Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/r2dAy93dp4FFRybF61AMSTzLeEA.roa
File: r2dAy93dp4FFRybF61AMSTzLeEA.roa (raw, json)
Hash identifier: r8ZI16YBHXjfqs5ZCkrY2XL0wMPmijgUousSxs0YtiI=
Subject key identifier: AF:67:40:CB:DD:DD:A7:81:45:47:26:C5:EB:50:0C:49:3C:CB:78:40
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01907E131723A4B3C6427859EB3C5BB19700
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/r2dAy93dp4FFRybF61AMSTzLeEA.roa
Signing time: Thu 04 Jul 2024 14:08:18 +0000
ROA not before: Thu 04 Jul 2024 14:08:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49478
IP address blocks: 45.95.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 20:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:13:17:23:a4:b3:c6:42:78:59:eb:3c:5b:b1:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 4 14:08:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af6740cbdddda781454726c5eb500c493ccb7840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:10:76:2b:ee:15:0e:5c:f1:0e:83:91:40:
4c:27:95:17:8a:3a:bd:85:8d:7e:6f:57:fc:e3:f7:
74:ba:71:10:c5:70:7c:f7:c6:9b:ea:7b:f5:8c:f4:
f8:67:57:94:89:50:6f:a2:9b:c5:30:02:ec:45:8a:
ba:51:cb:a5:e6:d5:c8:0b:d6:1f:c6:f6:ae:eb:ef:
f8:96:06:1a:ab:5a:45:77:70:ce:4f:e0:1e:83:fd:
be:4c:4e:01:9f:42:28:51:7b:0c:68:4e:eb:7d:0d:
43:7f:46:c0:1b:f2:d1:18:a7:6f:c4:c2:fa:7b:67:
40:df:39:59:90:4c:a9:79:11:ae:96:f7:ec:92:05:
e9:d3:bf:bf:48:67:c0:74:2d:a7:af:b3:81:9a:00:
dc:c9:2d:a9:d8:c2:32:a5:30:59:71:a5:a1:bc:5a:
b4:66:30:a8:c6:21:ce:cb:8c:2e:be:8a:0c:0f:73:
a4:6f:12:b7:71:67:f6:96:12:20:f0:90:b7:5f:5b:
6b:55:5b:47:23:ca:98:f4:aa:26:89:8f:c9:ef:14:
22:42:0a:e3:84:f3:9b:1a:85:c5:b1:4a:3c:f1:3e:
e7:72:af:00:a0:b8:ba:9c:19:d2:2f:bb:a2:6f:d3:
18:fc:ef:ea:31:3a:ed:5f:e0:fb:f3:dd:7a:b8:22:
ac:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:67:40:CB:DD:DD:A7:81:45:47:26:C5:EB:50:0C:49:3C:CB:78:40
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/r2dAy93dp4FFRybF61AMSTzLeEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.30.0/24
Signature Algorithm: sha256WithRSAEncryption
54:21:8c:6c:b5:f7:64:77:a3:13:2f:5b:95:44:1e:78:77:81:
7a:92:9b:28:5b:22:d7:0c:c8:f7:0a:19:39:5a:72:b9:07:7a:
09:d2:8c:62:5f:e7:06:3d:12:e2:ab:7b:9d:1b:79:29:38:50:
84:bb:ea:ad:ad:26:20:f6:4d:b1:e9:90:64:7e:60:83:ae:44:
20:f0:0e:3b:f3:35:05:8f:ac:93:32:50:99:36:d8:69:8e:fe:
af:e6:69:50:50:65:bf:71:42:4f:9e:8c:5c:ec:20:55:a8:ff:
78:b1:6d:18:82:23:cf:b2:75:a3:cc:7c:f9:60:86:ef:dd:d5:
1f:9f:c9:70:c4:a5:56:25:14:73:31:07:d3:bd:00:a8:09:f9:
1f:a9:2e:fd:bb:c2:59:7e:1a:fa:7f:14:0e:fa:54:25:22:ed:
07:37:d1:3d:cd:86:23:e1:f6:67:67:67:17:cd:d0:56:b8:23:
a1:93:38:40:11:a8:1b:d4:eb:85:46:54:1f:7b:62:10:42:3d:
54:a2:33:09:4e:d5:91:f9:12:e1:8a:50:02:79:be:d5:6b:a6:
12:60:1f:f4:18:7a:37:0c:83:32:30:d1:03:28:62:da:6e:c4:
ad:54:93:89:71:c8:c8:4e:21:ad:99:21:05:f2:8a:bc:ec:e2:
73:b9:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 21:22:00 2024 by rpki-client on console-fra.rpki-client.org