Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xN8-EcmUxi_FOkWGx3CzZpqBuUE.roa
File: xN8-EcmUxi_FOkWGx3CzZpqBuUE.roa (raw, json)
Hash identifier: zUWqhK5m7gXeM9/Y3BohvQ+NoeQkLri+XKcOD0D0Z74=
Subject key identifier: C4:DF:3E:11:C9:94:C6:2F:C5:3A:45:86:C7:70:B3:66:9A:81:B9:41
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01904F0968A26DE18A9FDD15EE1E97B26940
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xN8-EcmUxi_FOkWGx3CzZpqBuUE.roa
Signing time: Tue 25 Jun 2024 10:55:34 +0000
ROA not before: Tue 25 Jun 2024 10:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200239
IP address blocks: 45.149.242.0/24 maxlen: 24
87.121.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 09:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:09:68:a2:6d:e1:8a:9f:dd:15:ee:1e:97:b2:69:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 25 10:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4df3e11c994c62fc53a4586c770b3669a81b941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:27:74:5f:d5:05:53:3a:10:e2:cb:88:9f:fc:
43:09:36:30:d8:6e:d1:86:b3:1c:86:8d:50:24:08:
74:83:95:24:00:22:61:ba:55:7e:3f:5c:c7:56:a5:
37:f3:3b:9a:e0:de:4c:d7:46:df:6d:ef:00:e7:26:
dc:fe:a1:be:7f:8f:73:b7:f5:52:fe:de:1c:97:72:
32:be:b4:a9:a2:13:6c:98:a4:59:e9:f0:4d:2f:ad:
72:73:41:05:93:64:39:65:b0:ab:26:6e:fb:a7:78:
83:cc:32:74:4b:86:45:12:ff:30:82:c2:d2:04:80:
10:3a:90:92:93:25:f2:8a:70:92:d4:70:0c:f8:e1:
00:9c:5f:6a:12:96:24:cb:03:23:d4:2b:1f:0c:0c:
38:82:f3:0b:3a:ee:d7:cf:94:aa:29:a4:c4:eb:a8:
c7:bf:fa:0a:93:38:59:0e:4b:2a:6c:3a:97:3d:51:
b3:be:a7:63:cf:7d:eb:83:be:e1:6f:36:81:d9:c5:
e8:af:a8:d8:96:54:b4:5b:c1:27:4a:2c:c1:da:0c:
1f:64:1d:fb:18:15:d1:ca:cb:69:5c:f9:07:62:09:
ea:11:9e:f7:f6:d5:7f:61:cb:04:8a:97:f8:d1:c9:
24:54:d7:ae:c9:41:f3:7d:48:c9:ab:6a:64:fa:e9:
6c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DF:3E:11:C9:94:C6:2F:C5:3A:45:86:C7:70:B3:66:9A:81:B9:41
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xN8-EcmUxi_FOkWGx3CzZpqBuUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.242.0/24
87.121.104.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f5:59:d2:b9:25:b9:ba:39:77:d4:98:dd:ac:c5:3a:f8:58:
1b:e2:22:66:ce:c1:b8:d2:88:e4:7d:ba:3d:fc:d7:96:ad:ba:
af:af:7d:96:95:15:dd:2d:db:12:1f:93:9a:82:a4:db:26:8d:
b4:58:49:f5:a9:32:81:84:3d:5e:29:da:7f:f6:1f:72:0e:f8:
c8:38:cd:61:b5:d7:07:a9:a2:fe:ca:08:f6:53:3c:18:79:f2:
2e:ab:ff:37:38:b9:fb:d1:b8:c6:26:7c:fb:71:b2:79:af:18:
90:00:63:f9:a6:2e:a2:9f:47:17:aa:9b:01:59:a2:8e:90:ff:
2b:9d:1e:8e:c9:ab:63:da:0a:40:6e:6c:a9:75:37:4e:51:bf:
53:dd:5b:30:a8:e6:6e:84:0c:25:e1:95:f9:46:ca:21:fb:cd:
92:31:fc:23:20:b5:b7:42:b9:d3:da:41:92:ad:72:38:a7:07:
1f:28:45:63:0c:55:cc:3e:9b:bd:bd:9d:fd:5b:bc:4f:3f:33:
4b:8b:c2:81:c5:a3:e2:fb:0f:10:09:a1:5f:ec:68:39:29:33:
db:39:68:27:7f:08:06:e0:66:81:d4:75:17:37:ff:05:80:22:
e9:06:7e:3f:bb:df:ac:dd:dc:b2:07:76:55:90:0e:38:dc:cb:
b8:27:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 11:18:42 2024 by rpki-client on console-fra.rpki-client.org