Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pPHJrBBFOJ--remkIQUSINenvDM.roa
File: pPHJrBBFOJ--remkIQUSINenvDM.roa (raw, json)
Hash identifier: zVZ5ER/2QGTffAWVAG0Y/LKt6T37p5LD0ndUbUwl0tk=
Subject key identifier: A4:F1:C9:AC:10:45:38:9F:BE:AD:E9:A4:21:05:12:20:D7:A7:BC:33
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192DE1F8ADB5679AB589D05933DFECD9A3D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pPHJrBBFOJ--remkIQUSINenvDM.roa
Signing time: Wed 30 Oct 2024 15:51:02 +0000
ROA not before: Wed 30 Oct 2024 15:51:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 45.95.3.0/24 maxlen: 24
87.121.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 17:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:de:1f:8a:db:56:79:ab:58:9d:05:93:3d:fe:cd:9a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 30 15:51:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4f1c9ac1045389fbeade9a421051220d7a7bc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:75:0c:54:35:cd:49:cb:11:09:f3:29:25:a9:
de:be:67:5c:53:ed:9e:87:af:6c:25:05:8c:3d:dd:
6d:3b:c8:81:59:6c:f7:8c:39:b7:16:0d:2e:72:a5:
c2:cd:32:a0:45:68:89:8a:fc:a9:91:38:22:ff:4a:
f8:68:b5:09:0c:5b:b0:91:60:bf:3c:34:e9:61:49:
89:ca:27:a8:ac:32:e9:a3:f7:4d:9b:95:1d:2e:ec:
34:c3:7e:20:88:ec:ee:80:02:a5:84:59:82:8c:75:
84:a7:fc:0a:ed:42:09:16:a4:36:c1:cf:9d:87:5d:
64:88:37:9c:18:c0:71:93:d6:63:25:0c:c5:13:9c:
2f:64:c7:d1:e2:19:72:a4:c0:49:33:77:08:c4:76:
09:9f:4f:b9:66:00:7e:60:6e:43:aa:13:e1:ab:7b:
0d:1e:4c:cf:36:32:f4:84:97:d3:b3:d4:93:c0:ff:
7e:14:c7:e0:20:c9:6e:37:0a:f0:2d:be:17:95:a4:
d9:c1:13:e0:67:45:ea:a6:67:21:eb:11:47:0d:9c:
fd:30:02:65:7d:aa:2e:bb:20:31:f4:71:a0:b6:c8:
16:15:17:6b:73:dc:39:04:07:e5:e7:82:87:8f:29:
88:21:41:ec:98:f8:6c:1e:fa:2f:94:e6:0c:eb:b1:
69:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F1:C9:AC:10:45:38:9F:BE:AD:E9:A4:21:05:12:20:D7:A7:BC:33
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pPHJrBBFOJ--remkIQUSINenvDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.3.0/24
87.121.217.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0f:48:44:bb:b7:b1:7e:33:dc:30:6e:ba:05:20:0e:d2:14:
3e:38:17:74:0f:ec:ee:5d:0a:39:b9:de:ec:a4:8c:db:f0:48:
62:0f:48:c4:69:8d:63:62:e4:47:da:65:d3:58:f3:c9:e0:7a:
22:1a:c9:0c:39:a9:4d:f6:49:be:fd:4b:5c:4c:2b:83:1c:94:
b6:18:c1:d1:7e:df:ed:4e:75:d9:63:d9:11:2b:b3:8d:9d:f4:
86:26:cb:a1:fd:12:ae:96:34:78:e0:9c:29:e7:43:b2:84:16:
6b:4d:0d:6e:5c:71:30:91:82:6a:23:2b:a5:bd:22:53:86:1a:
92:8b:27:80:96:ba:41:e1:be:f6:22:74:5e:63:61:3a:ea:e5:
07:f4:2b:90:94:31:89:30:ed:df:e8:9b:08:ee:4f:49:3c:2c:
b8:45:00:4c:eb:41:c6:05:cc:10:67:2f:73:25:6b:54:66:32:
28:5b:20:86:2a:42:e7:3d:fe:79:02:49:5a:f8:fe:69:30:f8:
4f:f3:b5:d6:10:95:9b:ef:3e:d4:89:76:bb:2b:5c:f0:ef:c3:
e2:95:21:94:0a:ce:5b:32:f9:86:f8:e1:c3:0f:b6:bb:51:82:
0b:85:5e:52:b9:5f:3a:79:9a:a5:34:23:f3:55:83:1f:44:cf:
66:34:da:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 19:53:35 2024 by rpki-client on console-fra.rpki-client.org