Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/92AmKgVZ9vXjLxAT7K4MKyIj_ZU.roa
File: 92AmKgVZ9vXjLxAT7K4MKyIj_ZU.roa (raw, json)
Hash identifier: /k2FrcWyqpi/LPPC5VbFUY4IuGEAGpQIK4atkD1+UME=
Subject key identifier: F7:60:26:2A:05:59:F6:F5:E3:2F:10:13:EC:AE:0C:2B:22:23:FD:95
Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial: 018E1D774BACA5BE3343240CE501E118EA56
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/92AmKgVZ9vXjLxAT7K4MKyIj_ZU.roa
Signing time: Fri 08 Mar 2024 09:49:01 +0000
ROA not before: Fri 08 Mar 2024 09:49:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207054
IP address blocks: 45.10.12.0/22 maxlen: 22
45.15.92.0/22 maxlen: 22
185.167.112.0/22 maxlen: 22
185.231.192.0/22 maxlen: 22
194.58.24.0/22 maxlen: 22
2a0b:1a07::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 16 Apr 2024 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1d:77:4b:ac:a5:be:33:43:24:0c:e5:01:e1:18:ea:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Validity
Not Before: Mar 8 09:49:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f760262a0559f6f5e32f1013ecae0c2b2223fd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:22:99:bc:59:c4:a3:93:66:7b:64:3a:6b:49:
d2:2a:a5:e3:59:b3:fc:eb:9c:d3:63:68:fc:a3:81:
84:93:fc:3c:32:6f:89:5b:82:d7:52:f7:5a:39:fc:
94:62:d0:07:94:07:93:fc:28:eb:a6:ca:91:38:fd:
03:0e:dc:f8:9f:2b:29:21:e0:d4:7a:7e:13:6e:aa:
33:13:dd:cd:bd:b9:ac:ab:94:8c:8b:c5:76:bb:06:
4e:60:4d:b3:07:d8:5b:02:89:dd:5c:e1:a9:68:fa:
46:fa:1f:0a:e6:da:45:af:0e:fd:2b:03:06:c8:98:
84:ca:17:ea:19:78:03:cf:1d:eb:33:68:8b:af:c4:
a9:9c:66:82:a4:24:6b:35:5e:a7:3f:59:c7:7c:2f:
64:41:f7:e7:74:cd:6c:d4:cf:d9:23:a7:00:74:2b:
b7:6e:1d:da:16:42:47:a1:a6:0c:5e:65:0a:23:7c:
b6:a2:5f:ec:57:10:b5:d0:0a:26:c9:34:60:b0:fd:
08:82:77:4f:14:42:a2:ea:4b:f0:8a:81:a7:83:fe:
b1:fc:d3:4a:0f:47:d7:ed:20:6f:8f:e1:6b:31:a3:
b2:4e:35:63:f1:aa:e4:cb:f7:94:93:91:b1:92:57:
cc:dc:f7:ed:ef:26:00:1c:e3:0c:18:80:03:33:93:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:60:26:2A:05:59:F6:F5:E3:2F:10:13:EC:AE:0C:2B:22:23:FD:95
X509v3 Authority Key Identifier:
keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/92AmKgVZ9vXjLxAT7K4MKyIj_ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.12.0/22
45.15.92.0/22
185.167.112.0/22
185.231.192.0/22
194.58.24.0/22
IPv6:
2a0b:1a07::/32
Signature Algorithm: sha256WithRSAEncryption
50:fd:cb:8d:85:c4:4b:49:a3:f3:65:5e:a4:6c:8d:cd:0f:0a:
58:de:e5:a2:c8:2f:fb:c4:cd:e7:13:68:0c:2d:f6:92:a9:dd:
29:76:57:40:ce:f4:d2:55:6e:dd:79:12:ad:c7:c0:e5:ec:68:
c4:00:69:3b:e9:41:db:08:35:d4:68:32:91:f8:b3:bd:7b:0f:
a9:d6:29:5c:5b:c2:15:28:82:50:ae:ee:62:c4:d8:c7:fd:fe:
56:d1:1a:e7:35:6e:56:63:2c:51:30:db:10:04:f8:00:90:e8:
cc:95:b6:c8:91:88:95:99:24:11:c7:ef:ff:a7:50:a2:c5:8e:
b3:ea:25:bf:c2:a3:d0:8e:d3:b6:ef:41:e8:9d:be:a9:db:d1:
93:7f:73:ad:28:50:9d:bc:03:06:b9:47:5a:2c:36:3f:ca:8c:
33:86:e0:ab:15:a8:16:aa:a4:20:a0:bc:24:15:f5:7b:e3:48:
5a:bf:fa:05:74:62:a7:3f:70:33:1d:38:03:4d:5c:50:60:e7:
5d:2e:5b:96:f4:b2:e0:b2:57:e2:94:b0:d0:15:9b:2a:e2:02:
c0:ee:85:81:ac:b4:12:ae:90:68:82:bb:e4:3b:e4:63:0f:4b:
0e:24:e7:ec:5c:d4:4f:a6:7d:8e:5c:58:02:2b:79:42:a8:3d:
dd:72:55:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:41 2024 by rpki-client on console-fra.rpki-client.org