Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/4QEkfzbClDzSoRpQMI3WFDZbzE4.roa
File: 4QEkfzbClDzSoRpQMI3WFDZbzE4.roa (raw, json)
Hash identifier: sBLogqhb9rHYRS2cwrM0ggdUO3DdRZ+qhvHPCl+kBas=
Subject key identifier: E1:01:24:7F:36:C2:94:3C:D2:A1:1A:50:30:8D:D6:14:36:5B:CC:4E
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0191CB8082D8C73A0B68E70AB2F37A632602
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/4QEkfzbClDzSoRpQMI3WFDZbzE4.roa
Signing time: Sat 07 Sep 2024 08:01:22 +0000
ROA not before: Sat 07 Sep 2024 08:01:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.129.242.0/24 maxlen: 24
91.230.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 06:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cb:80:82:d8:c7:3a:0b:68:e7:0a:b2:f3:7a:63:26:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Sep 7 08:01:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e101247f36c2943cd2a11a50308dd614365bcc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:17:c5:b8:29:e9:b1:6e:dd:dc:af:a8:e6:b5:
07:a5:71:23:9a:e2:72:13:e4:4b:c7:de:55:46:90:
5e:40:9f:ba:55:86:84:cd:19:89:0d:7d:f3:a0:ed:
e4:f5:37:fa:65:be:31:73:e8:6a:6c:71:69:a0:e0:
1e:cd:4e:08:f7:e0:9c:30:d9:bc:5c:5b:a9:db:e5:
13:1e:62:09:cc:68:fc:17:74:71:14:20:12:2a:f1:
d3:9d:9f:ba:38:30:59:9b:68:e0:00:69:ea:1e:eb:
62:d2:ec:41:87:77:e3:e8:21:44:ad:df:cf:49:52:
5e:98:79:27:9c:3f:20:ff:b9:d3:58:03:69:a3:01:
e2:f9:2b:62:e2:95:47:a0:17:b5:af:7c:c4:63:5e:
04:4e:08:f5:22:d8:23:a7:0e:19:73:c3:3e:83:0a:
e7:cd:99:93:5b:a1:42:be:98:77:50:3f:d3:f5:8c:
fe:51:2a:a3:d9:40:92:1d:71:01:90:1e:6b:db:85:
c8:85:16:fe:99:3d:96:0b:9b:06:12:da:c3:bc:f0:
8c:22:d2:96:26:a8:04:78:09:30:9c:69:b1:b6:f2:
a7:8a:8e:24:9c:8d:e9:00:8c:31:b8:1c:84:4f:fb:
59:03:eb:07:4b:b6:28:c6:92:fd:9e:a7:e9:03:a1:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:01:24:7F:36:C2:94:3C:D2:A1:1A:50:30:8D:D6:14:36:5B:CC:4E
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/4QEkfzbClDzSoRpQMI3WFDZbzE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.242.0/24
91.230.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d8:87:fb:33:46:49:ad:dc:fd:86:34:64:3a:1a:7a:13:65:
49:1a:59:85:d0:b6:34:ab:1b:92:d3:0e:49:f4:89:3a:c1:63:
5a:05:31:9c:f6:1a:c4:02:a0:86:07:2b:12:74:f8:0f:bc:0e:
23:dc:f8:cc:c4:4f:fa:40:38:d2:f0:1a:1e:80:e4:bb:34:9b:
ab:b4:47:6c:e9:00:65:7a:31:4a:d0:1f:c0:01:d1:6c:1c:36:
d3:65:2c:60:79:93:56:08:e8:23:9c:71:51:16:b2:81:2c:b5:
b4:ac:89:10:de:f9:ba:ad:63:f0:e0:d0:c4:a5:51:70:0c:a6:
4a:2d:a5:b3:49:14:52:b7:d7:87:37:f2:9c:f2:03:80:1e:84:
98:d6:1a:c9:d1:61:54:19:cd:11:b3:e5:1c:66:ac:85:0f:08:
0c:b4:fe:90:7e:c8:79:b9:2c:2d:20:a9:af:71:5d:86:6a:74:
92:7d:2d:1d:1f:75:be:dc:29:d7:0b:cf:f1:25:e4:10:dc:28:
03:27:e4:84:8f:f5:d6:aa:87:e7:1f:89:97:3e:05:03:86:8c:
51:eb:8c:a2:2c:c4:81:9f:86:bb:bb:a0:30:1a:19:2f:1d:12:
5c:26:cc:b8:82:88:5c:4d:bd:61:a5:f4:be:9d:bb:38:3d:51:
0a:39:96:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 07:53:21 2024 by rpki-client on console-fra.rpki-client.org