Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UXQlu6ZKADrftfIHGz5QUG29g7E.roa
File: UXQlu6ZKADrftfIHGz5QUG29g7E.roa (raw, json)
Hash identifier: OnaVhJTgKVXFYQV4HoZksgb8Ly7xBlPGEgYaVj2BzOE=
Subject key identifier: 51:74:25:BB:A6:4A:00:3A:DF:B5:F2:07:1B:3E:50:50:6D:BD:83:B1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192B18CA49A62E208E55785DF3AFD420EC0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UXQlu6ZKADrftfIHGz5QUG29g7E.roa
Signing time: Tue 22 Oct 2024 00:07:17 +0000
ROA not before: Tue 22 Oct 2024 00:07:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.12.253.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
94.156.10.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 08:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b1:8c:a4:9a:62:e2:08:e5:57:85:df:3a:fd:42:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 22 00:07:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=517425bba64a003adfb5f2071b3e50506dbd83b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ea:f1:d2:b9:8e:ae:75:07:64:b5:91:c8:1d:
e1:de:3f:ba:69:e1:34:68:2e:15:5d:6a:93:3f:ce:
b1:7b:2a:a1:60:0f:3b:ba:4c:e8:52:1f:78:29:00:
e3:b9:87:19:f6:79:b3:83:e2:3a:d4:aa:7c:62:bf:
79:ad:e7:d6:25:65:c9:fb:3e:69:71:66:2b:8a:82:
92:25:0e:1c:26:cf:12:dd:e0:d1:f5:31:25:39:9e:
3b:e4:f4:87:81:d7:f1:cd:03:c3:bb:5d:aa:24:63:
d2:68:d6:cb:60:90:db:89:28:52:b5:56:26:70:3b:
b6:d8:94:20:42:6d:a9:89:dd:fc:c8:0e:05:a2:67:
52:37:74:70:8e:73:d2:ca:58:38:64:a4:f3:7b:67:
54:02:d1:5a:99:a3:ae:2c:e5:f4:09:55:2d:82:0d:
f8:5e:54:4f:20:3e:85:3c:c9:a8:c3:f4:85:be:91:
1e:7c:4c:de:eb:d5:ee:0e:c9:a9:29:2f:68:d5:5e:
b9:a7:34:31:69:06:d4:7f:ea:56:3b:7e:56:57:31:
83:41:86:9a:43:61:eb:65:80:80:7d:c1:71:a6:7e:
99:a6:3f:93:af:08:5d:2d:b4:8f:a5:f2:98:08:6c:
6b:4b:ac:a9:da:20:14:b2:fc:89:5f:08:f5:cd:45:
29:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:74:25:BB:A6:4A:00:3A:DF:B5:F2:07:1B:3E:50:50:6D:BD:83:B1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UXQlu6ZKADrftfIHGz5QUG29g7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.253.0/24
87.120.68.0/23
93.123.74.0/23
94.156.10.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
44:4a:07:a6:92:fa:4d:04:73:fe:22:83:f2:ea:eb:13:be:5a:
65:1f:cb:99:a8:d9:de:6b:82:12:54:17:e2:fd:b8:67:e0:27:
4b:f9:05:c9:18:ae:af:28:1e:fb:43:05:93:43:7c:ca:63:9b:
e5:40:5f:79:40:0c:81:8d:c9:30:da:30:59:24:6e:cf:06:46:
4e:58:4c:6a:5f:99:3c:58:42:7f:8e:0f:c6:94:e0:ad:5f:fd:
1e:5d:66:c6:5b:14:55:5d:3d:68:9c:e0:14:83:06:da:ef:b2:
a7:17:c4:01:a5:2f:7d:c2:90:da:8a:7d:95:d2:ba:ce:60:3e:
8c:43:58:04:04:a9:8e:91:a0:c3:35:89:aa:9c:0b:0d:12:0a:
29:14:54:e4:64:b8:05:31:0e:cf:b0:29:4b:d8:6c:0b:4a:5c:
fe:a9:71:dd:41:e8:d9:c4:d0:5c:97:10:e4:cf:9e:ce:81:6c:
6c:8e:6c:dc:f1:05:64:3a:0f:ea:a7:7b:9a:99:3e:1c:fc:b9:
3f:30:1e:aa:c5:30:ac:2d:12:39:c7:77:25:dc:2d:08:46:f5:
3b:19:ba:25:49:6c:84:0e:b1:1e:02:5e:f3:65:5d:23:49:43:
e6:6a:ba:6c:c5:b0:0d:e0:45:1e:28:00:0d:ed:22:5c:f8:9b:
39:5a:15:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 10:44:17 2024 by rpki-client on console-fra.rpki-client.org