Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i3DQEB1B8UjR4xhxPazPCjvMWxk.roa
File: i3DQEB1B8UjR4xhxPazPCjvMWxk.roa (raw, json)
Hash identifier: Dzf0C9VZGeSY80dyLvERbWnEVJh2RInjr3ulU2QsINo=
Subject key identifier: 8B:70:D0:10:1D:41:F1:48:D1:E3:18:71:3D:AC:CF:0A:3B:CC:5B:19
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193F94232437E61F5AEF983D562858D9BEC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i3DQEB1B8UjR4xhxPazPCjvMWxk.roa
Signing time: Tue 24 Dec 2024 15:21:25 +0000
ROA not before: Tue 24 Dec 2024 15:21:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
2a0f:2ec0::/29 maxlen: 29
2a0f:31c0::/29 maxlen: 29
2a13:fc00::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 27 Dec 2024 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f9:42:32:43:7e:61:f5:ae:f9:83:d5:62:85:8d:9b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 24 15:21:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b70d0101d41f148d1e318713daccf0a3bcc5b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:e0:55:ba:01:c8:a4:ac:89:2b:6f:4f:aa:
20:67:0b:d5:51:ec:11:87:94:57:cc:62:ce:e1:85:
56:a7:db:a1:82:2d:53:46:19:4b:5f:79:a4:ee:34:
ae:04:c8:b6:46:5f:e0:34:33:ba:18:b2:ea:88:c5:
60:38:c6:5c:51:f5:8d:17:f0:8a:c0:21:dc:f7:9b:
10:1e:82:bb:61:ed:9a:e3:c3:72:3c:ab:82:9c:a4:
e7:60:9c:3e:61:4e:17:2c:18:fb:8b:f0:f6:0b:da:
78:98:bb:24:7c:a6:bd:4e:f7:62:9a:5a:5c:da:ed:
1d:e4:6a:dc:e7:b3:2f:20:91:86:04:16:3c:47:f1:
eb:20:dc:93:e7:f3:b0:1f:55:01:9a:90:77:ac:fe:
38:7d:e3:5d:45:33:2a:90:25:63:46:19:fe:38:2f:
53:33:a3:83:96:42:3c:43:ad:5d:0d:ec:6c:87:d3:
19:22:25:8f:51:e8:c8:14:6c:69:01:73:eb:45:32:
02:7e:03:0a:8c:1f:16:2a:24:5c:c5:25:ad:36:16:
7b:a9:cb:2a:c9:0d:4f:0a:96:65:34:ec:d0:ba:f6:
6a:a6:e4:de:60:63:08:81:90:71:96:eb:d7:e9:a4:
9b:8e:bc:41:c4:06:31:de:27:10:23:09:94:40:6a:
86:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:70:D0:10:1D:41:F1:48:D1:E3:18:71:3D:AC:CF:0A:3B:CC:5B:19
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i3DQEB1B8UjR4xhxPazPCjvMWxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
93.190.246.0/23
IPv6:
2a0f:2ec0::/29
2a0f:31c0::/29
2a13:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
60:aa:00:c5:4c:c3:64:38:2f:69:1d:c2:88:a0:dc:c6:97:38:
d4:21:c5:f2:5a:0f:11:7f:21:40:4a:25:27:95:4b:9b:5a:56:
61:cc:6b:cd:af:2a:a2:f0:57:00:a9:22:4e:8d:5a:c0:b3:46:
42:f7:1e:f1:95:45:46:67:b3:f5:8b:2a:3f:ab:25:1c:16:f6:
72:2a:06:aa:93:c9:48:d4:42:7d:2b:c4:bf:74:d5:85:85:54:
69:88:7b:9c:fb:a5:43:e5:62:2c:55:f5:20:af:98:c7:1a:ac:
8a:b4:db:67:0a:18:39:86:4e:95:cd:16:1c:b2:e2:98:55:ba:
72:b1:58:80:93:11:bc:5d:20:a0:dd:d8:51:b6:aa:c6:34:b6:
ac:1f:50:c1:54:cb:8a:38:27:21:71:cc:45:a3:34:ea:32:96:
c7:04:e7:28:a9:d1:45:0a:58:3c:c9:d6:56:6d:06:8a:f7:42:
c8:f8:1a:dc:a6:50:04:e1:b0:bf:79:f6:0d:83:f6:04:ca:0a:
0a:e6:fc:d4:7c:ed:62:60:d1:2f:30:b9:dd:79:ae:e3:e8:8e:
77:50:22:0d:48:16:4a:4b:7d:cc:7c:5a:7e:88:56:a3:2b:55:
ba:e2:53:b6:98:0b:33:ef:41:38:37:75:f2:9a:41:10:64:81:
e6:ec:57:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:37:04 2025 by rpki-client