Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dhxCb1CxazgpN_9fA5pZ-P8vHf4.roa
File: dhxCb1CxazgpN_9fA5pZ-P8vHf4.roa (raw, json)
Hash identifier: 9iMvk6ANbpZHusN1onC64q1sLUuPTwTHlcQk4+5G1Mk=
Subject key identifier: 76:1C:42:6F:50:B1:6B:38:29:37:FF:5F:03:9A:59:F8:FF:2F:1D:FE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01906D7BF69934CBF512B91E735E0F76C749
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dhxCb1CxazgpN_9fA5pZ-P8vHf4.roa
Signing time: Mon 01 Jul 2024 08:49:18 +0000
ROA not before: Mon 01 Jul 2024 08:49:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44413
IP address blocks: 45.88.64.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 15:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:7b:f6:99:34:cb:f5:12:b9:1e:73:5e:0f:76:c7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 1 08:49:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=761c426f50b16b382937ff5f039a59f8ff2f1dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:bc:f4:1c:79:3c:35:10:a8:a5:2f:78:4c:
62:99:71:19:13:26:c8:ab:43:0f:4f:ab:fc:b6:87:
66:ae:e7:c2:0e:7a:6f:37:3f:98:7b:11:93:6a:96:
4b:68:fa:2d:46:c3:55:78:b8:c6:fc:ae:3d:b4:9e:
50:28:ec:6e:00:a0:6c:a3:b0:58:85:f1:aa:bd:13:
e7:52:80:0e:15:fc:2c:05:58:3f:b2:58:43:a6:cf:
d3:77:dd:c3:2f:98:49:ea:93:8a:ff:68:6d:30:43:
d2:1f:f0:bc:d9:a9:91:ee:26:64:f9:d2:ed:a7:1b:
e8:e8:71:05:ab:1a:b0:74:67:1f:88:5c:a3:3e:27:
ea:9d:e3:6b:aa:52:3a:4c:8e:1b:d7:21:6d:5f:51:
cc:e9:f0:7b:72:24:d3:0d:b1:f0:2e:2a:54:3a:e2:
a3:8a:8f:8a:38:6f:98:85:24:da:50:a5:e0:04:7e:
0b:64:40:3c:ef:82:6f:57:76:4a:6e:d9:eb:37:28:
30:fc:12:39:64:11:2c:a5:5b:7c:ef:0a:6a:e7:9f:
09:f9:97:0c:14:57:ed:b6:a0:eb:a9:95:45:f0:5a:
6f:79:b0:7e:16:10:a4:34:f4:19:f3:7a:ec:91:83:
d9:16:15:ac:5e:0c:2a:e8:5a:8b:d9:9d:60:4f:da:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1C:42:6F:50:B1:6B:38:29:37:FF:5F:03:9A:59:F8:FF:2F:1D:FE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dhxCb1CxazgpN_9fA5pZ-P8vHf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.64.0/24
87.121.87.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:99:1a:e4:e6:52:bb:fc:d4:d1:28:28:b1:33:e9:3b:ef:e8:
8f:41:4b:ab:60:36:59:9f:eb:9e:7e:18:76:4b:b1:0a:48:ef:
62:31:d7:a7:c5:86:e8:94:07:b7:44:b6:84:fb:55:e7:cf:6b:
bd:30:09:ca:d1:9e:73:c3:8c:b3:1f:0c:66:db:b2:f6:85:80:
26:e0:a7:6f:0d:be:19:c5:17:a5:20:ea:da:24:7b:f9:7e:24:
3b:a5:e9:60:46:7c:a8:2e:30:03:09:f3:85:0b:c6:a1:30:99:
66:2a:71:a7:51:90:34:cf:da:07:be:f0:3d:4d:1e:6c:61:a8:
81:8b:8a:5c:25:a3:49:56:79:b0:0a:e4:8d:23:a4:9d:dc:eb:
c6:00:a7:67:74:77:85:cc:a4:91:b4:5d:0a:87:86:44:d2:93:
e9:48:70:80:6c:d1:7e:08:df:19:32:00:3b:5f:d2:71:a7:8c:
0b:85:a0:e3:2d:05:7c:dc:1e:45:3c:86:1c:44:95:2c:b7:e1:
ba:69:9b:6d:3d:7a:48:9d:46:ee:2e:a0:0f:d5:89:64:41:08:
63:35:e9:80:c0:b4:76:c1:cb:58:07:57:53:11:1f:5b:e0:f6:
79:ad:d5:a3:bc:64:c4:4b:0c:3a:6a:5e:2f:c8:8a:b5:dc:49:
6f:2e:48:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:50:11 2024 by rpki-client on console-ams.rpki-client.org