Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6-njxaoX68MRUJ6jSSd4HIh5AvM.roa
File: 6-njxaoX68MRUJ6jSSd4HIh5AvM.roa (raw, json)
Hash identifier: j6Lc06exj7C0d2B6khstnc0cCDabBGJtrEgPXOI1mmA=
Subject key identifier: EB:E9:E3:C5:AA:17:EB:C3:11:50:9E:A3:49:27:78:1C:88:79:02:F3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192D73AA3D5462216FAC4EAE408681BEDB8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6-njxaoX68MRUJ6jSSd4HIh5AvM.roa
Signing time: Tue 29 Oct 2024 07:43:17 +0000
ROA not before: Tue 29 Oct 2024 07:43:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207957
IP address blocks: 45.128.99.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 06:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:3a:a3:d5:46:22:16:fa:c4:ea:e4:08:68:1b:ed:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 29 07:43:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebe9e3c5aa17ebc311509ea34927781c887902f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:c2:0e:50:83:6b:4f:e1:08:c6:bc:10:27:
f7:3f:b7:d7:73:8e:14:33:c1:ca:7f:34:5f:45:6f:
3a:87:04:45:c0:ee:71:6f:67:99:28:7f:a4:15:cd:
f8:92:55:0e:f5:c1:09:e3:84:3d:2f:85:2e:f3:b1:
a5:78:b2:04:eb:82:04:85:93:ef:a6:ab:ba:03:e5:
30:0e:50:70:e1:4a:a1:51:aa:71:bc:ee:86:ef:e2:
43:82:b4:1b:88:6b:8b:ee:91:cc:75:0e:8e:28:2b:
f9:c9:b7:16:1c:a1:bd:2b:f6:d8:1a:ed:9c:26:9a:
ce:b1:ef:6c:0f:21:dd:48:9e:16:3a:6a:ed:5c:67:
c4:57:03:7a:54:71:e9:dd:43:29:bd:f1:d3:cb:06:
7f:38:68:80:9f:49:f6:b2:a5:af:d9:bf:2a:22:66:
93:ef:c5:db:a3:85:f5:60:5d:33:be:9c:e3:e7:c3:
4f:b2:73:15:ae:37:68:0c:ad:0b:b7:42:b5:23:bc:
0b:da:ca:c4:b2:ca:db:78:36:f9:6c:6b:90:53:6a:
15:af:c4:47:32:0e:b2:26:6a:84:cb:bb:b4:f2:30:
f6:65:73:b9:4b:51:b3:10:ba:3c:6e:a0:31:34:ba:
0d:7d:2d:1d:9b:a5:8a:e2:2d:b3:d2:3c:57:90:48:
77:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E9:E3:C5:AA:17:EB:C3:11:50:9E:A3:49:27:78:1C:88:79:02:F3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6-njxaoX68MRUJ6jSSd4HIh5AvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.99.0/24
45.149.235.0/24
Signature Algorithm: sha256WithRSAEncryption
11:96:e4:29:1a:c3:83:41:ae:81:7e:57:54:e7:7a:cc:c8:2b:
cf:0f:b6:c0:55:9a:77:c8:ba:d8:03:6c:4c:75:2e:e5:a3:95:
1f:a9:dc:75:38:9c:97:31:82:12:e6:ab:af:dc:c9:eb:41:bd:
1a:1a:58:23:6c:51:13:91:4f:92:7f:03:67:9e:a0:c0:a3:de:
32:6e:4e:7f:20:2a:19:d8:7a:4c:03:9b:b0:bb:24:0f:df:46:
1e:7c:ea:9a:41:21:42:b9:d3:fd:58:e3:0a:d5:48:b8:ab:07:
1d:a9:6e:8a:bd:b2:41:06:85:10:39:cb:20:2e:80:43:4e:f1:
e7:73:ec:20:7b:7d:16:c0:b1:74:59:44:5f:a1:be:b5:f4:5d:
5f:7d:1b:61:87:6a:01:72:ad:88:e4:f3:d6:48:e8:f5:ef:29:
ab:cc:80:f3:ba:7f:68:c7:bd:6f:b2:67:b2:c0:e3:4f:ed:63:
ab:db:a5:d0:b7:a1:b8:d2:25:bf:db:b3:49:66:8b:ce:48:61:
32:e5:ce:32:e5:45:6e:94:d2:26:c1:ad:bf:a7:40:05:0d:e6:
d2:0f:e8:49:76:83:3f:b6:21:8e:6c:9c:fe:2e:54:ca:4c:ec:
3b:48:96:59:52:8f:71:12:28:fd:fe:c1:4e:07:b2:44:68:ee:
38:f1:f3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 08:19:28 2024 by rpki-client on console-fra.rpki-client.org