Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ajOBRfAFsq748P12YagDJMF_9Ig.roa
File: ajOBRfAFsq748P12YagDJMF_9Ig.roa (raw, json)
Hash identifier: JFYHFINNXr9mFCDe+AvgdF5JndKt/hAnbhzjk76v62w=
Subject key identifier: 6A:33:81:45:F0:05:B2:AE:F8:F0:FD:76:61:A8:03:24:C1:7F:F4:88
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EA26709694A09EADD3F70B0692BA884B6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ajOBRfAFsq748P12YagDJMF_9Ig.roa
Signing time: Wed 03 Apr 2024 05:20:45 +0000
ROA not before: Wed 03 Apr 2024 05:20:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47757
IP address blocks: 45.149.241.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 10:47:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:67:09:69:4a:09:ea:dd:3f:70:b0:69:2b:a8:84:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 3 05:20:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a338145f005b2aef8f0fd7661a80324c17ff488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:0b:5c:c5:d4:bb:fd:c3:3c:40:b4:0a:7a:
ac:df:4f:8c:68:5d:99:cc:0a:dd:be:ea:4f:99:f9:
f9:88:84:b1:2e:65:7e:65:b5:21:44:7e:fe:0e:e5:
58:67:b9:34:cf:06:12:c8:6f:6c:03:7d:26:fa:e8:
0b:15:be:63:ed:62:b1:7f:92:09:c1:13:f5:c6:ea:
cc:31:cc:d4:02:4d:79:a6:78:7a:9a:64:5d:3b:68:
4e:2d:b9:34:64:c5:3e:15:03:ce:74:71:59:d1:be:
49:b7:50:b0:83:97:98:2d:c0:d6:fd:71:5a:b3:cf:
e4:c5:44:ad:9d:56:af:5b:13:f2:ef:7a:38:03:23:
6e:95:64:bd:f8:6e:52:9b:4c:21:98:26:9c:3f:07:
66:42:ef:4c:4b:ea:0c:71:50:bc:3f:85:88:6f:c5:
8c:72:11:8a:11:cc:7e:b2:78:76:03:9f:24:0d:c2:
79:a3:ae:42:18:b1:50:6c:d2:2a:4b:a2:b6:82:61:
3f:84:55:66:62:cd:76:00:c9:d7:69:b8:b8:25:e3:
ad:50:f2:d1:87:fe:3c:78:30:90:c9:c2:e4:c9:ad:
4e:f1:d5:39:ee:c5:6a:1e:26:82:9a:6d:7e:4a:4a:
a9:bd:e1:dd:7d:5f:69:4f:da:36:68:4a:d6:33:cd:
97:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:33:81:45:F0:05:B2:AE:F8:F0:FD:76:61:A8:03:24:C1:7F:F4:88
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ajOBRfAFsq748P12YagDJMF_9Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.241.0/24
81.161.239.0/24
171.22.17.0/24
194.48.248.0/24
Signature Algorithm: sha256WithRSAEncryption
70:6d:d1:d9:dd:19:5b:8d:b4:66:51:be:f5:4e:8b:9d:5c:11:
06:02:7d:24:14:72:9a:40:00:bc:ed:32:a0:b6:b2:f8:35:2a:
e9:96:43:56:d9:48:9e:14:fc:eb:66:b5:d6:7f:a7:46:5e:06:
8c:df:63:02:12:f9:36:3e:c4:14:be:22:07:37:fd:fa:37:f8:
6f:80:28:5e:fc:62:cc:3d:50:09:44:60:45:8b:c0:eb:1b:11:
06:09:d9:3a:ab:ca:a1:0a:1a:4b:83:85:ab:72:03:b2:04:e6:
1f:38:77:27:8d:95:91:bb:c9:45:fd:24:8e:39:8f:d4:b2:c7:
85:a1:75:72:71:00:ad:22:0c:1b:b4:73:cb:37:4d:f3:e8:fa:
ba:7b:d3:87:17:86:b9:ab:ea:04:7b:d3:ee:e8:f1:bb:81:51:
dc:e5:45:55:e4:4c:9a:be:23:a8:46:6e:61:56:5d:d6:c4:44:
48:2e:ed:c5:be:66:0f:48:59:27:ed:61:ae:dc:d6:fd:53:40:
bb:6a:92:d6:bd:d6:92:72:3e:4b:2c:52:20:1d:c1:54:bf:d9:
03:c7:e5:a0:9c:62:e2:f0:33:ac:81:f0:4c:57:b4:86:bb:e9:
d6:5d:bc:3b:e2:5c:a0:7c:10:0f:c4:7b:60:1d:99:de:81:50:
88:88:f0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:14 2024 by rpki-client on console-fra.rpki-client.org