Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rn3RBD_xTyyqYBCv4hvN-As4MDY.roa
File: rn3RBD_xTyyqYBCv4hvN-As4MDY.roa (raw, json)
Hash identifier: qWG9kAyxelzxyEW2GFtEjt6rI3CZnOq6DL29rDSt/iY=
Subject key identifier: AE:7D:D1:04:3F:F1:4F:2C:AA:60:10:AF:E2:1B:CD:F8:0B:38:30:36
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FC98A7F151BF5AAE97785EA7D7A7BF61F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rn3RBD_xTyyqYBCv4hvN-As4MDY.roa
Signing time: Thu 30 May 2024 12:47:27 +0000
ROA not before: Thu 30 May 2024 12:47:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215208
IP address blocks: 45.8.92.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 05:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c9:8a:7f:15:1b:f5:aa:e9:77:85:ea:7d:7a:7b:f6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 30 12:47:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae7dd1043ff14f2caa6010afe21bcdf80b383036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:92:1d:85:35:9c:f9:b6:cb:08:b3:b9:98:
d4:5c:4b:04:46:54:2a:e1:8d:02:ae:41:ba:f0:10:
ac:73:ac:9b:bc:8e:c2:19:c1:f4:89:ca:7a:d4:f7:
98:72:b2:e1:e4:c4:dd:dd:42:b5:36:02:7c:70:1b:
7e:9a:31:3f:be:28:2b:24:ac:5b:a7:66:3c:d2:02:
8f:cf:f3:6d:c2:61:86:54:9a:48:b3:7a:3b:f5:f0:
2e:57:a3:2b:04:d3:a5:03:19:19:d2:08:6e:aa:08:
e6:3e:11:a5:5e:dd:fb:3d:5f:29:94:6a:ae:99:d1:
63:36:63:53:d8:93:10:c2:48:23:16:04:3f:83:4a:
e7:bd:03:b4:bf:f3:6f:c7:31:74:e2:56:5a:2b:55:
e8:26:1b:ce:5d:6c:6e:dd:a7:31:bb:0b:57:3c:62:
cd:38:2f:55:7e:f7:94:d3:e6:01:2a:52:5b:f8:d4:
a0:ff:60:3a:c3:80:50:a4:34:37:a6:70:96:3a:20:
4d:a5:2e:f2:60:2f:42:40:b4:98:f4:25:aa:af:8d:
ae:1f:e7:13:aa:0a:64:59:54:5f:91:db:ad:bb:cc:
0f:41:c6:2f:68:d5:38:ac:f2:f6:4c:5d:c0:5a:e2:
b7:3d:65:f0:b3:a3:9d:31:1d:86:89:88:39:38:a6:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7D:D1:04:3F:F1:4F:2C:AA:60:10:AF:E2:1B:CD:F8:0B:38:30:36
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rn3RBD_xTyyqYBCv4hvN-As4MDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.92.0/24
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4c:a9:48:14:db:7c:bc:8e:68:6b:d4:4d:a6:4e:0b:c7:62:
7b:8d:97:bd:be:bb:52:4f:83:1c:de:28:d5:03:14:be:4d:3a:
e5:ab:8f:f3:d0:ee:1a:36:2d:ed:b4:95:87:17:4d:27:83:c2:
5e:a8:30:96:6e:90:55:b8:b5:4e:e0:91:29:b6:08:43:e1:0e:
8c:66:da:c9:3d:7d:83:46:15:df:a1:77:2c:a9:c2:a5:cc:04:
c2:e2:ad:a0:aa:51:f9:43:fe:66:37:02:69:4e:d6:53:d5:59:
c6:14:43:26:f2:5e:33:2a:25:63:1b:a5:19:fb:82:1f:7c:b4:
f9:37:07:4d:8c:36:6f:ab:83:a0:7a:32:3e:75:a2:c3:57:cb:
36:47:0b:d2:1c:b4:51:a3:35:59:0f:d5:44:cb:c8:db:3b:a3:
b4:09:d3:62:ea:4f:cf:1a:35:c7:63:c7:58:c9:f7:53:e3:82:
ec:2f:0c:95:c5:50:51:52:df:1f:e2:dd:3c:64:0e:2f:dc:58:
ea:37:0a:64:73:99:30:a0:50:da:80:70:ec:da:a6:26:54:58:
5a:c3:7c:36:36:71:22:6c:da:16:96:8a:55:f0:ea:ff:f1:4d:
d9:78:9d:5f:01:02:d8:9a:f7:65:84:1b:60:5b:55:36:d6:6a:
f1:51:33:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 08:30:32 2024 by rpki-client on console-fra.rpki-client.org