Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ls4oSqGnFi2SoHZ5A1F9sEBXFts.roa
File: ls4oSqGnFi2SoHZ5A1F9sEBXFts.roa (raw, json)
Hash identifier: XSf8qkE3LVrrKf6Mp6u4JNQ5TyX+z8r1SThTctiAhAY=
Subject key identifier: 96:CE:28:4A:A1:A7:16:2D:92:A0:76:79:03:51:7D:B0:40:57:16:DB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01922E2C52FC721240D12153C8823FE343CA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ls4oSqGnFi2SoHZ5A1F9sEBXFts.roa
Signing time: Thu 26 Sep 2024 11:51:49 +0000
ROA not before: Thu 26 Sep 2024 11:51:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214668
IP address blocks: 45.8.92.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:2c:52:fc:72:12:40:d1:21:53:c8:82:3f:e3:43:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 26 11:51:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96ce284aa1a7162d92a0767903517db0405716db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6f:8a:18:0d:3d:2b:28:9c:5a:9b:be:05:6b:
43:f0:ab:9f:c5:f0:e1:9f:ac:95:4a:c7:20:03:8e:
94:77:f1:be:a6:b7:61:e7:0d:9b:1c:11:9d:86:25:
ab:1f:6c:eb:75:89:b8:29:46:ab:d6:d6:cd:9c:08:
d0:3b:93:f8:e9:dd:a1:6c:c9:05:e4:4c:97:a6:f1:
87:65:02:fa:6f:a9:cc:d0:57:d6:4f:7d:e8:6e:c8:
5a:42:0e:46:b3:78:9f:5b:52:a3:35:cb:ca:1a:c2:
ec:81:2b:ab:0a:d0:01:54:ba:77:55:04:84:50:7b:
df:fb:e5:53:1c:78:60:74:c1:2d:77:77:2f:06:5e:
14:f0:88:72:70:c8:90:51:a7:5d:e4:07:9b:a6:6f:
64:fd:b9:c6:2a:77:59:ea:22:36:4f:29:3d:44:96:
d9:1c:22:52:ad:44:a4:bc:13:ed:e8:a1:ca:0b:e8:
be:a4:de:65:38:00:eb:14:af:27:a6:79:d1:1d:fc:
07:4f:d2:69:3d:f8:16:2e:f4:0a:cc:48:d8:a4:e5:
1f:ce:6d:42:4c:93:39:e5:5e:c1:76:55:52:dd:0d:
88:cc:5f:02:fc:ff:3c:95:0f:01:23:36:2d:dd:f6:
18:31:7c:8b:14:d7:ad:6d:9a:97:c5:4d:51:0b:77:
41:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CE:28:4A:A1:A7:16:2D:92:A0:76:79:03:51:7D:B0:40:57:16:DB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ls4oSqGnFi2SoHZ5A1F9sEBXFts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.92.0/24
193.37.41.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f5:e7:1d:16:6f:de:f2:e1:61:6d:a6:b1:0b:c1:10:16:62:
b9:f0:82:32:63:a3:87:da:37:50:98:92:75:3e:34:1e:ca:4d:
c3:2a:b6:cb:59:5c:5e:8e:2a:94:1f:af:0b:5a:78:e0:f7:9f:
98:ed:16:c6:d8:b9:93:8c:6e:b7:de:44:0f:02:23:e5:2b:b6:
13:12:18:ea:6c:be:09:86:98:fb:44:d9:03:f5:ab:d9:74:8d:
8b:10:ff:e0:4c:26:30:d7:2b:f2:1d:85:ef:dd:e3:30:a4:d5:
82:f9:b6:42:bd:a1:d7:d9:18:33:2c:91:2c:0a:7f:f1:80:55:
67:a1:14:9e:d9:c9:65:9e:85:7f:9c:4f:99:2f:25:9d:d8:12:
ee:02:0f:95:a4:82:8a:eb:72:66:44:a7:e5:54:4e:12:6d:b1:
0a:96:47:ad:e6:b1:dc:63:02:e0:d3:be:18:5b:fb:59:ff:9d:
a4:63:1c:80:76:77:27:4f:71:17:a0:87:3e:08:e3:86:90:81:
d1:bb:48:b3:54:fd:f1:a0:91:7b:39:73:15:83:b6:72:16:bf:
d3:10:bf:21:f5:4a:3c:81:e8:f8:b8:17:e0:c7:b0:6c:00:8a:
c1:b9:7b:f6:76:26:66:f9:41:bc:2f:7a:d9:52:87:42:36:20:
2c:d0:f2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:58 2025 by rpki-client