Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/8Q1xtg60zs1Ms8EfSGjHTWYEozE.roa
File: 8Q1xtg60zs1Ms8EfSGjHTWYEozE.roa (raw, json)
Hash identifier: mPfpUg8MFjS9EuiqDNDXNwKUXQnZ3nZvgCXRnimNcAs=
Subject key identifier: F1:0D:71:B6:0E:B4:CE:CD:4C:B3:C1:1F:48:68:C7:4D:66:04:A3:31
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 0191C0F674D578D34D01BFF1360D1D389585
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/8Q1xtg60zs1Ms8EfSGjHTWYEozE.roa
Signing time: Thu 05 Sep 2024 06:54:22 +0000
ROA not before: Thu 05 Sep 2024 06:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62020
IP address blocks: 45.159.13.0/24 maxlen: 24
45.159.15.0/24 maxlen: 24
91.246.55.0/24 maxlen: 24
185.9.0.0/22 maxlen: 22
185.9.0.0/24 maxlen: 24
185.9.2.0/24 maxlen: 24
2a03:4440::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 07 Sep 2024 07:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c0:f6:74:d5:78:d3:4d:01:bf:f1:36:0d:1d:38:95:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Sep 5 06:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f10d71b60eb4cecd4cb3c11f4868c74d6604a331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:de:13:19:87:e7:13:41:cb:53:4d:06:59:
aa:57:bf:47:64:ec:3a:cd:3e:36:2a:df:3b:b5:11:
08:d8:44:85:ab:ec:28:fe:a0:75:8a:ad:59:88:5a:
6f:3b:9f:b2:69:d5:ac:d1:89:3f:95:e5:9b:42:00:
84:c2:05:d3:3d:50:f2:3b:60:d3:09:a5:58:dd:7b:
27:0c:57:f0:15:0d:a2:d3:f7:70:9a:29:c5:9e:5c:
33:e5:b4:ad:a7:9c:a3:1c:54:0a:71:b3:0a:d0:8d:
f3:3d:dc:17:9a:ca:6b:4d:3e:62:83:0f:66:9e:91:
b5:e4:41:d4:00:1f:a0:c3:e3:4a:94:ef:f8:7f:19:
e0:22:7d:cf:00:d2:7f:88:0d:fa:f2:c7:d9:ba:08:
08:9f:d1:37:b9:5a:e2:9a:b2:f0:0d:c3:d9:5e:0b:
c3:bb:5e:5c:6b:09:1f:a5:51:03:f4:2f:75:c7:ec:
8b:aa:ad:4c:bb:be:dc:c0:bc:2b:52:55:d4:84:17:
95:fe:93:b8:e5:32:99:d6:19:7f:47:5d:9f:c6:42:
8e:3e:53:b8:55:18:de:3a:bb:b1:4c:45:42:01:72:
13:7e:59:b4:57:0f:37:eb:f0:71:02:17:5c:5b:5a:
1e:38:20:02:f8:3e:dc:94:83:e3:b0:5f:50:2d:18:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0D:71:B6:0E:B4:CE:CD:4C:B3:C1:1F:48:68:C7:4D:66:04:A3:31
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/8Q1xtg60zs1Ms8EfSGjHTWYEozE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.13.0/24
45.159.15.0/24
91.246.55.0/24
185.9.0.0/22
IPv6:
2a03:4440::/32
Signature Algorithm: sha256WithRSAEncryption
50:49:2f:7b:eb:0f:a2:9a:7e:71:34:cb:cb:73:a1:b1:54:6f:
70:04:36:72:d4:14:5a:ad:b1:d4:ed:0a:80:91:ce:c4:0e:af:
b3:59:98:01:1b:41:d6:1d:b1:20:8e:83:a3:53:a2:5e:0e:6b:
e2:79:81:03:09:20:58:ad:e2:50:3b:74:f8:89:5a:fc:47:f1:
f7:6f:c5:b8:f0:d7:b5:fc:9f:32:56:4b:72:22:30:32:8b:b4:
2f:59:c3:04:19:ea:dc:d4:55:07:cf:c4:50:53:83:6f:b5:d3:
66:1c:19:b3:66:5c:00:e6:2a:95:c3:d9:a2:b0:14:72:29:d3:
b7:02:81:97:f0:78:ee:b5:b5:7b:88:aa:50:52:ca:4e:d2:98:
a5:a9:8d:9d:f9:0a:34:32:e6:79:ca:2b:d8:2d:fe:96:43:42:
a7:85:d7:d5:c3:28:57:f6:cc:d2:7e:98:be:05:b8:06:9b:17:
f7:a7:49:90:91:40:73:b3:ff:4c:e0:0e:d2:38:07:c2:68:b0:
39:4c:7b:92:c9:a6:6f:69:46:ae:b0:c0:aa:93:44:09:30:33:
79:f4:9e:ba:4b:b3:61:30:89:74:d9:54:a4:be:b7:ce:ae:16:
71:fa:56:f9:f7:8a:1c:b0:fb:3b:5f:45:8d:5b:7f:f1:cb:5f:
c6:d8:de:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 09:50:25 2024 by rpki-client on console-ams.rpki-client.org