Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/PwIFtS5Hz4MCpPSH8I2-FZ8zK5k.roa
File: PwIFtS5Hz4MCpPSH8I2-FZ8zK5k.roa (raw, json)
Hash identifier: r7ghvXxNA7IKtE9b9a9lShnwMsec08FmimEnGxJZU+g=
Subject key identifier: 3F:02:05:B5:2E:47:CF:83:02:A4:F4:87:F0:8D:BE:15:9F:33:2B:99
Certificate issuer: /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial: 018BBFF66293A11E55F99A99E63A35E1159D
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/PwIFtS5Hz4MCpPSH8I2-FZ8zK5k.roa
Signing time: Sat 11 Nov 2023 19:57:57 +0000
ROA not before: Sat 11 Nov 2023 19:57:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47482
IP address blocks: 45.66.35.0/24 maxlen: 24
45.66.32.0/24 maxlen: 24
45.66.33.0/24 maxlen: 24
45.66.34.0/24 maxlen: 24
2a09:61c0::/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 04 Dec 2023 12:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bf:f6:62:93:a1:1e:55:f9:9a:99:e6:3a:35:e1:15:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Validity
Not Before: Nov 11 19:57:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f0205b52e47cf8302a4f487f08dbe159f332b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9f:d6:0c:a4:6c:cb:29:79:15:24:b3:59:65:
fd:50:8a:83:47:e7:3e:2b:f0:14:e0:b6:c1:9d:89:
36:65:a1:9a:de:fc:0f:94:68:c3:c2:95:d5:21:f2:
28:5d:9d:43:73:49:fe:d9:d9:11:7a:88:04:6d:3c:
59:36:6e:c9:5b:fa:62:7f:2a:e7:5b:22:5f:c3:5d:
b0:c0:b6:e9:48:79:fc:38:a0:2b:28:d6:f1:5f:a0:
08:69:f2:63:4c:c1:60:e7:a3:c1:c7:5d:5a:86:28:
08:00:c4:46:a5:2b:38:11:fd:83:9f:8b:b4:e4:07:
90:77:fe:27:b1:ff:cf:3c:94:b9:ef:73:7f:c1:9c:
31:76:90:55:bf:88:8f:81:b6:d2:b8:9f:ac:8d:55:
67:86:6f:ab:7e:e0:55:62:18:40:16:52:0a:fb:f8:
aa:7e:1a:37:8b:97:d8:57:57:30:6f:60:af:68:11:
f4:38:52:52:1f:38:3d:8d:59:26:b9:e1:e1:9d:40:
70:c7:1c:55:7e:d3:92:b1:57:0f:7a:f9:41:2e:19:
bb:06:a4:62:29:9f:de:01:74:d2:17:b5:30:f2:6e:
3d:07:8d:b1:df:61:65:1b:ad:eb:9d:37:94:58:c5:
7c:9d:88:cf:94:8e:a0:76:44:d0:7e:a2:34:73:6a:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:02:05:B5:2E:47:CF:83:02:A4:F4:87:F0:8D:BE:15:9F:33:2B:99
X509v3 Authority Key Identifier:
keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/PwIFtS5Hz4MCpPSH8I2-FZ8zK5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.32.0/22
IPv6:
2a09:61c0::/30
Signature Algorithm: sha256WithRSAEncryption
38:69:91:52:35:21:72:25:67:ef:7f:97:ac:c4:7b:a4:92:e3:
95:c4:66:05:a3:ef:a3:37:b3:d9:86:01:7b:a9:8b:92:2e:55:
e5:08:05:d6:91:ff:d2:b2:2e:aa:c7:97:79:51:42:31:40:d9:
ea:69:a2:f1:01:47:0b:08:17:20:18:91:3e:40:89:32:cf:5c:
26:1e:a8:97:43:72:77:4c:90:c3:5b:49:ef:5e:5f:57:5b:de:
a5:83:69:7b:f2:a6:7c:df:a5:5d:04:6b:bc:9d:49:bf:ec:ca:
d7:ab:50:1d:4b:b5:cd:69:a8:21:e9:57:d3:c8:c7:62:85:6f:
a1:84:56:6b:1d:09:95:cf:f5:8e:03:4e:15:c2:85:ac:6e:15:
5b:c2:91:1f:b9:6c:85:07:11:76:e0:65:65:f5:f4:c1:f1:d9:
67:39:72:e7:22:15:a8:ef:e6:b9:4c:9c:82:b7:d3:c5:d4:1b:
89:9e:cf:d1:16:73:85:f1:50:6f:dc:c3:f0:88:f1:38:0e:40:
ca:50:c6:f3:04:dd:77:83:aa:29:df:7d:37:74:19:c9:b7:67:
aa:8c:a9:e3:a6:51:10:b6:52:4e:69:99:e1:cf:00:77:f1:fd:
35:bd:66:e8:5d:8e:da:6b:eb:bc:5f:f7:49:a8:12:67:1a:f7:
20:4d:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:09 2024 by rpki-client on console-fra.rpki-client.org