Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-VjTI6ymtrNs_ipZFEflEcud22o.roa
File: 1-VjTI6ymtrNs_ipZFEflEcud22o.roa (raw, json)
Hash identifier: bP3aowwkS9pZiaeUvX2i9np+10lXopNddjR827+xPjg=
Subject key identifier: F9:58:D3:23:AC:A6:B6:B3:6C:FE:2A:59:14:47:E5:11:CB:9D:DB:6A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F81176734022E7750B73147A8AFD481FF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-VjTI6ymtrNs_ipZFEflEcud22o.roa
Signing time: Thu 16 May 2024 11:09:05 +0000
ROA not before: Thu 16 May 2024 11:09:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215343
IP address blocks: 37.139.129.0/24 maxlen: 24
45.8.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 13:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:17:67:34:02:2e:77:50:b7:31:47:a8:af:d4:81:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 16 11:09:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f958d323aca6b6b36cfe2a591447e511cb9ddb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d5:0d:26:eb:0b:2b:fa:c1:c6:cd:89:75:78:
4f:b9:4e:05:e1:28:f0:5e:f3:d5:59:0e:81:76:c6:
5d:70:3f:87:40:11:36:e7:14:c5:43:97:14:62:ba:
9e:f4:7b:78:c2:65:e5:ac:6e:ef:7e:0a:52:a6:24:
1e:19:d7:1f:86:77:dd:9d:83:85:a9:8e:9d:60:ae:
29:78:5d:f9:ed:49:96:0b:d8:c6:5a:83:15:40:ec:
84:5c:9f:83:86:55:66:24:84:66:8d:21:a9:64:b2:
c0:1b:af:85:9d:e3:4f:9c:29:4a:62:a0:67:46:39:
db:88:5a:da:77:17:eb:aa:e5:00:4d:01:29:3d:a3:
45:cb:94:d1:f6:c7:25:66:c9:cc:25:ba:67:cf:21:
a3:49:59:2f:20:e6:6f:e7:88:2e:c2:97:a2:23:d7:
54:6b:ff:dd:b6:4c:3a:3f:40:d4:bf:aa:8a:42:e3:
96:36:1e:9b:6a:f6:6a:1d:6e:ac:39:63:83:a7:fc:
84:b4:a6:10:55:a2:b8:9d:50:46:54:49:a1:0e:e0:
93:44:c1:90:a8:c0:21:79:2f:dc:59:34:bf:cc:c3:
4a:a0:df:23:51:38:97:30:1b:c8:2c:a7:b0:03:6c:
d5:57:57:0b:bd:2a:99:81:d4:ee:d0:be:4f:5e:2f:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:D3:23:AC:A6:B6:B3:6C:FE:2A:59:14:47:E5:11:CB:9D:DB:6A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-VjTI6ymtrNs_ipZFEflEcud22o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.129.0/24
45.8.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c1:9a:0c:f9:18:0d:ac:ce:97:39:b6:b7:34:2f:9d:a1:11:
1e:c5:c2:bf:3c:b1:c3:74:b9:48:35:8f:02:b8:7f:ec:cc:ea:
c1:56:9a:5e:08:35:55:49:1b:fd:a7:de:4b:55:f7:04:d5:49:
3c:ed:9d:73:07:88:d8:36:5b:30:28:8c:f9:09:de:43:33:e9:
9d:23:e8:d8:d0:5d:e9:92:56:9b:32:c3:7e:39:9a:87:c2:4a:
7c:4f:5c:f7:3a:ab:0b:dc:20:c2:64:29:19:09:fb:cf:28:79:
5d:af:b0:20:a8:71:f5:fa:1f:4e:db:2d:e0:59:14:4d:18:78:
99:f8:95:62:64:42:39:be:ea:2a:c1:f9:c8:71:b4:57:90:74:
e8:90:5b:7b:d0:0a:8f:20:2f:24:a0:24:7f:ad:4f:08:12:68:
83:40:99:7a:56:20:f2:23:b9:b8:8c:ca:df:29:35:bc:94:07:
e4:f2:cb:3c:92:d8:0a:dc:cd:d0:05:37:0a:77:77:c0:83:18:
86:d3:11:b0:13:4d:05:05:84:9e:06:e4:1b:c9:26:35:8c:dc:
3c:d3:5e:2a:16:42:73:32:6b:5c:04:dc:3c:ff:20:9a:ec:c9:
6c:8f:1d:ba:b9:4e:9b:9c:4f:c7:7d:81:38:9e:12:1b:03:89:
e2:a2:5f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:56 2024 by rpki-client on console-fra.rpki-client.org