Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/ub0Xv8x8cQ2R2DGYuBhJU2Yy9E4.roa
File: ub0Xv8x8cQ2R2DGYuBhJU2Yy9E4.roa (raw, json)
Hash identifier: zfdfPCsgXfM07Ueo7Kmz8aZBHMCQxC0FhY902zH/eaU=
Subject key identifier: B9:BD:17:BF:CC:7C:71:0D:91:D8:31:98:B8:18:49:53:66:32:F4:4E
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019130ED504A38FC3632D521CCD46E5DC86C
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/ub0Xv8x8cQ2R2DGYuBhJU2Yy9E4.roa
Signing time: Thu 08 Aug 2024 07:39:04 +0000
ROA not before: Thu 08 Aug 2024 07:39:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60912
IP address blocks: 45.141.208.0/22 maxlen: 24
45.150.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 09 Aug 2024 17:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:30:ed:50:4a:38:fc:36:32:d5:21:cc:d4:6e:5d:c8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Aug 8 07:39:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9bd17bfcc7c710d91d83198b81849536632f44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:34:8b:30:e1:85:7c:53:a9:75:3f:81:57:
97:1f:13:3c:0e:7f:14:0f:6d:e4:c1:15:8c:76:78:
93:d7:cb:cd:be:44:67:d9:85:40:a3:a0:4e:5a:6b:
4a:3e:e5:99:dd:b7:6e:d9:ec:72:48:9c:1a:80:86:
56:4c:49:b7:60:8c:d4:d1:fa:6a:d8:7c:e4:73:98:
e9:58:a6:62:ac:5d:fc:16:34:95:a0:75:c9:47:2d:
5d:10:d7:88:37:a7:e0:0f:d3:42:6a:1d:54:31:d5:
fc:37:20:64:37:b9:43:bf:09:22:1d:8b:fb:23:ff:
8d:dd:93:91:97:4a:6f:f7:3e:89:4f:17:dc:b7:c2:
62:d3:62:bb:6a:00:da:e4:da:9c:54:76:84:8e:0a:
c9:1a:26:11:be:75:f2:7a:83:58:c5:ac:e5:61:ef:
9c:37:6e:f0:c8:f9:02:d3:e1:33:f8:7f:3d:63:ad:
7f:ba:78:93:2c:55:ca:f5:b9:2a:39:31:1d:8a:f2:
03:9e:fc:f4:dc:c7:38:8e:80:f1:a8:a2:6c:21:4b:
89:3f:ea:b6:0d:e5:88:3b:79:ef:e4:2b:e1:c2:65:
e8:4a:45:35:22:40:bf:e2:b5:c7:5a:0f:2a:1c:d4:
0f:f2:f9:79:b5:be:87:84:30:e5:d1:9b:9e:2c:bd:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BD:17:BF:CC:7C:71:0D:91:D8:31:98:B8:18:49:53:66:32:F4:4E
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/ub0Xv8x8cQ2R2DGYuBhJU2Yy9E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.208.0/22
45.150.8.0/22
Signature Algorithm: sha256WithRSAEncryption
76:a9:b2:f4:02:a4:fd:0d:19:cb:a8:b1:85:63:b5:cd:3e:1f:
14:93:b9:b1:1f:49:5a:72:d2:ca:61:4d:d0:af:10:40:58:7d:
59:f9:dc:18:42:19:d5:ab:06:a0:3c:dc:10:9b:a9:51:be:b2:
f4:71:cc:38:c5:0d:65:10:a6:a5:92:89:6a:3d:1f:8e:05:b9:
b1:b1:a4:09:36:bf:2e:3f:18:cb:84:d4:4c:0b:31:8b:1b:59:
98:b6:c3:5f:31:28:97:bc:e2:e6:b4:b9:d2:94:d7:4b:50:c4:
42:47:b1:47:4e:59:50:c5:71:8c:32:b9:d0:02:c2:7f:15:bc:
0d:0d:12:e6:8a:80:b2:cf:5b:b4:dc:f7:ba:1e:89:5e:c2:eb:
79:64:a5:cf:65:52:c4:46:33:ef:77:6a:a9:45:e3:18:ef:98:
ee:5f:ac:49:8f:91:69:39:25:8c:d9:ea:cc:7e:21:6e:14:c9:
f3:a2:fe:c2:0f:09:2c:a3:dd:1c:1f:41:66:f6:56:dc:26:23:
3c:6b:11:2c:90:f6:2e:84:1c:1b:d1:ad:fc:a0:5c:0f:4a:c0:
c7:86:9d:df:b4:d7:5d:26:d8:af:83:1b:e2:26:07:d5:c4:58:
8a:35:13:6f:80:22:5c:87:73:dc:0e:5d:ab:f1:49:06:78:55:
98:ad:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 19:01:25 2024 by rpki-client on console-fra.rpki-client.org