Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/3tCS7YZGGoZHC5wIctFMVtvODZU.roa
File: 3tCS7YZGGoZHC5wIctFMVtvODZU.roa (raw, json)
Hash identifier: wrc497nym1ZiW/YKW9FKvTf6Dz5erdtprM07G3Qnxw4=
Subject key identifier: DE:D0:92:ED:86:46:1A:86:47:0B:9C:08:72:D1:4C:56:DB:CE:0D:95
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0191BFD0915C718D385B5FB81278D3F7EC4E
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/3tCS7YZGGoZHC5wIctFMVtvODZU.roa
Signing time: Thu 05 Sep 2024 01:33:22 +0000
ROA not before: Thu 05 Sep 2024 01:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.140.246.0/24 maxlen: 24
81.199.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 12:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bf:d0:91:5c:71:8d:38:5b:5f:b8:12:78:d3:f7:ec:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Sep 5 01:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ded092ed86461a86470b9c0872d14c56dbce0d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:00:aa:4a:d7:a7:e8:95:74:b8:aa:62:6f:
ca:ae:9c:5d:1c:1c:49:19:a4:04:e5:c1:75:f1:41:
41:28:11:7f:a1:62:b9:12:c7:96:e1:c8:99:ff:ec:
52:b4:b0:d1:5a:55:bd:4b:a6:62:99:4b:db:c8:5f:
41:70:cd:34:3b:c3:05:0d:ed:07:1a:0b:88:77:97:
68:3a:47:8d:f0:69:61:fd:c5:ff:d3:1b:f6:09:75:
5e:0c:e3:cc:bc:5d:f3:89:42:54:d8:c3:76:c1:7d:
26:d3:f3:89:19:94:dc:16:0a:9a:40:32:26:f5:6e:
43:75:a4:72:85:e3:13:65:df:25:d7:20:d2:81:9b:
6e:7b:2c:2a:ae:0d:56:fd:84:7a:14:f7:f3:aa:14:
c5:ef:c4:8b:c2:b0:17:cc:98:50:ca:41:fe:07:67:
06:d4:66:3c:c6:18:1c:b9:a6:cf:5d:58:24:54:a3:
cf:72:d2:b2:1f:91:f8:a7:a3:0d:1b:a4:17:90:8c:
f2:1d:98:0c:58:e2:de:2a:a1:48:c0:e7:7b:47:13:
fa:64:55:a1:34:36:f3:51:e0:c7:7b:8c:4e:f2:81:
e9:54:8e:db:5d:c0:bc:72:ac:09:9d:3d:7d:1b:98:
76:ce:f3:3e:4e:5f:b9:66:c9:dc:0f:7f:42:ce:bc:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D0:92:ED:86:46:1A:86:47:0B:9C:08:72:D1:4C:56:DB:CE:0D:95
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/3tCS7YZGGoZHC5wIctFMVtvODZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.246.0/24
81.199.29.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fb:8b:7b:ab:41:dd:50:3d:3c:87:21:8e:a0:28:ea:47:58:
07:58:0b:6f:88:b6:bb:e5:b6:af:65:86:9e:20:28:f8:7d:a5:
1d:3f:e1:50:5c:7f:09:09:96:e9:ad:b5:19:e7:d4:07:a8:b2:
5f:08:c8:a9:e0:d4:92:5b:47:15:f3:b5:ae:80:bc:0e:00:90:
0d:35:09:25:ac:d0:70:6a:ee:ae:3e:e1:1b:34:f9:a4:98:03:
58:30:59:23:ff:9f:f9:ab:0b:19:18:6e:6c:f9:dc:cb:de:76:
4d:c8:b6:fd:55:65:de:3a:ab:8d:c4:b2:74:83:18:df:98:a6:
48:3d:fc:e0:31:37:47:80:b9:e1:6a:94:e8:b1:6f:66:31:43:
56:66:06:24:58:c6:38:07:39:cb:be:2b:eb:b7:ef:e3:d1:50:
4f:b6:d1:57:f6:aa:ad:af:c0:ce:bc:57:fe:18:c1:c6:16:29:
af:00:32:15:81:6a:ba:c1:00:a7:32:13:5a:10:1a:8e:aa:60:
e1:3f:c3:23:aa:66:98:19:7c:a9:71:15:38:e1:47:32:86:89:
04:5b:d9:1a:74:fb:cd:0c:7e:3c:96:9d:6c:58:d5:40:15:3a:
36:db:9e:fc:17:20:84:f3:1f:1c:e6:c7:fa:79:27:4f:da:4f:
0c:91:ed:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 15:30:06 2024 by rpki-client on console-ams.rpki-client.org