Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/L2tHrjnobPN4ktKB907x8kz90OI.roa
File: L2tHrjnobPN4ktKB907x8kz90OI.roa (raw, json)
Hash identifier: W0sPwI6KMX1++DcH8501et80E84rfnPXcV+G+HLhQ+s=
Subject key identifier: 2F:6B:47:AE:39:E8:6C:F3:78:92:D2:81:F7:4E:F1:F2:4C:FD:D0:E2
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0191B0D741997DDCAC0674EE66C6258381BF
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/L2tHrjnobPN4ktKB907x8kz90OI.roa
Signing time: Mon 02 Sep 2024 03:46:22 +0000
ROA not before: Mon 02 Sep 2024 03:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 45.140.245.0/24 maxlen: 24
81.199.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 14:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b0:d7:41:99:7d:dc:ac:06:74:ee:66:c6:25:83:81:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Sep 2 03:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f6b47ae39e86cf37892d281f74ef1f24cfdd0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:86:8d:bc:31:65:a3:34:e0:cb:35:60:97:59:
38:73:84:7e:55:7c:7a:94:2f:e4:af:6c:4e:44:41:
81:3f:a0:07:fe:f1:4b:64:5f:a3:36:9c:6c:13:19:
c8:56:bb:c1:d4:d3:c3:30:5a:69:06:51:3f:18:b7:
94:f1:ab:80:a4:50:2a:09:3c:8c:7b:01:41:7d:43:
4b:9f:c3:7c:51:bc:37:ec:e5:66:53:b1:5a:ba:c6:
fb:2f:1e:56:5d:52:f3:12:87:17:c8:64:bf:25:15:
7f:84:78:02:bf:00:24:da:d3:b8:12:56:04:62:ba:
a4:e3:14:68:82:cc:99:56:12:e7:4e:af:a9:09:a8:
fc:99:5d:a5:3b:46:00:4b:8f:fc:ba:d1:87:e8:30:
f7:f7:49:3a:b6:46:9c:7d:e1:d0:97:71:75:6c:e7:
77:10:f5:bd:42:de:20:d1:cd:60:db:91:29:74:0d:
05:80:0d:2f:d1:6f:66:cc:6f:9b:fd:f4:05:90:eb:
a0:ab:7a:d3:02:cf:5c:9d:19:12:7b:ef:6e:8c:3d:
81:b6:9e:81:ad:45:12:e6:06:d7:7f:96:19:31:07:
f4:bd:c0:eb:60:de:65:9c:d0:52:89:43:79:68:51:
4d:fc:b6:ef:dc:c6:c9:16:1d:8b:6e:07:33:6e:59:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6B:47:AE:39:E8:6C:F3:78:92:D2:81:F7:4E:F1:F2:4C:FD:D0:E2
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/L2tHrjnobPN4ktKB907x8kz90OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.245.0/24
81.199.26.0/24
Signature Algorithm: sha256WithRSAEncryption
54:0f:52:d7:14:9c:fc:db:35:3f:98:12:4f:54:8a:7b:94:f7:
20:ca:2e:27:d1:ae:be:3a:dc:bd:de:08:22:3a:16:5e:65:14:
25:ec:c1:be:e9:93:11:e1:0a:f9:7a:99:93:dd:25:37:93:fb:
d8:c5:c1:9e:97:d5:aa:93:fc:23:d0:62:9d:62:c2:b8:97:bb:
af:b2:82:ed:82:a6:47:4e:de:bb:24:b8:8f:2e:3f:21:a8:87:
51:3a:b0:ac:06:e3:d6:7e:a3:43:53:2d:ec:ce:64:f2:36:8e:
bb:e8:c5:c1:dd:45:73:95:c6:d4:1a:11:84:17:9d:71:6b:83:
bb:4e:73:78:6b:07:60:51:18:ae:77:f0:7e:0e:0e:29:7e:e8:
32:b1:27:f9:1c:d5:d6:c6:48:af:b0:51:ca:cd:77:e3:0a:79:
2e:17:9c:08:23:3c:53:f5:c0:23:27:14:d0:61:6b:a9:88:e3:
b8:12:26:fe:0f:57:60:7d:91:69:e4:8a:5a:63:66:b9:a7:cd:
79:c3:9d:95:90:01:f5:00:bd:50:f8:65:7b:e0:8c:16:d3:80:
af:6f:8a:34:80:08:51:6f:ba:d7:90:6a:64:29:53:da:be:e7:
12:bf:60:62:c8:9a:e7:de:dd:23:b9:f3:8b:44:07:95:db:92:
0b:90:51:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 18:45:39 2024 by rpki-client on console-ams.rpki-client.org