Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/3cbl5KsBnfqe2C8mEQfAQIP8mZM.roa
File: 3cbl5KsBnfqe2C8mEQfAQIP8mZM.roa (raw, json)
Hash identifier: Xdi5xPwdTYU4cGMQL9oswd3yIRy42GskhOapZ7gkCfM=
Subject key identifier: DD:C6:E5:E4:AB:01:9D:FA:9E:D8:2F:26:11:07:C0:40:83:FC:99:93
Certificate issuer: /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Certificate serial: 018CC50079FE2327499B4D2AEED48E835362
Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/3cbl5KsBnfqe2C8mEQfAQIP8mZM.roa
Signing time: Mon 01 Jan 2024 12:29:51 +0000
ROA not before: Mon 01 Jan 2024 12:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 45.85.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 07:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:79:fe:23:27:49:9b:4d:2a:ee:d4:8e:83:53:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Validity
Not Before: Jan 1 12:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddc6e5e4ab019dfa9ed82f261107c04083fc9993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a7:6e:5d:5f:86:2c:0f:7c:fe:c9:eb:52:cf:
68:f0:ce:48:f8:e5:79:4a:8c:be:4c:f2:7a:ee:b1:
b2:0c:3d:2a:38:10:b6:4f:a9:db:04:ed:f6:8b:db:
6f:48:4a:90:d9:cf:be:39:8e:9e:23:45:b0:cb:4b:
05:d3:f3:04:af:b2:79:f2:1d:cf:20:3b:ba:79:c7:
28:4a:3c:1f:45:48:bd:06:ad:b9:7e:36:ba:77:b3:
67:79:36:51:b4:4c:8e:a2:12:21:2d:f6:43:1a:66:
09:3c:7e:f9:91:3e:1a:19:01:5a:3a:e4:b8:12:86:
80:8c:66:d2:a4:84:50:25:ed:80:85:b6:0a:79:86:
b8:78:5a:7c:77:b8:89:a5:21:f8:81:46:d8:90:3e:
29:96:f7:c8:cf:a4:08:fe:84:05:17:c8:ce:a2:a1:
c2:36:3c:b2:36:16:93:a9:c4:82:40:c4:ae:7c:b2:
17:7e:0a:aa:6a:54:9a:e1:8d:de:ae:f3:36:25:16:
b8:ec:05:52:ba:49:33:3a:da:12:a2:67:73:ec:88:
ce:24:15:a0:a6:a6:2c:cc:63:1e:aa:a9:06:e7:76:
37:17:4c:9a:b9:2b:f7:05:a5:32:5d:00:5e:d4:73:
2c:dd:6c:cd:25:c6:8a:60:d1:ec:da:48:8e:73:e1:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C6:E5:E4:AB:01:9D:FA:9E:D8:2F:26:11:07:C0:40:83:FC:99:93
X509v3 Authority Key Identifier:
keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/3cbl5KsBnfqe2C8mEQfAQIP8mZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.99.0/24
Signature Algorithm: sha256WithRSAEncryption
38:dc:dc:bf:76:7c:a0:a8:cd:bf:1b:32:66:5d:2f:99:a4:58:
b6:63:59:c2:13:c9:0c:71:bb:6c:e5:fe:58:f1:48:32:ad:6a:
63:4e:e8:29:c5:5f:c7:9a:32:8c:37:55:6d:59:95:99:51:2c:
0d:54:0a:52:8a:8c:08:23:04:cf:49:7d:45:64:ab:13:92:98:
a5:8f:48:2d:cc:37:53:e9:4b:17:5a:55:bf:25:24:fe:b7:d4:
46:3b:2e:31:9a:d2:67:01:26:ec:e9:2d:47:eb:13:65:d3:14:
ad:76:81:0d:34:d3:92:05:1c:a8:3d:2a:ec:f9:15:ae:e2:77:
71:9e:af:8f:29:dd:8b:32:8a:bf:33:c7:ee:b4:be:66:ae:93:
b6:6a:22:73:4f:fd:76:b2:01:c5:d0:65:b6:8d:f0:30:db:55:
a0:79:c4:76:a3:94:22:11:c8:a2:36:71:0f:60:19:2b:75:35:
e8:7d:00:df:53:12:c2:1f:42:34:b8:36:ac:b3:5d:d6:da:f8:
af:29:37:0f:3c:4c:18:0a:03:d7:53:c1:d0:c6:b6:bf:36:54:
96:94:95:fb:fe:fe:ab:6d:fd:ef:58:9c:01:19:c0:e3:c3:b1:
a9:48:4b:e8:66:11:0d:72:d3:86:72:38:4d:81:8b:0f:7b:e8:
26:31:a3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:35 2024 by rpki-client on console-fra.rpki-client.org