Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rdcesJtWD6owNQ3hPoAJarT4wTA.roa
File: rdcesJtWD6owNQ3hPoAJarT4wTA.roa (raw, json)
Hash identifier: UddO/EBRW9MvNhzJivFf15Bo/q3vpyI7guUuj8wxWIg=
Subject key identifier: AD:D7:1E:B0:9B:56:0F:AA:30:35:0D:E1:3E:80:09:6A:B4:F8:C1:30
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192D27552DB1B2B860B90507400EEBE7CE3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rdcesJtWD6owNQ3hPoAJarT4wTA.roa
Signing time: Mon 28 Oct 2024 09:29:17 +0000
ROA not before: Mon 28 Oct 2024 09:29:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214280
IP address blocks: 45.128.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 15:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d2:75:52:db:1b:2b:86:0b:90:50:74:00:ee:be:7c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 28 09:29:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=add71eb09b560faa30350de13e80096ab4f8c130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:ac:76:b0:32:cd:91:89:61:70:d3:8a:c4:
3b:af:0e:29:ac:49:e1:fb:5a:8d:72:bc:b6:67:56:
eb:c4:ef:aa:91:7f:22:f8:01:20:be:76:8a:14:8a:
6b:66:13:88:c1:39:d7:13:b5:0b:d1:b9:8b:4a:31:
61:9c:4e:99:41:21:75:b7:10:f8:dd:f9:18:5c:89:
67:fa:e4:19:99:1e:34:68:58:1e:10:84:92:23:31:
b9:71:81:d3:d8:da:43:36:12:08:06:2b:07:6b:99:
c2:7d:56:34:a7:b6:9a:57:11:ca:8c:1c:e1:22:52:
e8:a3:36:60:2a:66:d7:58:46:0f:c7:ef:5c:14:da:
49:66:f8:53:79:e8:74:d9:7d:b2:3b:99:c2:78:dc:
d2:d7:77:98:ef:43:ce:f8:99:8f:5a:6e:fa:d0:10:
f4:e0:e1:c3:90:12:6d:b6:49:d2:58:14:6a:f6:ff:
48:53:be:a1:9a:29:6d:05:31:05:f4:18:18:49:cb:
71:1b:75:23:8a:42:86:d6:81:ea:a6:c7:c3:8e:2f:
0b:8b:da:6a:2b:29:9e:e2:9a:ce:3d:4a:df:b9:d7:
02:29:67:48:74:13:7a:a2:e8:33:c6:1f:b9:1a:44:
c4:84:b1:18:bf:b5:d5:db:3d:87:d3:a9:49:43:c7:
1e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D7:1E:B0:9B:56:0F:AA:30:35:0D:E1:3E:80:09:6A:B4:F8:C1:30
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rdcesJtWD6owNQ3hPoAJarT4wTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.99.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:be:4f:77:1b:88:ed:b7:c8:83:37:6e:df:52:aa:59:b6:b2:
f7:26:a8:89:fd:35:06:d4:24:50:d7:b7:b1:66:b6:c9:58:35:
7c:22:8e:ae:25:75:c6:f9:2a:1d:8a:7e:b4:14:02:2a:a5:df:
ff:17:2e:79:6f:bd:a9:99:36:bc:82:fe:1e:6f:e4:17:77:ba:
67:3d:3a:c0:bb:71:24:5a:3e:16:7f:78:22:56:a6:ca:c3:9b:
27:26:db:0b:5c:66:f1:1f:ca:2f:af:43:c1:bc:d1:d8:9f:32:
20:97:d7:27:18:44:47:3b:00:fb:d2:5e:a9:fa:9f:ea:c2:a8:
c9:5d:aa:11:77:68:0a:6e:39:4a:05:d6:fa:00:99:f4:17:c5:
a4:a9:a6:10:79:3b:94:d7:4e:e1:58:fc:38:a7:80:8e:6b:3f:
68:63:02:9f:24:4c:7b:55:69:dc:0e:24:43:0c:3e:49:f0:77:
e2:35:a6:ca:5c:ee:aa:f8:0a:7e:30:96:f8:bb:43:d9:06:d3:
a4:78:35:dc:25:30:3c:c0:26:fa:53:e8:1b:51:84:e4:78:38:
66:6e:a4:1f:15:eb:e6:32:9a:39:71:3e:12:4a:07:1d:e5:86:
f8:0f:cb:a1:78:f9:b3:e3:51:cd:3f:c3:fc:bf:ee:b8:30:5a:
42:70:a9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 20:14:21 2024 by rpki-client on console-ams.rpki-client.org