Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k3gJ8AT6dwoAlrirqbkcWh-Ci3w.roa
File: k3gJ8AT6dwoAlrirqbkcWh-Ci3w.roa (raw, json)
Hash identifier: 8TJe8VQLzBcBYLxKek07TFQZJj1O5jUCzuCs7W6D7vE=
Subject key identifier: 93:78:09:F0:04:FA:77:0A:00:96:B8:AB:A9:B9:1C:5A:1F:82:8B:7C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192D3B96D9064306918E4FCCF7CB8F7A9C4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k3gJ8AT6dwoAlrirqbkcWh-Ci3w.roa
Signing time: Mon 28 Oct 2024 15:23:17 +0000
ROA not before: Mon 28 Oct 2024 15:23:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214280
IP address blocks: 45.128.99.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 05:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d3:b9:6d:90:64:30:69:18:e4:fc:cf:7c:b8:f7:a9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 28 15:23:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=937809f004fa770a0096b8aba9b91c5a1f828b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:a1:44:c1:cd:14:65:1f:f3:3a:ed:d5:74:
a7:e4:c2:6b:fd:e9:12:99:3c:75:9e:5b:f2:fa:21:
05:49:5b:e0:a6:53:a8:b9:a6:82:81:b4:8a:bb:e1:
e7:a7:19:ea:61:86:59:72:bf:83:f3:19:57:a4:9f:
e7:d9:25:23:bc:60:d2:be:84:2f:97:ec:49:b8:33:
75:29:f2:e1:73:83:0c:90:66:bf:c6:8e:b6:d8:1c:
c5:e6:2c:7d:b4:b2:7a:ca:26:8e:df:bc:21:2d:2f:
34:b2:d1:a0:e9:0e:69:2f:eb:ea:72:54:ad:e9:ce:
af:24:70:d0:78:78:9f:9c:10:ed:e6:c9:7a:c5:3c:
74:5b:58:bf:da:ea:20:e3:c6:78:8c:0a:8f:82:ea:
91:11:60:39:fa:9e:39:92:d8:e4:f0:5c:8f:a8:42:
a9:ab:d3:e9:97:c6:e8:ce:77:f5:16:52:41:7f:a7:
a9:d8:f4:25:1d:0f:7d:8f:dc:51:49:e2:9d:1d:72:
0e:47:b1:bf:bb:e0:50:ce:fa:97:cc:c6:cd:7c:4e:
59:5c:0a:93:54:35:bf:39:c0:64:3a:3d:c8:5a:28:
5f:e8:0b:08:a5:b2:c8:88:90:df:1b:ee:d4:65:6a:
78:67:ae:57:1c:ad:f4:7c:44:1b:8c:62:9f:a6:b5:
f2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:78:09:F0:04:FA:77:0A:00:96:B8:AB:A9:B9:1C:5A:1F:82:8B:7C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k3gJ8AT6dwoAlrirqbkcWh-Ci3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.99.0/24
45.149.235.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ba:f2:1f:03:e4:d1:c6:7d:8c:a8:60:07:4d:ed:f9:3b:cd:
df:bf:8e:c7:40:4f:2d:92:9b:f9:f5:6b:88:38:eb:be:bd:84:
e0:89:6c:e1:a5:35:79:88:e3:48:63:50:d7:12:98:63:30:25:
96:a3:2e:5b:be:1f:2d:7a:4c:01:10:fe:f9:b5:f8:ba:f0:6f:
98:16:6c:31:23:62:d2:49:df:0a:a2:4b:a7:13:41:c5:6e:51:
c0:cd:af:9e:2c:04:f7:55:9d:d8:c3:ed:f4:7d:a1:25:3b:54:
39:d7:32:8d:3e:1d:c5:63:32:c7:64:9d:3e:ef:28:c2:84:8a:
14:53:ea:43:3b:8c:77:95:80:37:c3:68:18:4a:18:05:4c:af:
99:d3:f1:88:79:58:84:6d:87:11:34:37:c4:83:31:38:5b:cf:
4b:12:85:02:28:1b:33:b5:7c:91:ad:7b:1b:46:8e:3f:5d:06:
00:9e:37:8a:4b:8e:25:cb:31:ff:ed:b8:39:4f:e9:59:b0:2b:
7a:a2:58:b0:8d:d5:d2:09:3a:72:68:eb:7b:8d:b1:8a:df:34:
fb:07:dd:85:8c:78:d3:a0:40:46:7b:d4:02:05:86:a9:d9:d2:
8e:e8:5b:57:89:41:99:88:d7:a8:7f:88:1a:e3:e9:25:d2:25:
30:b4:62:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 07:38:38 2024 by rpki-client on console-fra.rpki-client.org