Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dYppGkvjkYTl9HiFetjVwotvYuQ.roa
File: dYppGkvjkYTl9HiFetjVwotvYuQ.roa (raw, json)
Hash identifier: adR3BX6GeUMTD7xLlV5Tm3i73n/u4NCyXkApq6NezjI=
Subject key identifier: 75:8A:69:1A:4B:E3:91:84:E5:F4:78:85:7A:D8:D5:C2:8B:6F:62:E4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01931B9502860F69BF3837037BF65C5D75D8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dYppGkvjkYTl9HiFetjVwotvYuQ.roa
Signing time: Mon 11 Nov 2024 14:16:10 +0000
ROA not before: Mon 11 Nov 2024 14:16:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214111
IP address blocks: 45.9.156.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1b:95:02:86:0f:69:bf:38:37:03:7b:f6:5c:5d:75:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 11 14:16:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=758a691a4be39184e5f478857ad8d5c28b6f62e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:c4:b8:6b:16:bf:89:5c:e8:ba:7b:d3:ef:
93:59:52:38:55:78:6a:8a:27:24:f6:ba:e8:d7:2b:
c4:4d:a5:55:73:7d:06:11:df:1d:2a:29:24:05:a7:
fb:a9:49:09:f0:fc:56:1d:8c:1e:04:18:30:d0:24:
01:f4:6c:2c:f1:de:aa:ef:48:33:36:73:bf:b0:99:
42:a4:82:2b:2c:9f:16:d2:c4:55:8a:b1:c3:02:ae:
f3:71:e8:ab:83:c3:e3:be:ea:ff:ce:06:8e:2e:7e:
25:47:fb:a0:cd:3d:2f:a5:3a:1a:30:f0:29:c8:5a:
f5:d0:86:b8:f5:3f:68:ee:9d:be:0a:5f:d0:7b:70:
a7:c1:84:34:c0:4f:ba:60:a3:11:d9:8c:33:b0:1c:
a9:20:f9:72:44:05:82:c9:cc:03:ec:91:70:1d:3c:
3c:6a:e4:53:6d:46:82:5b:d4:11:9a:20:8b:84:b3:
9b:20:5b:f6:1c:88:f1:7a:58:31:68:b8:15:13:c5:
b2:f4:eb:24:aa:3b:68:1f:8a:7e:94:f5:28:39:7a:
f5:b1:fa:0c:9e:59:a8:de:da:9b:8e:50:fd:7e:76:
d7:70:67:de:73:fc:af:6f:2c:19:34:04:a9:f5:93:
a1:87:30:45:89:54:84:f4:13:aa:a9:a8:b7:8a:71:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8A:69:1A:4B:E3:91:84:E5:F4:78:85:7A:D8:D5:C2:8B:6F:62:E4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dYppGkvjkYTl9HiFetjVwotvYuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d2:aa:9b:94:48:cf:c5:46:be:0e:47:ee:8e:d4:d7:46:e7:
b0:13:b5:13:73:c8:06:79:cd:46:0e:dd:36:6a:c6:f6:49:1b:
21:19:40:1a:89:56:1f:3c:d8:c0:fd:67:e8:08:d8:fc:c1:eb:
c7:ea:8a:6a:52:ee:c4:78:dd:19:de:83:65:e6:69:e9:b1:70:
36:3f:3a:6d:25:9d:42:35:09:57:7d:69:53:94:65:2c:48:4f:
86:da:13:36:4a:1a:1e:c1:ca:45:4c:0b:c7:1b:4c:b3:03:f1:
1e:72:d7:21:5c:a5:d3:52:24:3a:a8:8a:de:87:9a:c3:6f:a3:
98:a4:5d:70:5a:50:6d:e4:f0:d0:15:b7:65:17:c7:81:11:11:
51:ec:63:8b:82:4b:97:7d:31:3c:ee:52:64:7c:0c:be:87:d7:
cd:17:00:b9:71:fa:82:8b:9b:85:9c:42:54:c3:5f:4a:c1:02:
ee:6e:6c:e5:9f:27:8e:49:e6:5a:4f:f7:14:0a:d5:a4:96:a1:
00:0b:cb:94:29:c4:49:d5:ee:af:81:07:9d:46:83:cb:d2:5c:
f9:92:47:a0:3a:12:32:54:7c:9a:3b:cb:36:4b:9e:32:60:b4:
6e:79:0c:3c:63:08:9d:36:bb:44:54:7d:18:f7:2c:31:20:46:
1b:07:72:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:11 2025 by rpki-client