Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3qQ6JjMczvICIGq0wGATSOCHJFc.roa
File: 3qQ6JjMczvICIGq0wGATSOCHJFc.roa (raw, json)
Hash identifier: HdH2IQjAWEAuIaqVmn6UbTC6q/wMLX1FXYJm3GVTiWc=
Subject key identifier: DE:A4:3A:26:33:1C:CE:F2:02:20:6A:B4:C0:60:13:48:E0:87:24:57
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01909138D44AD64D5F0BF2EC1E147F0E8540
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3qQ6JjMczvICIGq0wGATSOCHJFc.roa
Signing time: Mon 08 Jul 2024 07:22:18 +0000
ROA not before: Mon 08 Jul 2024 07:22:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 45.151.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 08:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:38:d4:4a:d6:4d:5f:0b:f2:ec:1e:14:7f:0e:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 8 07:22:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dea43a26331ccef202206ab4c0601348e0872457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:86:2b:ce:fe:82:05:5a:4c:28:15:52:90:
f2:bd:ca:25:7a:11:23:ea:4d:a0:61:0c:0f:65:4d:
9f:20:66:36:ee:f5:04:6e:aa:f2:b8:3f:35:78:a3:
d7:29:a4:9d:6b:1f:a0:a7:08:87:39:62:fe:d5:6e:
f0:6c:7a:d2:6d:88:bd:d6:3b:81:24:58:f0:cd:56:
c8:0f:04:8b:62:af:de:31:3a:89:71:a9:c5:f9:1d:
87:62:d5:db:36:ca:9c:5f:ed:bc:77:03:9f:c6:1e:
a0:b4:18:e2:65:da:bc:aa:53:fa:d8:ae:88:f7:7e:
c5:49:81:21:9a:f8:d9:bc:ae:5e:48:db:0f:41:59:
99:58:83:e6:80:20:f8:a6:44:92:b5:4a:de:71:0e:
43:0e:7b:27:22:17:26:b5:a8:fe:d2:4f:19:a3:5e:
c2:ae:be:88:72:24:8f:12:9f:d7:3b:e1:53:1a:e7:
d6:39:78:28:81:e6:5c:49:38:39:81:37:6b:7e:70:
43:02:d4:fe:d7:97:f3:38:db:7a:ab:47:3a:cd:1e:
ff:c6:0d:38:66:24:56:2e:88:3d:a4:36:0a:f5:60:
26:0d:78:d7:02:7d:bc:e2:61:4c:86:39:b3:a8:a9:
e1:54:59:78:29:58:d3:09:8f:57:4b:6e:f7:b4:87:
51:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A4:3A:26:33:1C:CE:F2:02:20:6A:B4:C0:60:13:48:E0:87:24:57
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3qQ6JjMczvICIGq0wGATSOCHJFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.91.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ad:f1:1b:1b:43:96:f5:02:47:bc:3a:ca:9f:d9:41:ea:c9:
c2:aa:99:ac:21:3b:0e:38:3f:d1:31:de:76:89:9b:87:aa:55:
4a:ca:d3:ea:c1:6d:8a:28:6b:2d:87:2f:15:bc:0e:ed:7c:e8:
39:8e:f2:58:4e:d1:e5:fc:7a:84:bb:b9:68:24:d2:c0:d7:c9:
c6:25:cc:64:42:54:82:1a:60:b0:ac:95:13:39:1d:bd:c1:45:
fb:34:e7:bd:f8:34:7e:c9:e7:7e:f5:c1:c4:29:e1:bb:2c:ef:
2a:92:25:08:c4:0b:8e:68:f8:1f:21:25:9f:02:25:b4:2d:ad:
c0:09:58:a0:d5:2f:bd:ac:46:2c:0a:df:87:a4:ca:5a:6f:97:
5d:ae:b4:6f:a3:9e:d4:7f:9b:57:b2:28:41:c8:2d:f7:56:7c:
4a:e4:d8:80:41:6b:cb:e4:f4:b2:97:cd:b9:07:f0:c0:a8:b0:
de:88:60:65:74:d2:6b:0b:6b:65:80:80:8a:f8:9b:5f:e4:05:
49:e2:e8:0c:83:6f:79:37:b3:c8:10:30:77:00:cf:11:56:40:
98:89:d4:10:ea:a0:c5:4e:bc:1f:62:cb:20:3f:9f:b7:fb:ef:
9c:8a:cd:6c:a6:6c:b5:6e:58:e9:79:13:58:46:07:fa:5c:b7:
f9:ba:4e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 10:00:51 2024 by rpki-client on console-fra.rpki-client.org