Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/AzJdnNByqGt4IEk7SUCmaa0Yx1o.roa
File: AzJdnNByqGt4IEk7SUCmaa0Yx1o.roa (raw, json)
Hash identifier: sFt/rZ284fNNMRozKUiTGHgtjZEeaqBmjyPhjTeB+sI=
Subject key identifier: 03:32:5D:9C:D0:72:A8:6B:78:20:49:3B:49:40:A6:69:AD:18:C7:5A
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0191BDB72A3B12EA190FDC328C2AA6A4CBC9
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/AzJdnNByqGt4IEk7SUCmaa0Yx1o.roa
Signing time: Wed 04 Sep 2024 15:46:23 +0000
ROA not before: Wed 04 Sep 2024 15:46:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203025
IP address blocks: 45.67.117.0/24 maxlen: 24
194.50.184.0/23 maxlen: 23
194.50.188.0/23 maxlen: 23
2a02:c580::/29 maxlen: 29
2a09:ef40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 11 Sep 2024 16:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bd:b7:2a:3b:12:ea:19:0f:dc:32:8c:2a:a6:a4:cb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 4 15:46:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03325d9cd072a86b7820493b4940a669ad18c75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:9a:d2:a5:ab:d7:f2:99:e2:d3:dc:fb:47:
56:bc:e9:e3:94:58:76:d4:d5:e6:65:5f:77:21:c0:
2e:0f:68:ae:16:88:e6:24:1b:b7:5e:23:d5:f1:d5:
8c:da:8b:76:95:10:b2:d8:3e:a8:8c:0e:4d:cc:3c:
be:35:42:3c:94:cb:35:9e:17:be:5d:2b:a6:3a:e3:
f5:bd:52:b1:30:3a:a9:97:12:00:b6:e1:4c:e0:69:
5b:23:b4:1c:30:61:32:54:44:12:83:a4:e4:8d:0e:
5f:68:d8:66:bb:c9:b4:c8:59:eb:96:75:37:dd:f5:
39:36:f0:74:f0:37:71:a6:2f:ae:09:d2:f2:ea:ab:
97:ef:d4:8c:a8:b4:c0:28:b1:5f:a0:a0:61:5d:21:
28:e6:7a:2f:55:52:73:c6:e4:ab:d8:b2:a3:ad:17:
e1:07:20:3a:33:58:dc:81:f8:36:a7:5e:d2:82:01:
9f:d5:3e:6d:17:44:db:69:c1:c6:86:bf:86:3b:e5:
02:f7:65:e4:8f:8c:e5:80:fe:91:5b:c4:76:cf:36:
83:b9:40:67:e8:04:80:70:9d:f5:2f:b3:ad:be:17:
2c:d8:6b:4f:a8:66:00:2d:10:88:ef:09:9e:0e:f9:
cd:b0:72:0d:e5:ec:0f:c4:d0:d2:30:03:b8:95:6b:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:32:5D:9C:D0:72:A8:6B:78:20:49:3B:49:40:A6:69:AD:18:C7:5A
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/AzJdnNByqGt4IEk7SUCmaa0Yx1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.117.0/24
194.50.184.0/23
194.50.188.0/23
IPv6:
2a02:c580::/29
2a09:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
33:d6:88:f1:cd:85:c1:5d:17:56:b3:92:b1:be:59:cf:a3:2c:
68:41:f8:fd:0a:c3:97:cd:42:23:59:07:25:0d:12:a3:bf:99:
41:f5:21:0e:20:8e:ec:99:9c:bf:91:a9:fe:c3:97:4d:ad:53:
9a:fc:06:90:b0:58:ba:54:ba:8f:73:bc:b8:4e:d7:d1:dd:5c:
fc:bc:5e:7d:0b:51:44:ef:b5:17:bf:5b:7a:97:f6:09:b6:23:
b6:b5:36:f0:e4:4a:03:a4:f8:c7:fe:72:4a:2a:4b:bd:23:66:
26:00:8b:a3:88:a4:5a:7a:e8:4c:c9:a4:b3:f3:81:13:f9:f6:
c3:b5:c2:b2:09:c8:ca:0e:55:d8:df:f1:19:36:dc:4f:81:65:
95:6d:c8:92:56:5f:b7:26:fc:a2:49:7b:25:b3:c2:3e:c1:54:
b8:e6:6c:21:d0:e7:0a:e1:39:7a:9d:1a:e7:86:17:ea:f6:fc:
f5:e0:27:a3:9a:8f:00:0f:12:5b:d5:00:ba:05:01:fa:7a:d8:
83:d2:da:30:0d:50:73:8b:b1:0e:78:bd:45:4b:65:72:06:fb:
54:9d:c0:e5:fc:a0:fe:80:06:43:bb:b1:f3:1c:a9:e8:34:e2:
77:9d:c4:95:da:81:12:46:73:49:21:22:48:fe:d0:12:5f:10:
f3:07:9a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 19:10:19 2024 by rpki-client on console-fra.rpki-client.org