Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pw20fekcJ16Z-j4yJl1UE71tnWg.roa
File: pw20fekcJ16Z-j4yJl1UE71tnWg.roa (raw, json)
Hash identifier: zeXEA+CQxxY0mnrtGig15MhCjHNCmgG1PkGqPf5G4/c=
Subject key identifier: A7:0D:B4:7D:E9:1C:27:5E:99:FA:3E:32:26:5D:54:13:BD:6D:9D:68
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191B18D73B193F546E60843CE48CC4D4BE0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pw20fekcJ16Z-j4yJl1UE71tnWg.roa
Signing time: Mon 02 Sep 2024 07:05:22 +0000
ROA not before: Mon 02 Sep 2024 07:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41745
IP address blocks: 45.12.254.0/24 maxlen: 24
45.14.165.0/24 maxlen: 24
45.81.243.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
85.209.134.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 09:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b1:8d:73:b1:93:f5:46:e6:08:43:ce:48:cc:4d:4b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 2 07:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a70db47de91c275e99fa3e32265d5413bd6d9d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:eb:ad:93:40:7e:21:f9:f3:fa:65:1f:f4:
49:f2:c2:d8:4f:c7:16:e4:a3:dd:03:26:8d:be:b7:
0c:bc:80:dd:b8:ab:96:6d:b9:bc:d3:e7:79:77:50:
c1:09:c6:2f:67:32:d3:e9:1f:25:a4:30:06:72:80:
82:3e:12:cc:f1:b4:40:73:5c:8c:8c:fd:0f:fd:ba:
da:f8:0a:f5:e4:e4:1e:c6:62:11:8e:28:e1:c3:8d:
58:c5:5b:a5:62:b8:4b:74:5f:2d:2f:ac:4a:e7:bd:
60:81:2a:8d:56:2b:76:a7:f3:f7:fa:32:5c:c8:2d:
f7:45:69:06:af:9f:d1:8c:fc:c2:ef:fe:59:3a:04:
d0:f6:67:5a:a0:2d:49:45:13:d1:99:ce:19:33:d1:
14:6c:da:b2:11:d2:9e:6e:a1:ea:7a:4e:1d:85:0e:
11:b9:d0:f5:44:c5:23:dd:85:68:c8:b9:1e:6f:8c:
39:c1:98:c7:e8:af:89:75:34:e9:16:aa:e8:df:1d:
88:47:0b:ab:50:a3:4c:e2:b6:4d:8a:f8:7c:70:44:
0b:28:7e:7b:b8:c0:dc:40:29:55:54:69:f3:a2:79:
45:be:73:43:7a:17:39:63:b5:24:a0:d4:d4:3f:1c:
22:52:87:4c:8e:b4:2f:0f:96:c5:1b:8a:3b:f8:bd:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0D:B4:7D:E9:1C:27:5E:99:FA:3E:32:26:5D:54:13:BD:6D:9D:68
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pw20fekcJ16Z-j4yJl1UE71tnWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.254.0/24
45.14.165.0/24
45.81.243.0/24
45.88.67.0/24
85.31.45.0/24
85.209.134.0/24
109.206.241.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:57:78:1d:d7:87:36:79:ce:de:4a:41:bd:a0:7f:6b:22:95:
f6:05:12:41:2d:97:1f:a2:d2:01:48:39:d1:ac:5b:75:bd:1a:
b0:ac:64:57:c7:f9:ac:ca:ab:d9:a8:5d:eb:d1:56:23:4e:e4:
04:67:45:bc:71:2a:ec:2a:92:54:89:0a:bc:b4:56:85:ad:df:
f4:37:45:5b:43:0c:18:74:dc:59:83:f3:79:4f:e0:0e:72:3d:
c1:4c:f7:06:5a:86:9e:ae:31:9f:c3:8c:6d:02:e4:2f:99:33:
25:d7:0f:7c:07:60:5f:82:bd:d4:54:8f:4c:4e:0d:92:5e:7a:
3a:e8:00:f1:21:4c:53:53:b6:d2:47:8a:e4:bf:e8:66:fe:e4:
42:a1:da:4c:09:a5:c3:f2:f0:4d:59:d9:33:02:b0:4b:1b:bc:
53:3b:29:d7:ef:aa:d1:78:ff:d4:45:f3:aa:9b:57:60:16:d7:
f7:57:42:d1:67:a2:a6:51:69:61:c2:67:2d:ea:27:a6:67:6f:
4e:1b:77:ec:25:cc:24:f0:9c:f1:02:fc:43:f4:e6:1f:c5:21:
7c:ad:21:78:2a:bf:6b:5c:db:b0:cc:d3:43:c9:f7:e3:e5:ab:
a3:c7:48:d7:7e:41:2e:b3:aa:a0:57:8a:ef:4f:cd:61:15:38:
6e:aa:31:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 12:02:04 2024 by rpki-client on console-fra.rpki-client.org