Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0mT2tjMBNfQJPKCs1PpCrccau6M.roa
File: 0mT2tjMBNfQJPKCs1PpCrccau6M.roa (raw, json)
Hash identifier: +dExWx73Nmk39/EL7qyL/MHB4gvKapyOv7Y25wEKrR4=
Subject key identifier: D2:64:F6:B6:33:01:35:F4:09:3C:A0:AC:D4:FA:42:AD:C7:1A:BB:A3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01918D8A170B448C0BF6A17FB4F1A72185D6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0mT2tjMBNfQJPKCs1PpCrccau6M.roa
Signing time: Mon 26 Aug 2024 07:15:22 +0000
ROA not before: Mon 26 Aug 2024 07:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41745
IP address blocks: 45.12.254.0/24 maxlen: 24
45.14.165.0/24 maxlen: 24
45.81.243.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
85.209.134.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 07:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8d:8a:17:0b:44:8c:0b:f6:a1:7f:b4:f1:a7:21:85:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 26 07:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d264f6b6330135f4093ca0acd4fa42adc71abba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:53:e3:10:36:89:e5:e2:13:fa:de:23:31:
84:49:96:c5:a9:e1:49:6f:f4:eb:fc:ec:d3:96:92:
dc:5f:01:e1:35:0b:90:f7:33:5b:d1:8f:d8:19:ce:
7d:1e:a0:ba:bb:f2:0f:d7:83:ce:2f:86:6c:b5:ac:
75:33:96:0f:93:67:5d:61:f3:4d:df:5a:50:f1:74:
70:ca:f5:a8:5e:05:84:6c:71:f4:57:b6:84:13:18:
f7:47:9a:00:b6:06:20:6a:7f:16:45:f6:e0:a0:19:
c6:88:f3:53:70:35:ee:bd:08:ec:71:fe:71:94:50:
19:6b:0d:de:9f:0e:69:f0:cf:22:1d:82:87:77:f0:
cd:73:b3:fc:f5:c5:34:f1:5b:93:67:27:4e:e4:f1:
ff:c6:21:c6:98:9f:b9:13:d3:b1:75:ec:1d:bc:37:
42:30:ed:46:77:9a:81:27:97:08:d2:a4:7f:83:2c:
83:ab:f3:ac:66:e1:6b:de:ce:ea:5a:0f:ae:53:db:
51:84:aa:04:06:cf:93:0b:e0:b6:e0:9a:fb:89:4d:
67:98:d3:c2:ed:16:4e:c0:e4:3b:d2:5a:c6:7d:85:
c6:55:76:30:63:df:b2:12:80:6b:6b:cf:ec:9f:07:
d0:ca:11:86:1b:9a:27:48:b0:02:84:93:55:85:b4:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:64:F6:B6:33:01:35:F4:09:3C:A0:AC:D4:FA:42:AD:C7:1A:BB:A3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0mT2tjMBNfQJPKCs1PpCrccau6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.254.0/24
45.14.165.0/24
45.81.243.0/24
45.88.67.0/24
85.209.134.0/24
109.206.241.0/24
Signature Algorithm: sha256WithRSAEncryption
07:10:a3:0c:19:32:11:70:a2:26:c9:a8:73:a2:bf:2f:a8:b4:
60:fd:9b:a6:5d:a2:ea:0c:1d:5f:e8:eb:fd:b2:a3:91:cf:f0:
34:3d:2e:dd:43:8d:23:51:fb:92:d0:91:5b:69:5c:47:6f:15:
a5:bc:45:0e:97:60:00:9c:d0:80:e1:17:10:e1:28:26:ef:a6:
01:bb:70:53:74:ea:20:09:f6:61:ba:d0:0b:75:a3:b9:55:a5:
37:42:cc:56:65:74:b3:fa:11:bd:e1:40:dc:e1:0f:51:fd:6e:
07:9c:ec:dd:67:54:ea:52:d3:41:a2:47:85:07:95:a9:8b:c3:
6d:4a:81:94:b3:db:6b:10:06:5b:c4:74:77:28:b5:85:21:55:
d6:32:ad:0a:e2:a9:d2:e4:93:4a:c3:05:62:34:19:51:e0:d3:
f8:69:b8:68:98:95:32:8b:d5:29:1f:b6:f5:b3:20:be:67:0b:
4f:8b:2b:a4:93:74:cc:e9:b7:19:ea:a5:6e:ff:9a:61:05:38:
70:ac:7a:3f:5c:83:d5:ac:da:d0:7d:8d:0e:52:2f:64:a3:d7:
49:82:69:30:fe:74:da:57:c4:00:b0:e4:6e:97:ce:51:db:da:
5b:9b:c6:da:16:e6:6e:e7:41:b6:59:b6:17:1b:cb:d7:4a:ac:
55:dc:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 08:09:57 2024 by rpki-client on console-ams.rpki-client.org