Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/zeQwYqRNDRKxiEDLUWOAe3df60Q.roa
File: zeQwYqRNDRKxiEDLUWOAe3df60Q.roa (raw, json)
Hash identifier: pn75YCKahUe/ma1AwSLHPjw7IyOCSIuOV9ZOzRbVXio=
Subject key identifier: CD:E4:30:62:A4:4D:0D:12:B1:88:40:CB:51:63:80:7B:77:5F:EB:44
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 018DC0C3506C9BB9C85E60C72C8DC0B12ADB
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/zeQwYqRNDRKxiEDLUWOAe3df60Q.roa
Signing time: Mon 19 Feb 2024 09:47:22 +0000
ROA not before: Mon 19 Feb 2024 09:47:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.95.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:c3:50:6c:9b:b9:c8:5e:60:c7:2c:8d:c0:b1:2a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Feb 19 09:47:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cde43062a44d0d12b18840cb5163807b775feb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:75:f4:4a:00:a4:85:a5:c7:2e:08:f3:64:
c1:64:91:2e:ef:71:49:4e:a7:75:b8:1b:9f:27:63:
d3:59:9d:cd:b2:a5:93:b3:05:f7:3d:07:a2:36:68:
79:97:36:00:c9:51:30:f5:68:ba:4f:88:03:22:ad:
51:00:bb:85:5a:e6:fe:95:b4:37:e3:81:d2:70:0a:
d2:e2:02:20:5e:cc:1a:76:7e:9c:b5:de:6b:ac:b8:
fe:53:77:5f:b4:ed:37:09:cc:9c:87:93:be:3c:dc:
5b:ed:71:e8:e1:38:1c:dd:fb:f5:1c:45:02:81:28:
b5:25:ec:d2:e4:f0:6c:d1:1a:f7:ab:70:17:da:19:
60:7d:c9:08:f5:9a:a7:38:bf:53:4f:b3:09:bd:f4:
67:d7:7d:e6:7f:f0:83:7d:ec:01:a7:8c:97:53:2a:
7e:11:f1:8e:13:69:c8:c7:f7:02:8f:45:a8:e3:8f:
75:db:b9:1a:60:34:13:af:88:84:eb:b3:fe:4c:89:
75:0f:4f:93:a5:f2:60:2b:95:d2:28:27:2f:23:be:
6b:d6:98:6c:e0:55:dc:a5:b7:db:b6:bb:54:a3:62:
43:1b:5e:28:01:6e:d7:ac:28:05:32:67:c1:ff:b8:
56:75:3b:49:57:4c:6f:ca:e5:8d:98:a5:cc:b1:b9:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E4:30:62:A4:4D:0D:12:B1:88:40:CB:51:63:80:7B:77:5F:EB:44
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/zeQwYqRNDRKxiEDLUWOAe3df60Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.114.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:53:78:33:07:2f:9d:e1:6b:b7:d2:0b:55:13:eb:a6:03:74:
46:cd:b2:49:5a:29:0e:b0:cf:0e:b1:57:1e:18:fe:9b:e7:19:
52:71:0c:e4:71:ba:64:fe:f2:a9:48:fd:4a:2a:61:af:7e:ef:
6b:a1:2f:aa:cc:c3:65:d0:64:7b:b0:d2:6e:d5:bc:2d:b5:47:
96:26:01:e3:f7:ca:db:93:5a:ab:9c:2d:2d:cb:45:c0:20:0c:
fa:bc:a5:14:e5:8b:82:dc:c9:41:27:b8:60:8c:05:4b:f0:85:
e9:21:2c:e3:c5:a3:e8:be:93:fb:46:87:d2:41:91:8d:6c:ac:
9a:e4:90:88:72:62:0b:db:ea:15:8d:b3:3b:32:d2:a6:36:68:
f6:89:39:f4:2f:22:23:95:73:96:18:06:8b:8b:99:f2:e3:81:
4b:8e:9e:89:74:86:0e:33:4a:27:c6:27:c3:95:36:73:3e:4c:
74:89:ab:85:fc:21:46:66:7f:4b:1d:6d:6d:ce:96:0c:b1:a4:
35:60:06:eb:31:2c:86:b8:e7:c3:d9:66:85:33:20:cc:53:04:
d0:8a:87:49:a2:2b:19:4f:40:e1:59:ce:5b:1a:59:b0:a4:7e:
64:51:53:5b:8b:08:7b:95:df:38:31:61:39:58:98:97:b9:fb:
66:04:38:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:15 2024 by rpki-client on console-fra.rpki-client.org