Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ngc4LeIHCA3TouVWYRW4U5dNTgI.roa
File: Ngc4LeIHCA3TouVWYRW4U5dNTgI.roa (raw, json)
Hash identifier: ol/LB3g5WfdeOnuYXJbjGJXEiGP9GNfFGy4MWDxHYPU=
Subject key identifier: 36:07:38:2D:E2:07:08:0D:D3:A2:E5:56:61:15:B8:53:97:4D:4E:02
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191DAF7499081DF56F309C1783F32584F65
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ngc4LeIHCA3TouVWYRW4U5dNTgI.roa
Signing time: Tue 10 Sep 2024 08:05:24 +0000
ROA not before: Tue 10 Sep 2024 08:05:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215439
IP address blocks: 45.66.228.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 06:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:f7:49:90:81:df:56:f3:09:c1:78:3f:32:58:4f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 10 08:05:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3607382de207080dd3a2e5566115b853974d4e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a6:46:0d:15:22:da:d1:c2:51:fd:2b:b7:cf:
8d:a8:94:da:92:97:4c:d1:c5:1d:c2:45:b0:4c:11:
60:e5:c0:23:52:0b:43:6c:37:ba:ae:fb:c2:dd:f9:
44:18:7a:2e:c0:60:07:66:0f:e0:0c:df:43:fa:0b:
fb:3f:00:16:1b:92:95:68:54:00:df:fd:0a:de:13:
3d:e1:be:88:fd:b8:64:be:e5:88:af:60:8c:03:e0:
e3:e2:dd:59:47:6b:a9:4e:47:ac:83:f3:17:d3:76:
80:87:e1:cd:84:b3:ef:5b:9b:1c:5a:91:4f:03:d6:
bf:e7:a1:c4:f6:be:26:aa:df:58:83:a7:d0:50:53:
52:aa:94:04:50:33:e8:73:6a:f4:94:62:be:91:e5:
1b:64:31:28:ba:5b:a6:17:16:7d:9f:7b:29:e9:7c:
29:c7:12:9a:8b:da:7f:98:61:ac:25:7a:9d:36:64:
cc:5f:4d:ef:37:11:c7:40:e1:95:d1:b1:86:14:cf:
42:b6:cf:09:2d:c9:b1:b3:e3:fe:81:64:f3:6d:fa:
d8:96:4f:a4:b9:d2:9f:4a:9f:fc:7d:ec:32:fa:11:
10:90:f7:3b:66:fc:93:22:cb:bc:b2:43:c1:a9:76:
f3:ac:03:22:55:b6:f9:7f:e2:22:77:21:41:55:df:
47:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:07:38:2D:E2:07:08:0D:D3:A2:E5:56:61:15:B8:53:97:4D:4E:02
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ngc4LeIHCA3TouVWYRW4U5dNTgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
171.22.31.0/24
193.222.99.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ce:d2:47:cc:2e:86:bc:47:c6:d6:92:2b:16:4c:4b:6d:3c:
21:c8:fb:16:77:4b:2e:a1:ad:ea:af:1b:b5:8e:47:d8:54:8b:
04:c8:27:35:69:00:d3:30:9c:58:c7:49:ce:77:3d:48:74:c5:
32:9e:a3:07:50:6e:c2:2d:ff:bc:ae:6d:7c:7a:fc:a2:d1:09:
a8:d9:57:1b:9a:2b:25:6c:67:3f:73:ef:49:19:95:a7:0f:9a:
b8:6e:46:ad:00:a4:47:8b:41:16:1e:05:48:69:11:dd:e4:58:
c5:33:6d:91:c6:3b:9b:07:6b:65:41:02:e8:ef:b7:f4:8b:9b:
e5:44:60:2e:e8:55:cb:45:00:63:7f:51:e3:77:22:bb:ab:c4:
1a:33:fa:ad:96:9e:bf:8e:e0:24:18:7f:0a:9b:ac:bd:84:4c:
09:14:85:01:d5:bd:82:24:40:1b:f7:84:35:42:50:49:7c:ab:
b9:e1:89:48:53:0a:cc:d3:c1:3a:c3:20:7f:44:f1:9f:b6:ea:
84:c4:64:3f:8f:ed:74:2d:12:d3:0a:23:5e:52:2d:0d:7f:39:
90:bb:3f:9d:a9:cf:1b:b4:de:d9:ca:9a:36:93:91:57:60:9f:
44:b5:3b:99:9b:3a:3a:66:20:32:33:7b:f0:49:cc:42:8e:87:
95:e9:eb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 08:25:50 2024 by rpki-client on console-ams.rpki-client.org