Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a2UbbQWYaos_lNTx9QSlUh2c1V0.roa
File: a2UbbQWYaos_lNTx9QSlUh2c1V0.roa (raw, json)
Hash identifier: 2KRKbbFJmkl7J50yr6fSwKBPpOjZoD79orwgJxzNzTU=
Subject key identifier: 6B:65:1B:6D:05:98:6A:8B:3F:94:D4:F1:F5:04:A5:52:1D:9C:D5:5D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC903CD6544F8AD9F4CEFDCC3A9342855
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a2UbbQWYaos_lNTx9QSlUh2c1V0.roa
Signing time: Tue 02 Jan 2024 07:11:58 +0000
ROA not before: Tue 02 Jan 2024 07:11:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 92.249.48.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 10:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:03:cd:65:44:f8:ad:9f:4c:ef:dc:c3:a9:34:28:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 07:11:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b651b6d05986a8b3f94d4f1f504a5521d9cd55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d2:6a:ac:8e:88:15:83:05:78:ec:a7:62:6b:
8d:87:ab:5c:53:d3:81:6e:7e:ab:3d:73:5f:26:33:
5a:30:da:d6:d2:cd:38:27:d1:ea:79:e2:3e:33:d0:
4d:63:f2:3c:b6:0b:a0:68:34:48:50:bb:92:18:d5:
d9:4c:d7:a3:e8:c7:87:cf:ab:cf:51:4a:fd:9a:93:
98:1a:18:11:58:d0:a1:a6:6b:ee:b2:e3:44:b1:5a:
d2:8a:9b:e7:a7:2d:1d:ba:9e:88:f7:a3:4c:bc:fe:
88:8c:d1:b5:74:ad:58:3f:6f:49:53:78:64:c2:a7:
03:19:9d:68:d9:13:1c:46:62:8d:6e:40:2d:f9:50:
23:21:9e:46:b2:d3:ba:9a:87:e1:79:19:3d:8c:cf:
c0:bd:61:13:81:2e:de:b3:5c:f7:2b:47:84:68:94:
fc:e0:7e:f1:02:63:45:c2:c0:10:b1:28:d4:09:62:
ac:09:2f:aa:46:05:f0:18:43:f7:dd:b8:e7:f7:1a:
ab:a3:17:0f:ba:ca:00:34:a8:cb:4f:d1:b2:ab:05:
c9:a5:cc:51:0e:57:e5:50:49:9b:2f:82:d7:df:b5:
be:a0:4e:be:4f:dc:91:2a:48:dc:cb:62:e4:c7:d7:
d7:42:55:e7:b5:4d:ee:d8:84:5e:d2:38:1e:c0:10:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:65:1B:6D:05:98:6A:8B:3F:94:D4:F1:F5:04:A5:52:1D:9C:D5:5D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a2UbbQWYaos_lNTx9QSlUh2c1V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.230.0/24
92.249.48.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a5:d3:cd:a9:04:88:29:46:31:cc:e3:40:8b:56:66:4f:70:
a6:00:90:38:89:c5:55:a4:00:83:6d:42:54:f0:19:4e:9d:10:
c3:c2:91:6b:d2:bc:ca:41:48:5c:4f:46:a8:19:b8:e6:b5:58:
08:9a:44:a2:7c:1f:e5:5f:a4:1c:df:cb:fa:90:d3:12:f5:1c:
69:6c:7b:24:fb:6e:08:9b:45:c0:49:6d:0c:50:ef:ca:3b:aa:
e8:36:93:9f:90:37:a8:51:ad:08:29:b9:c0:97:00:5f:76:d4:
70:8c:22:1f:4a:8b:d9:d1:cf:c8:09:23:f1:e4:60:85:8c:49:
dd:8b:86:15:03:5e:2c:0e:e5:e1:e2:0a:48:c1:15:ea:f6:54:
c2:56:ea:47:cb:94:e6:b2:89:5d:68:38:ac:00:57:8c:b2:96:
c4:ae:fd:6d:db:97:ed:cd:c2:78:de:44:b3:85:aa:40:2c:7e:
64:3f:e9:2b:8f:12:4c:d1:33:07:34:1f:9e:0a:e4:23:f5:7f:
9e:dc:d4:9e:16:9e:ca:81:2c:16:89:84:c4:1d:c9:8c:a3:2f:
9e:55:cf:d3:b4:38:38:3b:54:08:ed:0b:6b:38:37:65:f6:57:
6d:da:3d:c7:60:21:19:a2:d4:0d:44:0d:8f:3d:7c:0c:d7:d3:
69:a2:c3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 13:54:54 2024 by rpki-client on console-ams.rpki-client.org