Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/7v-z8WPsaLUeelPHHrI5uBo9zEQ.roa
File: 7v-z8WPsaLUeelPHHrI5uBo9zEQ.roa (raw, json)
Hash identifier: nu97EVpZFL6W1AibO+vp3mCEN5th166k3X+xywBFINg=
Subject key identifier: EE:FF:B3:F1:63:EC:68:B5:1E:7A:53:C7:1E:B2:39:B8:1A:3D:CC:44
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0191FA67237C807697EA5B7FE14CCDADC09A
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/7v-z8WPsaLUeelPHHrI5uBo9zEQ.roa
Signing time: Mon 16 Sep 2024 10:35:48 +0000
ROA not before: Mon 16 Sep 2024 10:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202592
IP address blocks: 45.12.100.0/22 maxlen: 24
185.96.56.0/22 maxlen: 24
185.136.16.0/22 maxlen: 24
194.38.48.0/22 maxlen: 24
2a05:ff00::/29 maxlen: 48
2a07:5b40::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 28 Oct 2024 09:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:67:23:7c:80:76:97:ea:5b:7f:e1:4c:cd:ad:c0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 16 10:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eeffb3f163ec68b51e7a53c71eb239b81a3dcc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:29:69:d5:c2:42:96:54:1e:99:3c:7a:bd:
67:8c:b7:ee:c3:12:0f:4d:4a:08:fe:33:70:92:10:
3e:36:e9:81:78:47:26:0c:78:e4:34:dd:bc:d2:f7:
61:ea:b8:d1:d5:ef:b7:7d:ae:9b:b7:cf:be:9d:99:
22:a7:66:ff:b4:7e:53:0b:18:83:da:3b:a2:a4:b8:
07:ac:cd:be:39:d4:fe:ab:ac:51:b0:25:15:9c:7b:
b6:77:c5:1a:39:8a:31:d1:e8:68:8f:64:ab:a0:45:
fc:72:12:3f:b9:de:9e:f4:26:cf:d0:96:a1:9f:87:
df:d1:73:fa:93:39:cf:8d:0e:54:89:b3:cf:a0:8b:
9f:43:0e:e1:68:b2:e5:ff:f5:b5:6e:6d:40:44:f1:
1f:de:cf:4f:42:3f:db:fe:a4:1c:e8:ff:48:88:b6:
6e:bc:8d:21:67:82:c9:67:b4:44:2b:ba:37:cf:00:
1d:37:36:32:4c:73:78:f6:77:c9:ba:9c:40:9e:77:
92:f9:3c:cb:03:db:6d:a4:ec:8c:c4:09:7b:89:a5:
fc:f6:f1:f6:cc:99:f0:2b:8a:92:35:a4:17:7e:3a:
4a:ff:22:8f:78:2d:f7:41:95:26:44:04:b8:aa:bd:
ba:48:b6:96:ad:57:02:8c:c8:ac:14:19:2f:7c:e0:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FF:B3:F1:63:EC:68:B5:1E:7A:53:C7:1E:B2:39:B8:1A:3D:CC:44
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/7v-z8WPsaLUeelPHHrI5uBo9zEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.100.0/22
185.96.56.0/22
185.136.16.0/22
194.38.48.0/22
IPv6:
2a05:ff00::/29
2a07:5b40::/29
Signature Algorithm: sha256WithRSAEncryption
4a:4f:ab:67:05:2d:36:d0:a1:c4:10:89:e0:02:49:a2:53:c3:
4c:21:be:f7:68:e5:50:36:72:bd:75:f2:39:0d:64:3d:3d:4d:
d1:87:95:72:65:ff:23:f4:8e:f9:15:c0:ef:70:2a:f2:a4:2c:
cd:f2:1d:62:62:96:88:1f:53:af:ce:f4:01:c6:f7:cd:45:90:
cc:1e:0f:a8:c9:a0:59:a9:29:75:a1:82:8a:c0:2d:c9:56:c2:
4b:a9:27:c0:f4:55:5d:e2:a2:58:e8:8a:58:c6:0c:85:c7:0a:
8a:08:a6:07:dd:9c:a9:5c:22:97:94:20:77:ac:03:bb:ac:da:
39:8d:3a:6d:e9:6f:52:af:c0:93:21:01:ce:78:fe:48:9d:99:
c3:d4:27:ac:60:b0:ca:2b:40:9b:f9:78:c5:a4:b8:aa:ce:e3:
93:d5:c2:79:54:b4:7d:7f:c7:cf:b3:dd:ab:62:95:7d:80:7c:
f4:29:56:f9:b0:8f:80:60:fa:50:b4:f9:56:04:77:c5:24:4b:
cc:fe:f3:2e:65:a6:62:5e:25:f7:f0:84:a5:0f:9b:6d:6d:e5:
78:b8:88:f3:f4:50:2e:22:16:b6:11:19:4b:93:75:af:5e:94:
17:af:52:f9:c3:b0:45:1f:41:7b:a9:ae:00:28:47:6d:87:ab:
62:71:35:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 12:17:12 2024 by rpki-client on console-ams.rpki-client.org