Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PP1JsugJ4ytyGcCUqxVR5pIdiNg.roa
File: PP1JsugJ4ytyGcCUqxVR5pIdiNg.roa (raw, json)
Hash identifier: iL3Ny4dFn8qo/Jn/xOjWOnV8zAymGxHBtTe/e3eTGF8=
Subject key identifier: 3C:FD:49:B2:E8:09:E3:2B:72:19:C0:94:AB:15:51:E6:92:1D:88:D8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD01C26AC31AEBC744697DAE0BFEA7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PP1JsugJ4ytyGcCUqxVR5pIdiNg.roa
Signing time: Tue 02 Jan 2024 06:29:36 +0000
ROA not before: Tue 02 Jan 2024 06:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202002
IP address blocks: 45.81.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 08:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:01:c2:6a:c3:1a:eb:c7:44:69:7d:ae:0b:fe:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cfd49b2e809e32b7219c094ab1551e6921d88d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:a0:c8:15:87:84:ad:0d:c8:9e:22:75:5b:
e9:2a:45:f8:5d:fc:95:91:a2:8b:0b:3f:6f:51:04:
66:d5:29:41:fe:6b:b3:16:fc:f0:bc:9f:c1:aa:91:
c1:fb:6f:3c:d6:1f:df:2e:dd:71:86:18:0b:11:fe:
cb:b5:c9:3d:a2:79:59:b1:31:40:13:2e:a2:a1:e5:
ed:27:1b:78:b1:96:ed:62:24:7f:c4:35:10:e7:f6:
0e:cb:a4:fd:11:2c:77:f4:e0:51:3e:d1:d5:e8:f5:
31:b4:51:63:8f:fc:53:78:5b:b7:c5:7b:46:a1:d9:
ba:7d:b0:d5:0c:f5:90:9f:0f:b8:0e:29:af:34:95:
ac:81:3b:a9:d9:b1:a6:af:f8:a1:c6:8a:76:2e:2a:
9b:1c:47:c7:94:5b:da:3a:53:a0:e8:79:af:42:2c:
d1:40:80:95:1b:00:db:c5:73:43:aa:67:51:de:8e:
d3:3c:f4:58:29:81:b1:3a:a0:f9:d8:9b:2e:43:03:
ee:9b:3b:8c:52:02:da:9d:65:c8:20:72:8e:05:b6:
31:ab:0a:a8:ba:ad:c9:a9:7b:d6:80:a3:85:82:c8:
05:5e:7a:cb:40:97:54:ad:a1:50:72:70:bd:2e:86:
17:0a:61:51:4a:e2:bd:14:92:c0:10:e4:bf:ed:77:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FD:49:B2:E8:09:E3:2B:72:19:C0:94:AB:15:51:E6:92:1D:88:D8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PP1JsugJ4ytyGcCUqxVR5pIdiNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.242.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:95:0e:44:56:b6:6f:08:e3:4a:0c:18:e9:d4:ad:a4:2a:15:
ec:0d:b8:76:94:5b:c0:cc:27:5c:b2:a1:f1:6c:d9:be:a4:48:
cf:c3:62:88:f7:0f:38:6f:98:9b:c7:e3:cf:f2:ba:6c:85:e4:
7e:8a:e2:4e:a6:ff:05:3f:d0:43:82:43:e5:a8:67:34:aa:17:
9e:07:ee:50:6e:f0:98:4f:b4:33:4b:23:66:c9:90:bd:7c:3b:
75:3f:bf:08:b5:52:6e:0b:b3:0f:dc:82:33:58:b7:e9:3c:32:
5f:8b:f5:59:55:e5:38:a4:60:cb:6a:f4:d0:22:d3:a4:c7:9e:
73:a7:0a:bb:e5:f1:98:a7:61:b9:30:44:18:b5:a3:4d:5d:d5:
91:3f:d2:ce:6d:3e:44:5a:c4:65:c6:39:a4:80:1d:01:df:b9:
5c:3b:7a:24:1d:95:45:b8:2e:46:74:b5:a6:3e:32:72:ad:80:
4e:85:ad:29:18:a3:fa:49:13:e3:3a:f0:35:1a:49:48:c1:72:
49:50:91:b8:8b:9f:b1:d0:ff:b5:e3:d9:0a:b7:e8:7b:40:7b:
6d:7a:57:4e:36:88:b4:4f:23:ae:da:07:51:ee:7a:a3:27:7c:
6e:6e:25:10:40:af:20:1f:e7:3b:01:cf:48:9d:83:74:f1:74:
d1:63:5a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 12:30:17 2024 by rpki-client on console-ams.rpki-client.org