Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xrwF4oYdEPbcWPN5GNrCvqH9RTo.roa
File: xrwF4oYdEPbcWPN5GNrCvqH9RTo.roa (raw, json)
Hash identifier: UbgEdRi+JWO6NwZqFr54gOhEXWnksrUo9izz3mfnd3s=
Subject key identifier: C6:BC:05:E2:86:1D:10:F6:DC:58:F3:79:18:DA:C2:BE:A1:FD:45:3A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019091803D71F5E82738E8B837C2F56C286F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xrwF4oYdEPbcWPN5GNrCvqH9RTo.roa
Signing time: Mon 08 Jul 2024 08:40:18 +0000
ROA not before: Mon 08 Jul 2024 08:40:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152878
IP address blocks: 45.8.93.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 11:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:80:3d:71:f5:e8:27:38:e8:b8:37:c2:f5:6c:28:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 8 08:40:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6bc05e2861d10f6dc58f37918dac2bea1fd453a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:91:55:f0:4e:de:68:80:88:6c:b9:56:cc:85:
48:e2:a6:87:f7:21:93:2f:5e:bb:37:97:7c:89:33:
ff:b3:b7:2c:a2:85:15:6a:2a:e6:b2:af:00:ed:f0:
69:9c:4a:ae:a5:bf:88:6d:5d:86:e5:90:ef:67:9b:
0f:96:12:3d:23:b5:0c:46:26:08:03:91:bc:14:70:
ae:26:cf:e4:44:82:b9:71:a7:92:da:b7:05:00:bf:
7e:37:50:b8:c7:8a:2c:6b:ba:65:3a:59:5a:8f:94:
66:5e:0f:32:9e:b8:07:c3:8f:66:c7:75:5e:18:22:
4f:e1:0c:13:81:2c:12:ca:ae:fa:11:c0:65:3f:95:
58:b2:47:f7:28:f2:20:a4:fa:76:8d:e2:f2:de:b2:
83:84:ce:68:aa:5d:af:40:d0:7b:dc:c8:e6:37:2c:
e7:5e:88:6e:6b:f5:18:74:77:51:03:9f:b0:3f:68:
81:9d:df:b4:c7:98:a5:b8:52:e3:8c:b6:85:ed:6e:
ba:23:2b:76:9b:74:8f:d4:1e:9b:e1:15:54:ba:e8:
95:89:80:bc:0d:aa:7a:1f:5c:41:43:b8:36:68:38:
05:f3:3e:05:86:7a:9d:9e:38:1b:f2:7f:5b:ae:8d:
ba:c4:10:63:0d:15:b4:67:8f:c3:98:16:a7:1f:37:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BC:05:E2:86:1D:10:F6:DC:58:F3:79:18:DA:C2:BE:A1:FD:45:3A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xrwF4oYdEPbcWPN5GNrCvqH9RTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
94.154.161.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d2:dd:1a:1f:74:48:a9:33:2c:6c:7c:a3:ee:7f:f7:8c:d6:
0c:40:b9:a7:4f:51:22:75:b1:d2:8c:1c:8f:e6:8a:f8:07:1c:
5a:f6:0c:a1:09:7b:8c:b8:89:c8:a9:1b:d2:4b:3d:3c:55:17:
53:8f:d0:f9:17:bb:68:8d:8d:ac:bd:0b:5b:32:75:29:ca:36:
53:84:0a:72:23:c9:bd:e9:57:cf:9e:7f:9d:5f:a9:c8:34:9a:
b3:ae:7d:a7:e7:b8:0f:15:98:88:35:93:f0:f4:f0:48:2f:87:
62:21:fe:9b:34:19:9f:fa:36:f0:a7:1f:42:4a:0e:3e:f2:11:
ef:2e:e8:4b:56:c5:78:45:a5:48:50:d2:bd:1c:c7:19:34:3b:
55:5f:58:39:b7:cb:23:ef:77:96:83:dc:60:af:5a:c1:c0:fc:
89:f7:4e:18:04:ef:c0:55:af:80:6f:86:ff:c3:a5:32:38:a9:
14:a1:01:09:a5:f0:f7:87:ed:e9:4f:3c:9e:18:e0:bc:9c:9e:
c5:d0:24:45:3b:f6:30:5b:d9:c8:e7:d7:a3:79:5a:9f:9a:c7:
05:0a:9e:e7:1f:b9:17:4f:c5:4e:9d:ed:c7:ec:55:42:5d:e9:
67:e3:99:48:b6:81:6b:78:5e:f3:0f:44:72:33:a6:ab:d8:0e:
d3:34:b8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 13:50:31 2024 by rpki-client on console-ams.rpki-client.org