Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/claZolEA-SxYmQxu9pYzY1WDIJk.roa
File: claZolEA-SxYmQxu9pYzY1WDIJk.roa (raw, json)
Hash identifier: lEE/hSFWg6skd8o2VwQKXqbZZIZuGYOLwaEuYd74j+o=
Subject key identifier: 72:56:99:A2:51:00:F9:2C:58:99:0C:6E:F6:96:33:63:55:83:20:99
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192D872D5F76873955D079341F619454856
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/claZolEA-SxYmQxu9pYzY1WDIJk.roa
Signing time: Tue 29 Oct 2024 13:24:17 +0000
ROA not before: Tue 29 Oct 2024 13:24:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 45.95.1.0/24 maxlen: 24
45.95.3.0/24 maxlen: 24
87.121.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 06:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d8:72:d5:f7:68:73:95:5d:07:93:41:f6:19:45:48:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 29 13:24:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=725699a25100f92c58990c6ef696336355832099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:84:53:d5:0e:2b:62:a8:fb:1c:b4:dc:73:
5d:b7:a4:df:b0:86:0e:2e:be:2e:d6:7e:9e:b6:cc:
60:77:c1:0d:73:d3:3d:3b:b6:bd:ec:fb:51:22:ee:
85:ae:e5:21:2c:07:34:0c:54:ba:c5:af:0e:8f:01:
07:94:04:0c:16:d4:d2:e5:b0:72:2d:99:a1:dd:bd:
5a:5f:fd:f7:97:34:39:d1:d7:26:02:06:0e:a7:e9:
7a:8e:38:cd:14:23:42:8e:aa:26:31:e3:17:69:cf:
0b:4c:e2:a6:1c:cb:e4:ea:4b:7f:9e:e6:ea:31:65:
b9:78:57:13:4e:5f:10:b8:35:56:fd:a9:86:0f:bb:
86:27:ed:34:41:1f:0d:3f:e2:88:46:fa:c0:35:fb:
4e:28:30:c4:f1:b4:f5:96:be:93:c7:73:e0:25:7c:
9e:d1:d5:85:10:f5:6d:8d:97:48:03:2c:8a:25:56:
f6:14:e1:4f:5a:38:1a:2b:e5:7e:95:35:78:c0:c9:
69:41:f0:85:12:e4:b5:d5:18:74:15:f4:dc:40:36:
7e:9b:3b:b0:0b:89:12:4b:8e:d7:49:4c:c9:f1:e8:
ae:64:74:58:b1:b7:88:27:5f:67:ce:b5:a7:90:bc:
64:ce:91:42:99:72:ef:e5:6d:e3:98:0e:cb:b2:91:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:56:99:A2:51:00:F9:2C:58:99:0C:6E:F6:96:33:63:55:83:20:99
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/claZolEA-SxYmQxu9pYzY1WDIJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.1.0/24
45.95.3.0/24
87.121.217.0/24
Signature Algorithm: sha256WithRSAEncryption
34:a5:e4:7b:c7:36:03:50:1e:a4:87:98:5c:cd:d5:98:60:0e:
0f:c7:02:16:d3:fd:1a:95:f6:31:f1:a7:48:63:b4:96:de:67:
fe:a8:1f:46:53:f5:23:53:4c:75:f8:9c:bc:27:8f:75:dc:66:
6a:c2:ae:bd:84:73:e6:e5:8e:90:6c:5f:38:6a:9f:d0:b0:a5:
f1:ea:b3:06:20:08:bf:fd:35:24:4c:05:e0:3d:7c:d9:ce:0e:
84:94:47:b0:66:0a:60:32:b1:3d:76:d0:32:4f:32:1f:f5:90:
bc:63:bc:54:d0:d7:b7:05:60:d1:97:fd:4a:2c:e1:76:2b:5e:
d9:fc:ff:c6:32:04:54:c7:60:15:27:7a:e8:da:ab:d2:42:40:
d4:a2:45:0a:79:e5:27:03:15:f9:f5:61:bc:26:dd:53:10:d4:
67:79:53:ad:13:0d:36:cb:87:f9:e1:15:e3:83:ec:1a:75:3f:
5c:17:2c:f1:bf:7b:fd:71:9e:4b:ee:13:6c:d7:0b:3a:1c:bb:
b0:4d:f1:56:cf:01:7f:e4:93:41:7e:35:11:1b:9b:02:94:ba:
90:03:dd:60:f2:f3:57:3d:45:aa:54:3a:80:d3:19:47:2d:3f:
c3:b6:b6:d7:e8:36:39:ca:cc:0f:36:30:42:4f:da:b5:69:47:
df:2d:ae:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 08:32:27 2024 by rpki-client on console-ams.rpki-client.org