Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/T-99IIegPqu7BQxtvG0JgrSdntk.roa
File: T-99IIegPqu7BQxtvG0JgrSdntk.roa (raw, json)
Hash identifier: MMTok942PpxfQMjuYC9Fr21M2EJhB15HxY9zoYrdD5s=
Subject key identifier: 4F:EF:7D:20:87:A0:3E:AB:BB:05:0C:6D:BC:6D:09:82:B4:9D:9E:D9
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01872E906ED7340259CD0F88907BD3770F4C
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/T-99IIegPqu7BQxtvG0JgrSdntk.roa
Signing time: Wed 29 Mar 2023 18:10:30 +0000
ROA not before: Wed 29 Mar 2023 18:10:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213296
IP address blocks: 45.80.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2e:90:6e:d7:34:02:59:cd:0f:88:90:7b:d3:77:0f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Mar 29 18:10:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fef7d2087a03eabbb050c6dbc6d0982b49d9ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3d:5a:a1:88:f1:79:36:82:41:48:dd:62:8c:
80:2c:e3:d4:33:d3:1d:ee:89:d1:56:94:80:31:47:
f5:9c:2a:a5:b9:fa:b5:15:69:51:27:4c:c9:d7:23:
dc:7b:13:3e:fc:e9:b9:56:5a:91:f2:f2:61:0c:ad:
a6:45:0a:99:c9:ee:be:92:c4:0d:03:d5:5d:bd:1a:
c8:81:04:b6:99:d1:03:7a:9d:ec:cb:53:cb:4d:55:
44:35:71:7c:cb:a5:56:29:98:26:f0:90:e6:65:e9:
34:68:c7:a0:36:0d:e3:6a:9d:65:9f:97:a4:85:d0:
89:fc:f9:cd:9d:14:61:03:97:f6:17:d9:f0:0a:98:
99:fc:a2:f6:72:cf:db:51:ce:0a:3e:d9:2e:c0:91:
f2:27:df:4a:c7:dc:05:cc:35:93:a0:b3:3c:c3:ba:
e2:19:6d:4b:fb:48:cd:87:58:ad:cb:6c:11:22:da:
e7:96:8a:a6:c3:cc:87:06:d4:23:81:78:b1:c1:f2:
fa:00:c0:6a:0e:09:db:f0:02:84:81:71:95:18:bc:
d3:d9:43:a1:ae:e7:63:70:f0:8b:4f:df:48:05:dc:
26:41:75:69:a7:59:e2:21:0b:5c:c5:44:07:1e:ea:
68:05:e2:e3:15:fa:e0:5b:4c:bb:47:1f:2f:3c:85:
5e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EF:7D:20:87:A0:3E:AB:BB:05:0C:6D:BC:6D:09:82:B4:9D:9E:D9
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/T-99IIegPqu7BQxtvG0JgrSdntk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.228.0/22
Signature Algorithm: sha256WithRSAEncryption
49:6f:a3:86:a3:46:69:d3:08:94:dd:7e:4a:80:1e:cc:b6:ee:
23:ce:9a:93:83:c7:88:58:74:4d:65:02:48:12:03:44:4f:c0:
f7:ad:6f:14:c2:63:c1:78:61:c7:03:7a:a3:9e:f5:07:bb:8f:
86:be:5a:74:a7:77:40:62:12:c9:33:92:b7:fa:56:1a:24:d2:
00:9f:25:cc:0a:c6:09:7e:b6:65:6a:d7:80:04:54:86:b8:56:
2a:57:59:2f:50:ec:ca:a6:07:02:1b:2f:8f:e6:7d:76:c8:e0:
3b:0a:4d:c6:a3:3b:ba:90:fc:cc:2d:7c:c7:8d:3b:92:06:3d:
75:13:70:ff:2e:49:e8:ef:e6:6e:1c:b7:1e:8d:9f:18:ae:1b:
9a:c7:a5:cf:73:44:1e:a0:fd:54:4f:d6:ed:72:c4:a1:1a:43:
f3:22:c7:4d:21:bf:5d:45:77:47:80:2f:32:73:3d:67:05:08:
9d:4e:dd:0f:1e:3c:ae:4f:a9:3b:ea:49:0a:44:2a:b9:a8:de:
d3:82:b6:60:90:ae:50:5d:9b:99:4b:ed:91:6c:69:f5:3f:d7:
a3:b1:d7:b4:ee:fa:01:ae:c2:5a:5b:3a:50:5f:57:0e:9a:58:
c5:62:5e:cd:19:c1:39:a0:81:e6:21:a8:58:d4:74:15:d2:f0:
55:3a:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:45 2024 by rpki-client on console-fra.rpki-client.org