Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lE9rml7aInoDULwMHx_Ez4V71Jg.roa
File: lE9rml7aInoDULwMHx_Ez4V71Jg.roa (raw, json)
Hash identifier: MZP9JS0s7CcKLMtuDBeB6sEwr231sZjNBFL9rJD/tJ4=
Subject key identifier: 94:4F:6B:9A:5E:DA:22:7A:03:50:BC:0C:1F:1F:C4:CF:85:7B:D4:98
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019294FA1C348AF2DCC97D255719E2EE6248
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lE9rml7aInoDULwMHx_Ez4V71Jg.roa
Signing time: Wed 16 Oct 2024 10:57:52 +0000
ROA not before: Wed 16 Oct 2024 10:57:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.12.253.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
93.123.113.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Oct 2024 03:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:fa:1c:34:8a:f2:dc:c9:7d:25:57:19:e2:ee:62:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 16 10:57:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=944f6b9a5eda227a0350bc0c1f1fc4cf857bd498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ae:7c:14:e6:7c:7d:18:48:61:97:db:55:2b:
40:ea:70:cc:46:52:67:71:db:a9:87:5f:fa:ca:cd:
07:5a:ae:f5:fe:9c:a7:45:f3:62:29:33:75:f6:e1:
f2:cd:36:1d:3f:0d:ae:32:0c:fa:ef:c3:6a:8c:43:
99:84:07:f7:38:df:99:1e:fd:08:f8:78:e5:36:5f:
e9:a1:ad:c9:e7:e9:0b:c8:a3:85:f4:6f:b7:9a:cb:
58:28:95:b4:19:76:69:ad:a5:58:d5:67:ce:3a:69:
91:d0:ec:ae:38:8e:5b:90:6c:fe:3c:06:3a:91:d4:
6c:f7:32:93:08:07:6b:9e:26:22:59:62:a0:2f:d5:
1e:92:74:61:0e:7f:3b:d9:9a:0e:c8:4e:ff:df:b8:
f6:54:eb:f0:2f:05:95:3b:e5:48:9d:02:59:5f:7f:
6f:83:c7:fc:b6:62:0c:c8:14:ed:9c:a6:17:4a:77:
69:a8:25:1d:55:69:23:19:b4:03:a6:85:32:99:54:
af:4d:8e:7e:9c:f3:12:dc:ef:61:e3:a8:b5:21:d8:
70:a8:25:a6:1c:3c:ce:53:27:77:b2:f9:cb:c1:9b:
3e:1a:08:8a:8d:62:ee:cd:72:b9:da:f6:5e:da:14:
90:a9:36:a5:41:6a:4c:7b:5a:61:19:ea:ca:13:ad:
b6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4F:6B:9A:5E:DA:22:7A:03:50:BC:0C:1F:1F:C4:CF:85:7B:D4:98
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lE9rml7aInoDULwMHx_Ez4V71Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.253.0/24
87.120.68.0/23
93.123.74.0/23
93.123.113.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:b5:76:df:96:b4:71:26:ff:25:22:2b:98:d0:18:f9:67:37:
61:a3:fd:d0:68:4b:3c:4d:6f:19:9b:cf:88:10:12:74:f9:2c:
b6:01:d7:21:17:8d:5e:6a:59:cb:3c:e4:83:e4:4c:86:7c:76:
75:8c:38:99:7a:01:9e:0c:f1:48:8b:e1:d4:83:4b:f1:5a:df:
30:0c:28:f3:c7:17:07:c0:77:23:d8:50:2b:b5:f2:40:a3:eb:
21:be:38:12:1f:07:67:b4:d0:65:89:71:be:f8:53:14:9c:5c:
b2:27:af:3f:61:28:46:e5:a0:6b:23:0e:ac:f6:6e:cb:ad:f4:
73:bf:73:93:eb:73:90:c3:f2:05:96:99:90:3c:fa:1a:4f:20:
31:f3:10:0e:cd:09:97:83:08:8d:0c:08:7a:2a:92:e7:26:3d:
bc:c0:80:1d:6c:5d:fe:1c:46:a6:00:58:86:1e:a3:c6:3f:9c:
19:b1:77:82:ca:b5:88:e6:2e:d9:a5:11:f5:fa:09:7b:2b:f2:
00:68:2d:0f:cf:73:b3:bd:d0:29:7a:25:53:c0:cc:60:93:95:
84:35:97:0b:e0:38:af:08:db:47:2a:fd:77:34:be:7a:4e:04:
b1:ad:1a:e8:1f:6f:37:3a:de:91:0d:b2:d6:d7:5a:c2:30:68:
61:dc:f3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 05:29:01 2024 by rpki-client on console-fra.rpki-client.org