Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PMTUnxfSfJA3bXaL0mX2sBbhfjI.roa
File: PMTUnxfSfJA3bXaL0mX2sBbhfjI.roa (raw, json)
Hash identifier: zYLL2oYOswZLkiUu2g3sWQL+sgTNTgAlLClXVYM+rok=
Subject key identifier: 3C:C4:D4:9F:17:D2:7C:90:37:6D:76:8B:D2:65:F6:B0:16:E1:7E:32
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192DC1504001C961D79441EAEA34E6AF493
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PMTUnxfSfJA3bXaL0mX2sBbhfjI.roa
Signing time: Wed 30 Oct 2024 06:20:17 +0000
ROA not before: Wed 30 Oct 2024 06:20:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207957
IP address blocks: 45.128.99.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 07:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:15:04:00:1c:96:1d:79:44:1e:ae:a3:4e:6a:f4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 30 06:20:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cc4d49f17d27c90376d768bd265f6b016e17e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:e7:6a:9a:43:ca:0a:23:1c:2c:9f:5b:3d:
78:a4:33:80:ae:8d:7e:30:66:bf:e3:68:4c:af:02:
d3:9e:0a:7d:a0:69:e2:dc:85:e7:db:bd:7e:6c:6c:
13:a9:86:54:c2:9d:fe:4e:92:e0:76:b8:e5:35:29:
1b:00:24:03:08:f2:00:03:a5:73:e7:31:02:99:f7:
65:c7:a7:bc:79:9f:ef:6f:18:e2:d9:cc:f4:45:ac:
8e:0d:8c:13:fa:4a:72:37:0a:a9:72:e6:7e:2c:21:
cc:df:52:ba:09:ca:66:ca:c0:fa:85:1d:fa:1c:af:
ec:8c:03:f6:c7:43:d3:6e:b9:c5:02:ac:a5:06:0c:
0a:b4:e7:9e:ea:3b:b3:62:07:ec:1a:8e:65:11:51:
9d:74:af:1e:e6:d5:ef:0f:ad:f5:81:2d:4f:ec:a7:
68:dd:4a:c3:c7:cb:27:e9:d2:d5:a5:92:f9:38:7e:
26:29:58:0f:74:ce:aa:23:00:16:ec:eb:72:ec:2d:
fd:42:7a:4c:2e:84:36:d8:20:5a:f7:9d:ee:f4:17:
4a:3d:90:5c:dc:89:70:f8:2a:c8:e3:d5:4d:2d:c1:
ee:5c:b4:84:6a:09:6e:4a:f3:e1:47:84:03:30:ce:
9b:f0:c3:fd:b3:8b:73:07:74:fe:be:a7:25:8c:b6:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C4:D4:9F:17:D2:7C:90:37:6D:76:8B:D2:65:F6:B0:16:E1:7E:32
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PMTUnxfSfJA3bXaL0mX2sBbhfjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.99.0/24
45.149.235.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4c:57:ea:b9:b6:d6:b7:7c:8d:f3:21:d4:60:1c:c6:65:19:
20:64:67:fc:29:9a:c5:b6:82:69:eb:40:0c:34:a2:a2:65:01:
af:49:01:33:08:56:fe:75:54:05:50:ad:32:54:f7:17:9e:e6:
0e:7f:d4:bb:7e:e7:d1:a5:7a:9a:e5:c2:45:fc:b4:0f:88:e1:
71:66:67:47:60:1f:bb:f0:6d:64:23:df:67:67:e7:b5:50:58:
8a:5a:16:e0:3e:64:85:1c:13:86:86:bb:06:a7:82:4c:27:18:
d5:6c:0f:af:b8:27:65:aa:d5:9d:78:0a:e3:46:8c:6a:2b:ea:
cd:a4:e8:b7:02:24:e1:89:1c:19:ec:ef:03:76:63:61:6d:75:
2b:b4:31:b6:db:0a:08:e4:05:f1:8c:c4:d7:ea:a5:cd:e7:ab:
12:34:5b:9a:03:69:88:15:00:cd:bc:c1:7c:af:80:d8:3b:3b:
2f:eb:e5:ba:82:32:4e:9c:de:85:8e:f1:50:31:28:6b:97:ee:
20:0d:e7:71:02:e2:64:89:1e:74:51:94:ce:9b:49:33:ac:e6:
16:ef:26:20:e9:9b:78:02:75:db:06:cf:fb:a2:09:ae:c7:6b:
29:b8:a1:78:56:2f:fc:4b:9d:14:39:b5:8b:45:6d:cd:b5:61:
d5:ba:a1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 08:25:35 2024 by rpki-client on console-fra.rpki-client.org