Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/AZAc_CWYyfIoiCQK-vn1kCKT_H4.roa
File: AZAc_CWYyfIoiCQK-vn1kCKT_H4.roa (raw, json)
Hash identifier: pJoe9m8eWrxRKfrUCRzSBy9euJ9rZkbKPudscZm1Zn0=
Subject key identifier: 01:90:1C:FC:25:98:C9:F2:28:88:24:0A:FA:F9:F5:90:22:93:FC:7E
Certificate issuer: /CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Certificate serial: 0193008E3AAD14393B7F0FB90D892CFEFD44
Authority key identifier: 9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/AZAc_CWYyfIoiCQK-vn1kCKT_H4.roa
Signing time: Wed 06 Nov 2024 08:19:01 +0000
ROA not before: Wed 06 Nov 2024 08:19:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208882
IP address blocks: 45.81.40.0/24 maxlen: 24
92.249.26.0/24 maxlen: 24
2a0d:ff40::/29 maxlen: 29
2a0e:4d80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:8e:3a:ad:14:39:3b:7f:0f:b9:0d:89:2c:fe:fd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Validity
Not Before: Nov 6 08:19:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01901cfc2598c9f22888240afaf9f5902293fc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:89:68:81:10:c9:82:b7:cb:f7:22:0d:37:
86:74:12:20:19:17:6d:36:e4:b1:b7:0a:24:ca:77:
d5:33:64:ac:19:57:c0:2b:f3:59:e7:fe:d4:bd:18:
2b:35:40:b3:6d:86:a3:1c:99:2a:9f:cc:20:b2:ed:
f6:8e:4d:8a:54:e8:71:0e:61:f2:f1:d1:4b:ce:dd:
ba:bd:b1:df:c4:a5:a4:e8:1e:52:16:25:5b:49:10:
8f:f3:2a:8e:8b:83:3e:65:1d:6e:dc:a7:c5:1b:de:
9a:d5:1c:f4:8b:92:10:d7:ca:c6:79:e6:d0:5c:0f:
b0:3b:65:2a:5b:84:9c:1c:8b:93:73:1d:fa:57:fe:
f7:33:e2:be:90:65:b9:a0:a2:e4:3d:61:32:cd:db:
bb:7a:80:52:cf:32:3b:a6:b5:55:d7:5d:25:3a:8d:
95:d7:4f:71:36:b0:cc:85:e7:fe:5b:36:e4:6e:d1:
b6:c6:31:ac:89:64:b5:77:cd:d1:e9:d4:4c:1e:0c:
7e:78:99:70:4f:fb:bb:cb:dc:e4:a8:ba:c6:91:41:
13:df:f5:9c:be:8f:cc:0f:6c:45:e2:2c:b3:40:95:
1b:dc:76:4d:2b:c7:4a:54:bf:ea:14:e7:1b:59:4a:
a8:d2:7b:9f:02:f1:c8:59:71:a8:83:95:0e:61:16:
67:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:90:1C:FC:25:98:C9:F2:28:88:24:0A:FA:F9:F5:90:22:93:FC:7E
X509v3 Authority Key Identifier:
keyid:9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/AZAc_CWYyfIoiCQK-vn1kCKT_H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.40.0/24
92.249.26.0/24
IPv6:
2a0d:ff40::/29
2a0e:4d80::/29
Signature Algorithm: sha256WithRSAEncryption
1b:b0:ab:c0:f7:f5:44:ea:fc:2e:de:d2:3a:d9:64:59:9b:c8:
df:2c:64:8d:71:d4:08:e3:b4:35:f3:80:f2:29:7a:76:85:7f:
fc:91:f5:ce:6d:8d:4c:34:d5:d1:41:42:87:3f:66:68:8a:c4:
d7:2b:bd:86:03:ad:cf:a2:67:09:79:f7:ab:45:94:07:e6:6f:
ee:ef:b8:0c:db:ed:c9:4e:47:27:5f:16:2e:2c:af:09:a0:79:
bb:12:aa:91:08:b8:24:4f:a4:31:40:22:85:ee:6e:7b:c1:42:
af:5d:7d:a2:ee:d0:ae:57:9d:53:70:cb:f4:2f:d8:52:e0:62:
fa:2e:5b:79:98:59:8a:3d:7a:5a:52:58:b2:91:da:a5:a6:93:
4f:91:c7:15:14:f8:4b:81:59:71:2b:a4:44:c2:fb:ff:30:7b:
f2:2f:52:ca:f0:c7:95:69:1a:12:98:e0:b0:84:78:6d:e8:13:
a1:ad:23:6a:80:57:0b:81:d4:e2:4c:07:58:f6:f1:7a:51:ca:
76:93:af:5c:2d:25:09:00:d3:75:96:40:12:69:83:5f:84:9b:
52:bc:75:bf:4b:79:65:b4:08:8d:7c:67:2f:31:60:b8:b7:31:
18:46:b8:58:a5:83:11:20:bf:57:95:d8:2b:bc:96:d1:a2:d6:
50:ad:4c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:38 2025 by rpki-client