Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CuIsn8TGET-CYKQcs_grc-KutmA.roa
File: CuIsn8TGET-CYKQcs_grc-KutmA.roa (raw, json)
Hash identifier: aXh5Xjlexz7kBKxZTc9+mtVgWHlyTfT1/VSOOv5q+wQ=
Subject key identifier: 0A:E2:2C:9F:C4:C6:11:3F:82:60:A4:1C:B3:F8:2B:73:E2:AE:B6:60
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E1E5992E220E9E7E95703028A7EE5DBBE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CuIsn8TGET-CYKQcs_grc-KutmA.roa
Signing time: Fri 08 Mar 2024 13:56:10 +0000
ROA not before: Fri 08 Mar 2024 13:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47757
IP address blocks: 45.9.156.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 14:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1e:59:92:e2:20:e9:e7:e9:57:03:02:8a:7e:e5:db:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 8 13:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ae22c9fc4c6113f8260a41cb3f82b73e2aeb660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:54:94:46:40:2b:ec:22:82:cf:8c:99:72:
a8:2f:b6:85:2e:a3:d5:2c:8d:9f:cc:55:9d:dc:15:
04:31:ad:2a:03:76:6a:13:24:46:60:2d:45:10:65:
2a:39:a2:15:e1:1b:a9:f7:a9:86:20:b5:0a:20:66:
61:93:b7:1a:6d:c9:9e:01:dc:6f:32:b5:60:a3:33:
79:39:cf:0d:b3:f9:ca:a8:77:5e:2c:f7:aa:9f:ed:
75:ff:43:ce:42:d7:21:73:71:2e:e6:2d:1f:d7:68:
7d:35:4c:b3:64:be:74:64:72:4d:ca:92:bb:4b:ce:
1c:0f:c8:98:b5:20:bb:cc:6d:c5:ef:b1:02:34:a4:
a4:f4:a3:87:97:81:5a:34:1a:8b:0c:76:47:4c:cc:
5a:f1:5d:40:ee:20:e0:dd:44:60:2b:2c:56:e2:46:
e3:98:76:ab:8b:4a:39:c8:76:f9:fc:1a:39:97:f6:
45:2a:7a:29:0b:79:3b:87:ff:13:c0:1f:fb:8a:44:
20:4b:9e:99:9f:c7:e1:18:29:cd:33:6d:6d:45:f0:
55:4c:db:98:b8:33:ee:b2:11:9d:9e:c4:43:0e:ed:
03:37:a4:3b:49:8c:5e:d8:9f:76:ad:11:07:63:98:
d8:65:7d:d4:be:d6:bf:ec:1a:37:67:02:c7:39:0a:
c4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E2:2C:9F:C4:C6:11:3F:82:60:A4:1C:B3:F8:2B:73:E2:AE:B6:60
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CuIsn8TGET-CYKQcs_grc-KutmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
81.161.239.0/24
194.48.248.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ff:10:01:9b:57:d9:15:23:7d:c4:0b:6d:5a:3f:b2:92:ed:
f6:20:40:d9:9f:1d:d7:26:f9:a2:bc:f5:ea:d2:3f:7f:cf:7a:
46:91:e0:2e:0b:b3:15:a1:d0:2e:96:d2:8d:7f:30:f0:39:56:
46:95:a5:fe:dc:bb:5d:1c:2e:39:72:b6:4a:1e:93:58:5d:2b:
38:a7:aa:2a:8c:94:91:ea:ba:82:13:e0:c6:01:ed:d1:d1:89:
70:f0:50:e6:c1:a4:69:24:d1:02:9f:80:b1:95:f1:be:b7:74:
d6:97:34:2a:c1:7e:d5:8c:ff:d2:0e:14:5b:c2:19:6e:1f:32:
47:0a:d9:bb:1e:84:e4:7e:28:6b:4f:88:5b:e6:ac:03:e6:eb:
f2:f9:9c:01:b3:db:83:05:5f:a9:d4:88:a9:7e:36:42:b7:92:
93:9e:24:5f:13:98:38:d2:44:a3:51:36:35:5d:65:0d:65:dd:
ce:e3:73:37:9f:5c:c3:97:a5:a6:a1:41:4c:6b:f9:02:8c:c1:
e2:96:c2:25:83:2b:0a:58:bf:5e:d4:cd:e8:1c:ac:a7:23:40:
e8:8e:fb:3c:12:ed:e4:9c:d1:bf:29:56:aa:4f:b2:ed:bf:e1:
3a:55:96:5d:36:0f:79:1a:87:d8:9e:88:9d:78:19:d6:1d:dc:
5a:79:35:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 18:22:40 2024 by rpki-client on console-ams.rpki-client.org