Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kjeR8tajM1oqVKhu3mj2iJgcky4.roa
File: kjeR8tajM1oqVKhu3mj2iJgcky4.roa (raw, json)
Hash identifier: a/BCRR5noByRFV7KnUrbBQOjGtVG04qkUh70mpWBB1g=
Subject key identifier: 92:37:91:F2:D6:A3:33:5A:2A:54:A8:6E:DE:68:F6:88:98:1C:93:2E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018D3A8242BB879F1871E0574CCDD61680B8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kjeR8tajM1oqVKhu3mj2iJgcky4.roa
Signing time: Wed 24 Jan 2024 08:07:11 +0000
ROA not before: Wed 24 Jan 2024 08:07:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.128.26.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 22 Feb 2024 08:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:82:42:bb:87:9f:18:71:e0:57:4c:cd:d6:16:80:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 24 08:07:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=923791f2d6a3335a2a54a86ede68f688981c932e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:2b:67:4f:0a:19:af:1b:b2:d9:ef:c1:44:
df:ff:6e:e2:5c:0b:77:6c:cb:df:f8:cf:fa:82:f9:
10:f3:8b:31:e5:b9:ec:b4:54:73:24:13:20:9d:15:
b7:c0:f9:3f:cc:d9:d4:21:34:97:ea:5f:0e:fa:c0:
e6:14:34:21:d1:74:4e:65:bd:d4:06:be:26:0f:3f:
86:57:5c:ab:36:4d:66:6c:71:13:0d:87:1f:d3:08:
5e:6e:2d:80:3c:9a:3e:d8:59:61:23:c3:ea:8a:72:
ea:c0:82:d7:b2:37:94:55:ef:d3:f9:60:c9:8c:7a:
aa:fa:96:68:9f:8a:72:30:ac:36:f6:83:af:bb:65:
55:c3:cc:9c:e6:07:ed:c1:21:ce:a7:79:2a:4c:5d:
92:fb:cb:b8:5b:e8:91:7a:78:64:d0:b9:09:09:e7:
90:12:c4:a1:f8:11:3e:38:b4:8e:05:33:0e:8c:4a:
d4:60:8f:10:26:1f:72:a7:b7:95:9c:0a:c5:67:07:
7b:7f:f2:79:e9:0a:2e:7e:1b:07:3b:86:e3:a9:5b:
56:49:94:c4:2e:1d:15:a8:16:3e:d1:2d:5d:7d:58:
c1:1e:35:a4:0c:34:fc:1f:9c:06:b0:47:dc:f4:93:
03:30:71:a7:31:a4:34:48:fe:19:b7:ed:92:8e:24:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:37:91:F2:D6:A3:33:5A:2A:54:A8:6E:DE:68:F6:88:98:1C:93:2E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kjeR8tajM1oqVKhu3mj2iJgcky4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
93.190.246.0/23
Signature Algorithm: sha256WithRSAEncryption
76:30:cb:c0:4d:3e:8f:03:d8:7a:53:0d:be:99:df:e1:7e:9e:
35:c4:49:51:c9:74:89:53:60:55:32:20:bf:76:49:f7:5e:6d:
7a:73:03:cc:a0:66:f7:73:90:2f:14:d2:0e:e4:62:69:fe:6a:
03:86:99:7e:48:11:75:24:37:f7:57:74:21:84:be:4c:3c:ca:
2f:1d:40:8f:78:7c:8f:12:bd:e5:2c:e6:b0:8d:59:93:10:ae:
0b:32:9b:27:45:0e:d3:ab:e2:f5:07:76:20:79:3a:56:83:c1:
dd:d3:21:b5:1f:e0:68:66:ba:c0:51:53:de:d0:97:d5:8c:0c:
0b:3e:c4:ca:0c:d6:e2:26:63:12:4c:16:19:5e:97:2a:50:36:
f4:b3:cb:4e:9d:79:6f:eb:5c:40:e1:49:35:3b:61:1b:de:1d:
b1:52:85:86:ac:e6:37:c4:68:43:43:b5:79:05:51:dd:83:0e:
ee:b3:3a:11:9e:f6:ef:7a:b8:7d:ec:f5:a8:a6:22:f2:52:c7:
b2:fe:7c:d6:b6:95:8a:af:f8:7a:f9:e5:7b:fe:9a:7e:36:cd:
33:d5:d3:5c:bf:7a:c1:81:cf:9c:d1:71:90:dc:f7:aa:b7:c0:
f0:69:42:a6:d2:f8:1f:32:1f:ed:62:58:bb:09:11:ff:be:5e:
98:e4:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:40:45 2025 by rpki-client