Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RUeRcDZs_frVsTsVonH-OEJxeQ8.roa
File: RUeRcDZs_frVsTsVonH-OEJxeQ8.roa (raw, json)
Hash identifier: 2qo5nNqxKJ/SSj13soIxI7fT4SIFJuf2YoVKDn5BAII=
Subject key identifier: 45:47:91:70:36:6C:FD:FA:D5:B1:3B:15:A2:71:FE:38:42:71:79:0F
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EBDAE7E31E45AD65404A6799730DFF7A1
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RUeRcDZs_frVsTsVonH-OEJxeQ8.roa
Signing time: Mon 08 Apr 2024 12:28:33 +0000
ROA not before: Mon 08 Apr 2024 12:28:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206385
IP address blocks: 212.46.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:ae:7e:31:e4:5a:d6:54:04:a6:79:97:30:df:f7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 8 12:28:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45479170366cfdfad5b13b15a271fe384271790f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:4a:80:62:8b:75:6d:dc:68:2b:01:60:47:
39:60:93:0a:48:70:a3:14:ed:17:55:32:1c:dc:02:
a2:f8:91:2c:df:fb:10:ac:60:67:6a:ef:c6:09:07:
5f:05:32:c7:a2:47:55:ea:4f:e5:e3:25:17:4a:75:
d1:53:f8:58:fd:61:32:f7:53:df:30:93:bc:c0:b5:
fc:72:6c:34:fa:1a:de:9d:44:00:65:ff:4f:c2:1c:
3e:fd:ae:fa:8b:97:11:b1:d9:f7:81:e5:f5:22:87:
7a:d2:78:5a:c7:20:6f:e7:40:a5:ea:f9:66:56:8f:
86:15:9d:a7:39:32:87:6b:bd:60:6e:bf:00:ff:f4:
27:78:71:e1:23:4a:b2:60:81:11:85:db:24:cb:cd:
cf:f0:54:05:e2:08:57:64:b0:c4:0e:90:67:01:20:
bd:64:6c:28:ea:c8:7d:06:89:ce:15:95:5e:34:1f:
03:b7:f7:e1:2b:65:20:3e:4a:06:8f:8d:33:a1:69:
71:5b:ad:1f:1c:65:b3:4f:55:17:a2:d4:59:0f:2e:
b6:83:c7:e1:99:13:0f:0e:f7:73:8f:b8:af:8f:48:
f9:82:ab:79:8d:71:3e:d3:fe:aa:80:16:16:65:ec:
42:1c:80:f3:f4:15:e4:80:7b:44:7b:a9:9e:09:e6:
72:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:47:91:70:36:6C:FD:FA:D5:B1:3B:15:A2:71:FE:38:42:71:79:0F
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RUeRcDZs_frVsTsVonH-OEJxeQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.34.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e7:89:bb:19:89:a2:92:03:a0:9b:9b:f3:0d:71:0f:26:79:
51:59:c2:6b:0a:36:2e:d9:92:07:4a:f4:b3:aa:f6:f2:46:65:
76:60:ab:2c:da:2c:e9:9b:94:4c:9b:5b:12:75:a5:dc:64:26:
0e:a1:5d:20:91:09:f9:81:1b:2c:b0:a5:a9:43:6f:79:c2:53:
11:a5:a4:f2:69:e0:96:76:86:af:b8:16:2a:35:0f:2d:97:ec:
e0:85:38:48:94:90:07:80:77:ad:2c:49:4d:98:de:4e:68:70:
19:b6:99:ed:42:c5:86:da:d2:9a:bb:48:64:9a:68:39:38:ef:
62:0e:91:77:32:28:18:e0:8f:36:1b:d6:1e:3e:49:7f:e3:62:
75:7d:fa:44:da:4f:47:56:fb:28:1a:e3:f4:61:dd:c1:32:b8:
26:4a:8b:f9:2b:5d:3e:9c:82:6a:c0:e5:b3:85:36:89:55:03:
33:6d:18:b5:bc:8a:b7:5b:0b:a5:64:0d:52:8a:66:7a:40:44:
cc:b5:be:c6:51:e8:de:9d:20:49:62:8f:82:08:f7:3f:38:e0:
66:74:e6:f9:19:e4:df:39:1f:e2:e3:0c:3d:3a:61:b3:cf:04:
1d:65:cf:dd:bb:a6:79:67:bb:ca:3c:3b:b0:68:b8:99:d7:1a:
4f:03:f0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:07 2025 by rpki-client