Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b4gEU4GGasowrqjuFI_X6VCYpl8.roa
File: b4gEU4GGasowrqjuFI_X6VCYpl8.roa (raw, json)
Hash identifier: f01UbBuGiCoIvPd+AFMhbqNdS11TPqE6K8hMTOoMlKo=
Subject key identifier: 6F:88:04:53:81:86:6A:CA:30:AE:A8:EE:14:8F:D7:E9:50:98:A6:5F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01926C91E071475536B3D6D1F23D2131A8D9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b4gEU4GGasowrqjuFI_X6VCYpl8.roa
Signing time: Tue 08 Oct 2024 14:39:12 +0000
ROA not before: Tue 08 Oct 2024 14:39:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1
IP address blocks: 45.141.158.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 08:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:91:e0:71:47:55:36:b3:d6:d1:f2:3d:21:31:a8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 8 14:39:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f88045381866aca30aea8ee148fd7e95098a65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:1b:a3:38:53:eb:f2:46:4b:b4:74:d8:41:
bb:59:a6:8f:59:85:dc:26:c9:92:a1:3f:3e:fb:15:
4e:31:e7:ba:79:99:f6:b1:05:88:11:9c:55:1c:4c:
9b:08:d4:90:49:c4:e6:6e:54:23:76:d8:90:71:db:
32:11:74:9f:53:35:09:99:8d:74:ad:b1:9a:96:51:
81:c9:cd:ef:6c:0e:47:d7:52:51:dc:41:16:08:7b:
61:45:ea:ae:a5:1b:6c:3a:db:d3:ca:10:9f:e2:f0:
70:6a:a8:e7:13:b1:7d:18:60:4f:ca:81:2e:29:09:
a6:de:6d:c2:9f:94:83:8c:56:4d:7e:70:0e:f9:ee:
2d:6c:3c:4e:72:50:c7:23:37:a2:01:04:53:9e:af:
e6:f7:70:82:8e:42:37:8a:60:a7:93:c8:62:d9:8b:
53:e8:a0:75:74:2d:48:73:3d:aa:23:fa:ef:ae:0a:
0b:a0:90:12:f1:f8:6c:34:c2:0b:0a:63:18:97:0f:
e0:52:b2:ce:cf:c0:bc:26:a6:01:ee:54:46:e8:ba:
61:fb:36:6f:9b:f2:8c:c7:f5:aa:61:d3:33:f8:f6:
e9:5b:4f:2d:ab:fd:47:11:b8:e6:7d:69:5b:14:c0:
8e:f5:09:58:a5:6d:6d:25:7b:d4:3f:3f:dd:6a:3b:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:88:04:53:81:86:6A:CA:30:AE:A8:EE:14:8F:D7:E9:50:98:A6:5F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b4gEU4GGasowrqjuFI_X6VCYpl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.158.0/24
87.121.124.0/23
87.121.162.0/24
147.78.100.0/24
Signature Algorithm: sha256WithRSAEncryption
46:62:c6:74:96:e4:be:68:19:1b:7b:53:eb:e9:83:77:e1:96:
e1:ee:79:6f:3a:a7:9b:7e:47:b0:55:4a:d4:bb:cf:29:cb:db:
76:96:8d:d1:4a:bc:d9:3d:72:69:0f:c9:9d:77:09:e6:58:d5:
7e:16:c5:1b:d2:9e:29:e3:cd:5a:bb:88:a1:0f:c9:a6:0c:9b:
c4:e0:7f:7a:f0:2f:75:3e:e7:68:0e:a9:3c:62:64:11:d1:ee:
61:4c:01:b8:f5:fb:bb:8b:02:35:27:4a:bc:56:96:d5:00:a7:
43:4a:57:00:f1:53:45:9f:c8:ec:55:51:52:61:43:b3:ca:fb:
85:3f:b5:d7:e6:0b:5a:79:80:06:4f:c4:cc:83:f9:f5:2e:dd:
8a:fa:29:e0:cf:65:cb:e0:bc:6f:94:38:0d:80:06:44:74:8f:
5f:cf:94:ea:cb:3f:27:bc:6a:86:13:6b:e4:fb:c8:ae:ed:a6:
b6:11:bf:69:73:a1:4b:87:b7:c1:f6:ea:eb:e6:89:bd:b3:33:
99:3f:cb:f4:5e:32:75:c6:b9:c4:2a:82:7c:d7:60:b1:1c:a8:
70:49:7c:61:b2:1a:38:e4:59:82:b5:f7:d1:34:03:9d:a9:32:
c0:1f:0f:6a:12:89:5a:a6:10:d7:06:04:b9:5f:7d:c0:86:de:
4b:28:2b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 10:59:27 2024 by rpki-client on console-ams.rpki-client.org