Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AxteoBpbEEkmzHe3PlA0ff0qwUw.roa
File: AxteoBpbEEkmzHe3PlA0ff0qwUw.roa (raw, json)
Hash identifier: NEGuMM1ljEQIMaqWTlHdhaNIeubz5uIqjdGnQ4wVmpk=
Subject key identifier: 03:1B:5E:A0:1A:5B:10:49:26:CC:77:B7:3E:50:34:7D:FD:2A:C1:4C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019092463C1C9F8C72A26C15F7917EB85DA8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AxteoBpbEEkmzHe3PlA0ff0qwUw.roa
Signing time: Mon 08 Jul 2024 12:16:34 +0000
ROA not before: Mon 08 Jul 2024 12:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200239
IP address blocks: 45.149.242.0/24 maxlen: 24
87.121.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 10:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:92:46:3c:1c:9f:8c:72:a2:6c:15:f7:91:7e:b8:5d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 8 12:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=031b5ea01a5b104926cc77b73e50347dfd2ac14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:0d:09:d1:72:a2:a5:62:55:3e:ba:de:b2:
54:7a:e3:ce:fe:6e:aa:61:33:b4:8c:9a:46:0c:c8:
3a:00:96:c4:7c:eb:47:79:b3:8c:95:cc:19:bc:31:
d4:7f:e4:b2:5e:65:ec:db:ce:86:5a:e0:01:64:5d:
b0:ad:c2:3b:4e:ec:23:fc:d4:88:1c:83:da:c6:c7:
52:ab:56:68:a2:1b:c1:41:60:7a:38:50:57:42:5c:
ba:ef:af:9d:aa:c2:38:26:c5:dd:69:80:7c:af:d7:
07:7b:97:e6:b6:b6:48:be:09:2a:2a:6b:86:a1:8a:
4c:7d:7a:29:f1:88:25:34:26:3a:26:e9:3a:f8:c4:
3e:1d:5f:61:01:e8:f1:0f:ef:96:68:97:fe:0f:2b:
b0:5e:9c:4f:ae:5e:15:2a:05:24:9e:19:48:11:b1:
b5:ef:24:3d:f3:e5:60:7a:68:49:c9:c9:23:1c:e8:
c2:7e:89:0d:bc:1a:c6:c2:00:ea:63:9b:5d:86:6f:
f3:83:b7:21:16:e0:b9:a2:78:d1:08:5e:66:9b:45:
d0:ae:c9:cd:1d:27:3c:a7:24:11:2d:ff:a1:1a:f6:
5c:91:83:e9:d6:53:ec:e6:73:e4:87:70:ae:21:01:
f9:f3:56:21:1c:c7:79:27:f9:b2:91:59:d3:5a:25:
4d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1B:5E:A0:1A:5B:10:49:26:CC:77:B7:3E:50:34:7D:FD:2A:C1:4C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AxteoBpbEEkmzHe3PlA0ff0qwUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.242.0/24
87.121.104.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4e:34:29:1d:a3:e7:47:83:06:96:dd:c8:39:5d:d6:3c:ba:
27:87:52:b5:d4:51:d9:58:d3:7c:56:4d:21:03:65:83:a9:b2:
13:ac:99:01:64:b4:98:71:d4:b1:40:7a:c4:61:d5:0c:d3:23:
e9:0f:0f:67:22:be:94:a4:03:48:64:26:cb:22:04:6f:bb:39:
e2:23:40:1d:92:78:69:db:67:eb:44:0a:8d:f6:c8:ce:35:78:
0c:a0:cd:b3:ab:d3:a3:40:3e:9b:58:54:5a:5c:64:c9:1b:9a:
c8:1e:07:09:7c:ec:73:b2:ac:86:91:99:87:73:f5:27:e5:43:
d2:d5:b3:58:23:c2:ad:1a:6e:a7:cf:7f:e4:da:14:31:61:87:
71:95:14:37:91:eb:34:71:2c:5e:25:53:85:f2:65:b1:71:b8:
bf:68:63:92:b9:75:f3:27:f5:9c:03:b8:ee:8d:1d:ee:a1:79:
9c:0e:73:b7:38:ff:f9:b5:78:d3:f0:60:ba:51:fe:bd:39:98:
9a:d0:d9:49:4a:5a:74:54:1d:80:52:f9:b7:ee:f6:f7:95:9d:
41:ce:bc:d5:d7:e4:52:c1:f4:d7:5b:d8:91:f1:7e:23:33:98:
cb:30:c1:11:bd:0b:3c:75:4b:81:c4:15:df:c4:ca:9a:c1:21:
a3:ae:c7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 11:56:59 2024 by rpki-client on console-fra.rpki-client.org