Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6pwor2KGdTIeVf8v9eEdelV3R4Y.roa
File: 6pwor2KGdTIeVf8v9eEdelV3R4Y.roa (raw, json)
Hash identifier: QCqFmjU5mMklW+2wVTEemwslu0FKYvGIR7eViJunbDA=
Subject key identifier: EA:9C:28:AF:62:86:75:32:1E:55:FF:2F:F5:E1:1D:7A:55:77:47:86
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192DC15037E82EE9ADE941B82846BD74B6D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6pwor2KGdTIeVf8v9eEdelV3R4Y.roa
Signing time: Wed 30 Oct 2024 06:20:17 +0000
ROA not before: Wed 30 Oct 2024 06:20:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 45.95.1.0/24 maxlen: 24
45.95.3.0/24 maxlen: 24
87.121.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 15:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:15:03:7e:82:ee:9a:de:94:1b:82:84:6b:d7:4b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 30 06:20:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea9c28af628675321e55ff2ff5e11d7a55774786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:81:de:5f:22:b2:14:5b:70:23:44:94:9e:
10:2f:26:cf:ea:bd:0a:9f:aa:5f:57:70:54:4e:8f:
4a:77:8d:aa:2f:ae:bd:34:3f:73:b7:13:3b:90:0c:
96:63:6f:6d:cf:c3:87:47:85:c2:17:31:45:f1:fe:
80:5f:55:18:16:dd:d2:f1:c5:93:89:d8:9a:38:29:
42:4c:cc:cf:4d:57:3d:34:ec:b4:52:e7:3e:c2:a3:
fe:34:5a:2c:00:bb:af:7e:8f:67:99:40:94:10:d2:
01:0a:39:1f:36:f7:45:02:12:ec:a7:c6:69:b9:0e:
79:62:2c:69:91:9a:41:22:bc:a4:1c:ee:0b:5e:79:
20:68:e5:f7:98:71:26:41:de:5d:7d:fd:93:25:6d:
cb:39:a2:2b:d9:c4:b7:19:bc:b0:35:1a:a1:10:a0:
43:57:19:c9:d0:4c:a3:6b:c2:df:29:37:ed:59:f6:
23:00:e4:7f:29:6c:9b:6f:1d:d1:77:f8:22:3f:35:
6e:44:34:4c:5a:94:e3:ba:86:e2:d8:cc:39:dc:8e:
52:f9:55:c9:6e:f0:17:ad:66:c7:b0:a2:6a:fd:2c:
6c:be:eb:44:9d:93:63:af:5c:02:39:ad:d8:86:6a:
af:77:40:20:fa:ef:b4:7f:76:5d:ed:4f:3a:a6:d5:
d9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9C:28:AF:62:86:75:32:1E:55:FF:2F:F5:E1:1D:7A:55:77:47:86
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6pwor2KGdTIeVf8v9eEdelV3R4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.1.0/24
45.95.3.0/24
87.121.217.0/24
Signature Algorithm: sha256WithRSAEncryption
36:40:e2:75:2e:19:3e:7f:25:d1:67:d3:04:a5:1a:89:e1:5c:
d8:41:d8:11:11:1e:21:6b:60:2e:e9:36:6f:cf:8a:bd:ee:3f:
4b:b4:f5:5b:ab:b7:59:79:9e:1c:71:5a:c4:b0:e1:49:08:da:
66:71:cb:84:e9:2b:c0:9e:37:0e:ef:3e:36:ad:68:ea:41:5e:
51:b3:34:06:d1:04:2a:17:6c:65:45:32:e4:0b:50:95:88:86:
fc:f7:78:c0:45:11:7e:6e:99:08:12:c2:0f:38:f9:9b:74:cb:
b9:7e:8b:60:b0:da:c2:16:f6:76:a9:91:02:0e:8f:e7:8b:a3:
34:cd:f5:21:bd:09:07:15:93:fb:dc:9f:33:e7:e1:57:95:27:
31:35:c3:6d:88:d5:ec:78:4b:de:87:d1:c6:45:da:83:ab:73:
aa:6b:a2:31:ad:39:1b:3d:08:03:74:e2:70:8e:95:7d:37:34:
ec:4d:ef:d2:fd:dc:b3:48:3f:00:f1:bb:62:b0:d0:34:5f:90:
7a:fc:8f:83:c2:7d:27:86:65:19:c8:a0:af:48:22:32:3a:47:
99:02:e4:76:c8:7b:a3:20:49:8f:6e:38:f6:31:7d:11:1e:af:
ee:71:45:d6:b4:df:60:a6:25:49:90:e1:10:56:5a:db:f9:68:
b2:4d:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 18:13:43 2024 by rpki-client on console-fra.rpki-client.org