Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/R9ONkhO7cI8hao8uZf_3mGJdzq0.roa
File: R9ONkhO7cI8hao8uZf_3mGJdzq0.roa (raw, json)
Hash identifier: loODo/wNCeCjvtNQGGUqkvHTF9ZOkPbzpEmgYrCcGag=
Subject key identifier: 47:D3:8D:92:13:BB:70:8F:21:6A:8F:2E:65:FF:F7:98:62:5D:CE:AD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F86BFC16B479DD732A34C30F203187004
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/R9ONkhO7cI8hao8uZf_3mGJdzq0.roa
Signing time: Fri 17 May 2024 13:31:04 +0000
ROA not before: Fri 17 May 2024 13:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208287
IP address blocks: 45.66.229.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:bf:c1:6b:47:9d:d7:32:a3:4c:30:f2:03:18:70:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 17 13:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47d38d9213bb708f216a8f2e65fff798625dcead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b4:19:2d:f1:6e:c9:a9:47:86:55:09:c4:3b:
a0:75:b3:de:8d:08:4d:f9:72:8e:ce:e3:d7:0e:b8:
ae:0b:ee:99:38:e3:71:d7:a1:65:46:b4:06:19:bf:
52:79:d0:c8:7c:ba:68:dd:8c:ee:e2:ad:96:48:7f:
1a:92:90:61:20:20:90:a7:6d:c8:9f:c3:e2:26:06:
ae:fe:f8:eb:5e:be:ec:e9:8c:12:ff:bf:61:5c:fc:
c0:3b:dc:85:ce:c0:a3:5d:af:4e:90:fa:46:68:0a:
e1:ba:02:3d:3e:9d:b2:ef:76:ac:5a:2f:97:d3:51:
6d:d2:cb:d0:95:84:0b:e8:12:41:f3:38:b8:e0:bd:
d7:83:30:8b:ca:7e:c5:8e:19:80:43:d2:da:e0:50:
74:5b:bd:4e:c7:81:7f:f7:82:ac:01:ac:cd:63:52:
cf:7e:d3:40:55:6e:ed:88:af:cd:c1:f6:68:cb:14:
2b:15:8c:67:97:06:c2:ea:98:b8:ce:5a:e1:5a:11:
8b:5c:ac:69:b3:72:64:74:08:a6:87:ae:c5:77:dd:
ac:2b:0f:c2:e6:30:18:f7:92:e5:6e:db:fe:4f:f8:
5c:53:77:65:60:a8:7b:92:4a:6e:58:fb:b4:db:68:
70:82:22:b8:2a:a7:64:d4:de:5c:d5:05:ae:94:3f:
e7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D3:8D:92:13:BB:70:8F:21:6A:8F:2E:65:FF:F7:98:62:5D:CE:AD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/R9ONkhO7cI8hao8uZf_3mGJdzq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.229.0/24
185.222.160.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:98:f8:b9:f5:c1:12:00:97:c8:c6:f6:05:01:cc:bd:e5:ed:
b4:46:08:95:6f:20:4c:45:62:90:1c:4a:35:a1:46:a2:09:30:
eb:2e:8b:42:5a:60:b8:dd:94:25:23:ee:98:0e:98:7c:34:3d:
35:81:04:90:8d:3c:2f:78:e2:2f:8c:d8:ae:57:73:10:e1:39:
b9:a3:87:1e:de:7a:f4:19:6c:ae:bf:72:a0:a0:77:ab:3b:e8:
f6:87:dc:21:0b:d4:0a:7f:14:26:e7:d5:90:be:eb:34:04:e8:
2c:47:d2:d2:16:b7:f5:78:19:de:bb:50:3a:b9:c1:42:42:56:
82:8a:1c:e6:9b:53:85:d1:5d:91:78:7e:31:ec:f7:b6:19:f1:
91:5e:bf:2f:3d:c1:3c:65:d7:3b:bd:e1:0d:ad:55:8a:71:cf:
0b:84:f8:bc:24:5e:63:f7:3a:ef:83:26:00:86:cb:79:8d:87:
c0:58:b3:78:92:83:21:3b:de:06:7d:a7:de:aa:8e:b4:bd:29:
b4:a9:b1:dc:44:af:b3:fe:c4:b9:d3:0c:b9:c5:cb:dc:58:49:
17:fe:52:0a:46:0d:97:6d:52:00:ad:ec:01:59:03:7b:7a:92:
a2:a7:a9:d8:b3:50:04:b3:53:f7:5c:96:d4:3d:2d:e0:28:b4:
ab:a2:9e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:19:10 2024 by rpki-client on console-fra.rpki-client.org