Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/U5Zca2Df4hDhttuNxlz-chwVguk.roa
File: U5Zca2Df4hDhttuNxlz-chwVguk.roa (raw, json)
Hash identifier: Le9hNgFaar21BcD/ApDdtF5iHL8YoJV7KSwHDT0K3QI=
Subject key identifier: 53:96:5C:6B:60:DF:E2:10:E1:B6:DB:8D:C6:5C:FE:72:1C:15:82:E9
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 019242543941F3A13C9FC698B20D75329A39
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/U5Zca2Df4hDhttuNxlz-chwVguk.roa
Signing time: Mon 30 Sep 2024 09:47:48 +0000
ROA not before: Mon 30 Sep 2024 09:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.140.208.0/24 maxlen: 24
82.115.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 09:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:54:39:41:f3:a1:3c:9f:c6:98:b2:0d:75:32:9a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Sep 30 09:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53965c6b60dfe210e1b6db8dc65cfe721c1582e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:3d:bf:84:0b:f6:d8:5a:cb:b0:e5:20:fb:
5b:d1:a7:90:d1:e2:2c:73:9d:cc:9c:ea:fc:76:f7:
42:79:40:6f:f9:33:3f:1f:ea:08:da:b9:de:4d:63:
ae:9f:fc:a4:77:ff:82:00:76:54:58:68:8a:a3:4a:
a3:42:b3:f9:a1:f0:88:3c:08:a9:ad:47:3b:a7:79:
af:3c:66:b6:a2:89:35:18:80:bc:93:30:a8:7a:ec:
56:fd:ba:45:56:b4:ff:da:88:47:19:e1:5c:72:df:
32:74:80:53:bd:c9:24:87:76:20:5d:a1:71:8f:a3:
00:8f:df:62:63:dc:3e:c2:6d:c0:24:ec:d9:01:be:
72:f8:2c:63:ee:ca:95:ec:90:b1:be:99:46:ce:92:
18:ae:d0:8e:99:2f:74:48:af:ea:8a:85:4b:cc:11:
6f:ae:b2:22:ca:64:67:5b:ab:68:c1:16:51:cb:35:
c7:1f:57:31:a0:59:46:76:2a:c8:37:ae:38:4e:bd:
16:81:38:26:40:fb:b0:2a:b5:ec:86:43:50:08:3f:
ca:f2:da:b4:29:fd:89:6f:a2:e8:de:6c:0c:e8:bc:
22:f6:3f:b3:b7:20:e9:73:e3:be:f2:77:39:a7:e5:
96:a8:25:63:50:6e:e1:80:66:a5:f9:64:d7:09:74:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:96:5C:6B:60:DF:E2:10:E1:B6:DB:8D:C6:5C:FE:72:1C:15:82:E9
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/U5Zca2Df4hDhttuNxlz-chwVguk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.208.0/24
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
01:23:fe:a7:9d:a4:94:15:b3:45:a2:cc:ff:9a:c9:eb:ee:51:
89:fd:74:e4:e6:15:64:af:5d:97:24:04:e9:32:c7:36:ba:72:
3e:4c:a9:28:30:6c:d6:a2:4c:c4:d0:d3:b2:87:2d:20:96:d9:
7d:32:ef:04:d7:62:7c:91:d6:96:8e:b0:37:72:36:ea:7e:ab:
4d:9f:40:14:28:c4:af:cb:e5:8c:47:a7:9b:77:18:38:d2:a2:
95:cc:92:05:b6:bc:46:4c:fc:87:fd:89:09:31:77:ce:d5:cc:
ff:28:45:9c:2c:76:d0:7b:07:4e:c3:6f:37:5f:db:a4:d4:ad:
1e:23:7f:b1:63:e8:04:fe:88:f0:4a:34:2d:07:82:fe:44:da:
6a:bc:f1:f0:d9:22:ca:08:ae:40:a5:62:e5:08:77:b1:2a:82:
91:ec:60:a5:67:53:92:35:7f:99:10:e9:69:51:5d:ca:f0:83:
b4:47:49:97:cb:48:7c:5e:e3:79:9e:68:06:20:13:c2:62:3a:
bf:de:bb:03:26:08:c3:5b:97:99:96:0f:bc:c0:94:e8:73:a6:
14:72:93:b0:04:de:d6:83:31:76:f8:0c:e0:5a:92:b7:30:4b:
39:5b:0b:7c:20:38:de:c8:b8:b8:70:d5:73:fd:89:f0:f3:2f:
36:9a:cb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 12:20:05 2024 by rpki-client on console-ams.rpki-client.org