Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/3wUfppmdqHed4gyJxa3M8TYdXXQ.roa
File: 3wUfppmdqHed4gyJxa3M8TYdXXQ.roa (raw, json)
Hash identifier: MenSSeONW33fCxqqHiqurtvNuAsA9QoJy5DOGP/rYoM=
Subject key identifier: DF:05:1F:A6:99:9D:A8:77:9D:E2:0C:89:C5:AD:CC:F1:36:1D:5D:74
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018F75958BFE55B533071F8E0FEF2FBAD9A7
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/3wUfppmdqHed4gyJxa3M8TYdXXQ.roa
Signing time: Tue 14 May 2024 05:31:25 +0000
ROA not before: Tue 14 May 2024 05:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207713
IP address blocks: 45.150.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Oct 2024 13:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:75:95:8b:fe:55:b5:33:07:1f:8e:0f:ef:2f:ba:d9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: May 14 05:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df051fa6999da8779de20c89c5adccf1361d5d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:ca:13:45:b9:0c:3b:39:8b:e2:69:2f:99:
1e:e9:f2:9e:f1:04:4b:62:50:6c:51:9b:19:18:55:
b7:59:3d:a5:89:79:0b:2e:bc:96:ab:ac:d6:7b:c6:
83:e1:e5:78:d5:ef:53:a7:ee:74:f2:8a:2c:5c:3e:
70:e7:a4:bb:b5:2d:f7:fa:75:1d:a9:0a:c4:a3:54:
3d:ff:1a:34:2e:ab:e3:99:f5:7f:3f:d7:39:88:49:
4d:3a:75:3a:d5:91:e2:d2:68:41:e8:47:12:2d:cb:
da:db:f8:36:e3:3a:22:7b:40:03:48:66:37:e3:6a:
42:db:61:ad:0d:5f:2d:10:11:52:3e:bf:0d:ce:aa:
29:2d:92:67:9d:b2:b4:ef:04:d4:65:67:92:6e:43:
a4:e3:2b:77:35:be:6f:31:bd:83:49:84:7a:8d:c2:
15:a7:9f:a9:59:c0:db:cf:e3:69:ed:71:a6:21:58:
ae:3c:7e:28:48:b8:a0:29:44:c8:5f:a7:3e:00:e2:
6b:0f:32:48:c4:d2:eb:8d:40:5c:c8:18:64:0c:cd:
63:1c:94:80:86:1c:dd:65:be:9c:d1:3f:14:01:ae:
bf:7e:0a:41:c2:9b:32:38:40:92:7b:ed:70:89:fc:
e5:cd:5e:10:68:ac:cb:7d:78:c7:c6:e2:fd:56:b6:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:05:1F:A6:99:9D:A8:77:9D:E2:0C:89:C5:AD:CC:F1:36:1D:5D:74
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/3wUfppmdqHed4gyJxa3M8TYdXXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.109.0/24
Signature Algorithm: sha256WithRSAEncryption
45:da:ee:6f:a3:bd:3e:81:60:81:ac:02:07:52:35:1e:36:34:
49:69:d7:51:6d:cd:b2:c5:12:a1:fb:1e:82:8b:14:be:84:4f:
da:23:46:d9:2a:f5:3c:8b:89:a7:8e:74:7d:9c:64:19:17:bb:
c7:2c:53:43:a5:78:0c:6e:ec:fa:81:fb:94:77:54:fb:4f:4f:
3e:18:e0:f6:9b:c2:fe:8e:ae:20:46:6d:bd:86:5f:72:2e:96:
ec:e5:fa:75:06:20:11:cf:2e:1c:94:cd:1a:53:c3:a6:b9:52:
bd:69:89:f3:da:d2:c4:9b:f5:97:08:11:24:93:93:62:a8:b4:
8b:2d:f6:e3:db:c4:17:b1:b1:da:02:a1:3a:f4:0e:b8:34:ef:
8c:e6:bb:1c:95:b4:f3:db:21:af:ac:be:eb:5c:64:a1:22:ef:
c7:09:e4:39:aa:7b:f6:3f:6f:93:49:35:52:a3:0d:f2:e6:08:
c8:3c:d6:43:8e:83:c3:d9:a6:19:50:2b:33:bc:0b:a8:79:c7:
ed:9f:c2:e6:a0:19:10:f3:ee:dd:0c:5c:a5:78:95:10:f5:ff:
ed:b7:5b:6d:21:d2:5b:38:0b:c5:d8:a1:29:d5:d2:18:6a:5e:
e6:c4:0d:b0:c1:5a:80:a7:9c:3f:44:5d:44:8b:7a:bc:72:f0:
f1:f3:ee:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 15:10:59 2024 by rpki-client on console-ams.rpki-client.org