Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/0uWvG7eNFMDeY38lOzJilA-9ClU.roa
File: 0uWvG7eNFMDeY38lOzJilA-9ClU.roa (raw, json)
Hash identifier: mJfnK0thosqsEbAzy7kMLqRpNa10u/Vfb1Jr3d/dako=
Subject key identifier: D2:E5:AF:1B:B7:8D:14:C0:DE:63:7F:25:3B:32:62:94:0F:BD:0A:55
Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672
Certificate serial: 0190EEDCC72A85572C47FA4A65DB6B7CC61B
Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/0uWvG7eNFMDeY38lOzJilA-9ClU.roa
Signing time: Fri 26 Jul 2024 11:46:04 +0000
ROA not before: Fri 26 Jul 2024 11:46:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29470
IP address blocks: 139.45.216.0/21 maxlen: 22
Validation: Failed, certificate revoked on Tue 03 Sep 2024 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ee:dc:c7:2a:85:57:2c:47:fa:4a:65:db:6b:7c:c6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672
Validity
Not Before: Jul 26 11:46:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2e5af1bb78d14c0de637f253b3262940fbd0a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:34:90:45:10:61:9e:dd:a7:c8:f8:0b:59:
02:4e:e8:55:fc:0f:71:02:4e:3b:85:ba:4e:66:61:
88:3b:ff:3e:ec:1c:ee:0c:af:1d:02:55:b4:1b:c1:
66:bd:18:91:a2:56:d5:de:5f:17:bb:b5:47:b0:63:
a1:e7:41:ea:9d:67:fc:f0:01:e1:b3:58:f0:02:20:
67:74:25:5d:b8:8b:d0:82:a1:85:db:bd:04:5b:11:
13:7f:30:1c:ca:85:0d:46:a9:96:12:3b:4b:15:5d:
dd:f0:85:aa:9d:f8:80:11:5b:6e:c8:2a:e8:c6:ab:
27:e7:f6:23:83:a5:25:7f:63:c0:69:ca:7d:f8:01:
fb:fb:ba:ae:75:90:f1:f1:b8:4f:3b:9b:f8:4e:d1:
fd:e3:1f:6b:ef:b5:e3:e5:9b:79:c6:fd:be:97:bf:
86:49:53:f5:b7:c5:76:7b:a9:f7:8e:9b:a1:8d:32:
5c:b2:8a:df:31:66:e1:16:12:8f:eb:f0:19:b7:67:
f4:6f:ed:07:db:9e:e4:86:38:7f:1a:64:99:ef:a1:
67:85:e0:60:af:b0:a8:88:c6:ae:20:b1:a2:41:99:
71:fa:b1:de:50:7e:83:3d:07:b0:88:e7:dc:f2:a9:
1e:7b:bf:95:2b:f5:28:62:55:10:ae:bb:d5:9e:c2:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E5:AF:1B:B7:8D:14:C0:DE:63:7F:25:3B:32:62:94:0F:BD:0A:55
X509v3 Authority Key Identifier:
keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/0uWvG7eNFMDeY38lOzJilA-9ClU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.45.216.0/21
Signature Algorithm: sha256WithRSAEncryption
92:1d:6d:ea:91:3a:70:11:0f:15:5a:be:1f:02:5d:28:bc:2d:
62:62:e2:be:92:49:2f:cb:e2:a8:c1:9d:0d:13:ac:43:8d:b3:
24:0b:47:9b:73:b6:73:91:21:03:3f:59:c1:80:b1:fa:12:74:
0f:72:bc:ec:4a:6c:e7:dd:35:fa:f8:ac:1f:a3:fc:be:ea:4f:
b2:55:3c:03:67:90:c1:0d:d9:e3:12:b5:20:94:51:01:60:e3:
6f:ea:8c:aa:c1:46:b0:4b:f9:89:3e:0f:19:41:fb:4b:f7:cd:
62:ea:a8:8b:54:81:4d:fd:56:98:a6:54:e1:7d:3a:06:15:a0:
f4:22:f6:58:ff:00:8f:d5:34:a8:47:c4:61:db:16:db:47:a0:
60:54:6a:a7:48:25:f7:89:7e:27:2e:45:c7:35:b9:a2:9b:66:
6f:b9:34:a5:70:64:29:14:40:83:8c:f9:2b:e8:fb:7c:60:27:
86:40:df:1d:e3:8f:9d:3b:c1:b2:15:39:5b:82:2e:55:68:06:
a4:0d:05:c0:1a:ca:82:6f:9d:1e:d4:45:5b:4b:d4:d0:35:2f:
92:cf:f5:8d:ae:a3:f8:b3:b6:62:5f:10:89:52:dc:b3:29:e5:
8f:7a:d7:4b:3d:12:63:94:6e:da:6e:6c:5b:4d:ed:7d:b8:41:
7a:b2:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 17:39:36 2024 by rpki-client on console-ams.rpki-client.org