Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/cBbLd5eFf3ZaZ8dwhu-Gua6qvY8.roa
File: cBbLd5eFf3ZaZ8dwhu-Gua6qvY8.roa (raw, json)
Hash identifier: WaSHH1nqW00xzi1KIOjIhP9b7TWAncv+5xLCAxUX08s=
Subject key identifier: 70:16:CB:77:97:85:7F:76:5A:67:C7:70:86:EF:86:B9:AE:AA:BD:8F
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0191B3823E3A1939F2B648FD11B94B8B1169
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/cBbLd5eFf3ZaZ8dwhu-Gua6qvY8.roa
Signing time: Mon 02 Sep 2024 16:12:22 +0000
ROA not before: Mon 02 Sep 2024 16:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 45.92.77.0/24 maxlen: 24
212.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 20:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:82:3e:3a:19:39:f2:b6:48:fd:11:b9:4b:8b:11:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 2 16:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7016cb7797857f765a67c77086ef86b9aeaabd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:0e:81:de:ad:7a:b9:c0:9f:de:87:75:10:
6c:0c:0c:58:6c:86:28:57:89:34:86:39:96:21:d0:
05:7e:b1:74:fa:4e:03:f0:f5:60:ab:32:6e:15:9a:
ff:fc:77:94:6a:5f:d9:8d:5d:ca:a4:66:bc:c5:2a:
cb:7e:30:18:97:7b:a3:10:65:85:f8:83:69:49:ee:
c6:6d:45:b4:0c:34:05:82:1e:90:37:79:43:13:1a:
8b:af:fc:3c:a4:5e:f5:0d:05:86:0a:47:7d:ba:68:
8d:91:fa:07:97:97:75:e1:94:db:8e:76:3e:02:9b:
6d:b3:58:bc:e6:d7:f7:17:ba:15:b9:d5:66:a4:5e:
94:0f:e6:e5:de:0b:bd:6c:6c:d8:42:3e:82:9a:ef:
16:38:e5:a0:0a:0e:6e:65:7e:22:df:22:0e:68:29:
08:7f:86:a7:2a:46:70:48:43:d0:d1:e5:b4:02:b5:
ec:7b:0c:32:f4:0f:4f:93:10:b6:d6:ff:8c:0e:e8:
01:97:a9:be:aa:47:18:34:2d:67:6a:45:0e:47:e9:
d1:b9:65:a7:0d:45:d5:e5:9c:69:2b:34:67:75:d1:
c4:fe:4e:2f:50:38:ee:00:63:3f:95:e9:ca:a5:31:
5b:45:9e:66:47:70:60:e9:20:64:b2:a2:1c:5a:c0:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:16:CB:77:97:85:7F:76:5A:67:C7:70:86:EF:86:B9:AE:AA:BD:8F
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/cBbLd5eFf3ZaZ8dwhu-Gua6qvY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1d:23:b0:35:4f:08:e5:ce:32:57:62:b8:51:9e:96:34:9c:
21:81:d5:69:5a:4e:82:0a:5d:e2:e2:ef:04:f4:0a:d7:3f:a1:
a0:6d:78:bf:4e:84:8e:83:ee:e5:47:45:97:8c:5b:d1:05:57:
44:84:ab:39:aa:04:0c:f2:02:af:b3:a7:0a:19:b0:66:ad:dd:
f7:1c:5d:00:a0:c4:6f:85:9d:0c:a5:12:11:6e:c8:47:d7:28:
5d:2a:7e:58:2c:05:39:82:64:11:4b:27:7a:8f:b0:26:01:a2:
c4:b1:03:e4:b8:d0:4d:1a:91:99:6b:8f:5f:52:82:a5:de:bf:
4a:c9:37:0e:80:26:21:f9:99:17:57:69:e1:a0:bc:cc:66:c6:
92:fe:3c:88:ae:1b:2d:4e:db:55:59:72:72:44:c7:0c:60:50:
54:32:98:ef:0c:89:a6:63:a2:8a:95:6e:66:2e:12:f0:f7:ac:
91:b8:d1:af:d7:fa:2d:5e:4a:90:c4:ea:18:96:0e:73:8a:f4:
09:b4:26:e5:dd:1d:5d:5e:47:3d:ae:de:ba:84:95:7c:b9:26:
ea:e4:cc:b7:93:99:f4:68:bd:d5:94:df:a8:f6:1b:29:46:49:
93:19:b8:bb:2a:9a:d3:49:63:a4:13:3c:4d:ed:e4:ab:fe:47:
51:e5:a5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 23:36:10 2024 by rpki-client on console-fra.rpki-client.org