Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rho3-G2tT8ZQVk9KNbejn53z36w.roa
File: Rho3-G2tT8ZQVk9KNbejn53z36w.roa (raw, json)
Hash identifier: ygYThWJCzDGnbG/4J6tzimACGPOjr1mDlgyBPkbJPFg=
Subject key identifier: 46:1A:37:F8:6D:AD:4F:C6:50:56:4F:4A:35:B7:A3:9F:9D:F3:DF:AC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01932C71B7E0B95B59AB932D56D55626F88F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rho3-G2tT8ZQVk9KNbejn53z36w.roa
Signing time: Thu 14 Nov 2024 20:51:10 +0000
ROA not before: Thu 14 Nov 2024 20:51:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39238
IP address blocks: 194.113.36.0/24 maxlen: 24
194.113.37.0/24 maxlen: 24
194.113.39.0/24 maxlen: 24
212.87.220.0/24 maxlen: 24
212.87.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 10:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2c:71:b7:e0:b9:5b:59:ab:93:2d:56:d5:56:26:f8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 14 20:51:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=461a37f86dad4fc650564f4a35b7a39f9df3dfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:10:f5:8b:98:05:9a:a8:11:f1:56:1c:e9:
30:c5:d7:d6:8d:be:5f:3f:33:30:f1:54:d8:fc:f5:
eb:81:6f:6e:84:f9:11:15:51:f0:2c:ae:ed:e5:ae:
b1:88:d7:45:77:32:5d:40:91:b4:b6:82:4a:ec:36:
8f:c0:d9:f9:1e:f7:64:52:6b:9e:c6:2e:a5:05:dd:
19:96:7f:9b:46:f6:6b:b9:a0:05:60:21:f6:fd:01:
84:44:c1:96:ec:25:1a:45:f7:9a:81:7d:6a:e2:72:
2f:0d:66:e2:01:cf:bc:b0:6b:ed:ed:40:4e:08:e0:
c1:18:43:f7:2a:f4:c4:10:d6:d6:c8:76:80:40:fd:
a3:be:09:68:ca:94:3a:d2:ac:5a:37:9e:f4:15:58:
c4:8b:c9:ca:a1:f6:80:86:36:4c:7f:31:9c:11:d3:
47:33:49:03:c7:d1:86:8d:7e:82:40:2a:93:55:6d:
f7:b5:5e:8a:80:05:3e:6a:e4:22:63:07:71:a4:54:
d6:97:1b:9a:50:6e:11:68:0c:5b:e5:87:7b:f1:00:
f9:40:23:1d:2f:b5:e0:f8:68:78:a4:ab:48:a0:de:
15:55:0f:25:35:9b:2d:69:83:8e:81:53:69:e9:6a:
77:17:9b:56:65:d4:ae:ec:d7:12:24:fe:d0:93:6a:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1A:37:F8:6D:AD:4F:C6:50:56:4F:4A:35:B7:A3:9F:9D:F3:DF:AC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rho3-G2tT8ZQVk9KNbejn53z36w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.36.0/23
194.113.39.0/24
212.87.220.0/23
Signature Algorithm: sha256WithRSAEncryption
99:6b:5f:bd:45:55:57:ce:26:d9:d7:4c:db:12:a3:cf:1f:19:
75:43:6c:08:36:e1:19:9c:5f:64:cf:3b:1d:fa:46:8e:84:71:
0b:9e:c1:24:30:4d:cb:c3:47:ad:46:47:61:50:df:af:3a:15:
35:1a:14:23:44:7f:09:7e:83:c1:68:71:69:bb:92:80:6a:ba:
2c:f0:8b:20:8e:4b:b5:ee:f2:f9:47:d4:75:92:e7:06:a6:d5:
60:da:cd:72:62:fe:8f:27:01:16:ac:4c:7e:c2:9c:d7:0a:59:
43:f1:5c:28:a1:72:9e:fb:16:1e:95:89:d5:5a:58:ed:62:de:
c8:2b:bb:62:c9:7a:65:c6:c8:be:d1:77:9a:fd:96:97:7a:35:
b1:b2:fd:8b:7f:42:4a:4a:04:56:01:36:98:b2:53:09:bc:1e:
2b:75:c9:53:51:61:9d:73:14:ee:25:aa:1b:a2:c9:aa:be:e2:
c6:4e:39:89:c7:76:fe:96:d3:69:63:99:68:dd:f0:f9:c7:c5:
18:e3:f4:eb:5e:b4:08:b0:91:2d:9b:c2:ea:e5:62:75:05:ce:
14:38:a2:c5:86:63:a0:59:43:30:0d:29:ac:c5:ab:60:79:94:
d3:8a:2b:88:22:71:1e:de:6d:82:a9:01:2b:f4:9c:f3:9b:4e:
49:a0:68:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 12:16:44 2024 by rpki-client on console-fra.rpki-client.org