Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/0dE_a7A5N3kVd-fj11roSczrjKs.roa
File: 0dE_a7A5N3kVd-fj11roSczrjKs.roa (raw, json)
Hash identifier: WDufLPu0hy7TnYq5s35d8xwudq3CFAiDrc0KxvbLxos=
Subject key identifier: D1:D1:3F:6B:B0:39:37:79:15:77:E7:E3:D7:5A:E8:49:CC:EB:8C:AB
Certificate issuer: /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Certificate serial: 019026EBEDECFCEEDA2E6153478E2C56AE7E
Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/0dE_a7A5N3kVd-fj11roSczrjKs.roa
Signing time: Mon 17 Jun 2024 15:58:34 +0000
ROA not before: Mon 17 Jun 2024 15:58:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201301
IP address blocks: 185.45.98.0/23 maxlen: 23
185.45.98.0/24 maxlen: 24
185.45.99.0/24 maxlen: 24
2a04:a182::/32 maxlen: 33
2a04:a183::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jul 2024 14:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:26:eb:ed:ec:fc:ee:da:2e:61:53:47:8e:2c:56:ae:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Validity
Not Before: Jun 17 15:58:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1d13f6bb03937791577e7e3d75ae849cceb8cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:5c:f4:a1:1a:2d:67:36:4f:15:53:bb:df:
b7:31:af:0a:38:17:08:83:6f:6f:50:a3:7c:16:05:
da:ff:dc:f8:07:82:e2:84:46:57:c7:0b:25:08:f0:
fb:ba:60:a3:92:47:06:a9:8a:c6:29:0f:f6:fe:0e:
34:ae:24:79:c6:29:73:76:54:e0:74:7f:e3:05:9a:
37:30:54:19:9d:87:92:71:c4:22:70:fc:37:b7:bc:
f3:d4:d4:e6:b5:d8:39:21:75:d0:a1:28:14:df:5c:
48:36:ee:29:53:e0:0a:e4:35:10:fb:52:23:79:62:
09:18:79:d6:82:f2:0a:7a:8d:5f:40:56:fd:35:ee:
ed:88:be:e7:a7:b8:de:7c:a3:18:33:93:ab:33:eb:
7c:0e:0a:9e:89:3d:60:68:17:32:79:1d:77:5e:ae:
a3:2d:f1:c6:0b:20:a8:17:d4:fd:69:c0:54:dc:d8:
85:c6:20:10:f3:02:a9:9c:dd:3c:8f:f0:51:ad:8d:
c2:6b:72:cf:e4:e3:82:a6:45:3d:17:ac:8c:fe:70:
be:d8:1f:fe:0c:c3:d2:94:92:7f:1b:b1:4f:c1:69:
b3:58:70:b9:50:0f:c9:e6:ee:48:9f:cf:aa:02:7f:
20:c2:45:e3:d0:d7:1d:d7:1f:11:ff:80:db:85:84:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D1:3F:6B:B0:39:37:79:15:77:E7:E3:D7:5A:E8:49:CC:EB:8C:AB
X509v3 Authority Key Identifier:
keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/0dE_a7A5N3kVd-fj11roSczrjKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.98.0/23
IPv6:
2a04:a182::/31
Signature Algorithm: sha256WithRSAEncryption
d4:0a:ec:2a:f8:07:9c:61:21:f1:ad:f5:5e:32:3d:a3:9d:96:
de:a3:fb:0e:2c:d5:86:e9:9c:08:54:65:c4:58:c6:df:ed:de:
d0:65:02:0b:51:42:24:0a:53:a3:b0:39:bc:d3:25:0a:ca:63:
0d:55:e2:bc:84:9d:e0:bc:09:02:c7:35:2f:09:d8:14:d6:7e:
a9:9e:bd:60:89:5d:ba:9d:2c:1b:23:ed:c4:35:77:f2:bd:21:
f7:ca:38:3b:9a:84:6e:5c:1b:66:26:2a:de:61:dc:97:0f:83:
df:1c:fc:1e:2e:87:a0:9b:3e:99:12:f0:46:1b:74:2d:72:7a:
71:5c:c3:a6:41:00:fc:05:d3:ff:77:5d:99:90:74:33:30:f4:
ea:dc:24:e9:ed:18:04:d0:30:66:96:08:19:9b:86:ae:9d:40:
9b:1a:ee:13:3c:6a:fa:85:18:6b:cf:df:bf:9f:c4:40:96:48:
65:a9:37:62:18:ef:bd:05:19:bd:df:0b:7b:e6:0c:ea:e7:95:
25:01:55:ad:a0:2d:07:b2:af:a1:f0:6d:a7:7e:ab:97:10:86:
5d:08:1e:37:00:97:48:57:fa:7c:cd:2d:91:11:9a:e6:5d:46:
14:f5:59:5d:11:af:64:0e:24:0b:2f:64:92:84:c4:da:32:28:
a5:03:e2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 16:18:55 2024 by rpki-client on console-fra.rpki-client.org