd:37:ba:99:6c:72:e8:ef:
9d:34:44:2a:07:df:5d:3c:3f:43:99:c2:a6:0d:60:
04:fc:84:35:47:eb:3b:8d:f1:12:84:ec:5b:de:71:
49:a2:75:eb:6a:a4:11:b7:24:00:73:16:5d:0c:bc:
ad:14:70:5c:30:36:e6:c5:80:6b:d5:ae:19:20:f9:
ef:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F0:48:DF:75:A6:6A:6C:E6:BC:E4:35:1A:00:0A:21:7D:17:1B:4C
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/E_BI33WmamzmvOQ1GgAKIX0XG0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.102.0/24
IPv6:
2a10:3b04::/31
2a10:3b07::/32
Signature Algorithm: sha256WithRSAEncryption
1f:27:98:2d:67:1c:45:26:08:77:c5:9a:16:d0:f3:dc:93:04:
73:4b:75:ef:c1:03:85:43:d7:6b:b0:da:04:f8:73:90:a2:9e:
aa:1d:2f:0f:34:07:d9:aa:9a:49:5c:18:5b:62:87:b6:19:25:
0c:7d:c3:b2:a2:0c:da:1b:2c:43:d0:c8:c5:eb:52:8f:32:e6:
2d:d0:2a:c9:e3:fc:88:b0:07:a6:56:c6:90:77:3d:1d:1f:6a:
d8:85:fa:5d:86:29:24:de:60:65:18:2d:61:19:4b:7b:a4:32:
a8:87:24:fe:96:2e:ab:06:fa:dc:d5:f1:92:78:f7:14:d0:77:
d5:87:0f:db:ce:09:9d:39:1a:91:f2:95:91:8d:7c:7e:2b:f3:
15:3e:00:24:af:10:30:03:da:f2:6c:48:d1:a9:f5:a2:56:dd:
69:f8:7f:e9:f0:5f:57:39:cf:dd:9e:f4:e5:86:da:8e:6f:2c:
2a:9e:3a:55:67:80:df:15:16:17:13:5a:a5:2d:df:53:0b:09:
2f:6a:67:27:b5:12:cf:a7:6f:68:20:d6:06:4b:b3:2c:d6:ac:
51:8d:5f:f4:dc:16:7c:d9:fe:dd:c2:86:70:8f:19:a1:b4:36:
88:28:16:a3:6c:9a:ef:91:a0:e4:4c:63:8e:33:70:30:8c:d5:
0f:80:a2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 15:33:34 2025 by rpki-client