Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/3ffORjpCzTVl5Ky9hYyk9ZrQvf8.roa
File: 3ffORjpCzTVl5Ky9hYyk9ZrQvf8.roa (raw, json)
Hash identifier: hG6CDxLU/whor/4hS39p0Wp/h479bGsYginukBi+tYo=
Subject key identifier: DD:F7:CE:46:3A:42:CD:35:65:E4:AC:BD:85:8C:A4:F5:9A:D0:BD:FF
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 01912DEA70A3B3D55384E2A01CCF5DD88C10
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/3ffORjpCzTVl5Ky9hYyk9ZrQvf8.roa
Signing time: Wed 07 Aug 2024 17:37:04 +0000
ROA not before: Wed 07 Aug 2024 17:37:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64286
IP address blocks: 45.84.102.0/24 maxlen: 24
2a10:3b04::/32 maxlen: 32
2a10:3b05::/32 maxlen: 32
2a10:3b06::/32 maxlen: 32
2a10:3b07::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 19 Aug 2024 22:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2d:ea:70:a3:b3:d5:53:84:e2:a0:1c:cf:5d:d8:8c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Aug 7 17:37:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddf7ce463a42cd3565e4acbd858ca4f59ad0bdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:5a:66:97:f6:b0:48:ab:70:c7:fa:1d:14:
1d:1c:8a:cf:cc:2b:36:5a:d0:e7:54:88:e2:17:da:
45:e4:9c:e4:46:c1:02:0a:17:b6:36:e0:4c:b2:06:
a6:16:d3:fa:c8:70:cb:bb:bf:ec:1b:d3:d4:6a:35:
55:54:9c:97:ae:77:f9:4a:f0:3c:ca:d4:11:c6:44:
ae:cc:5c:66:95:d8:80:f0:55:f4:94:be:17:f8:82:
18:a9:eb:f7:46:a0:ce:9b:00:d0:8c:83:2d:9b:7b:
ab:a4:01:31:74:a9:27:bc:81:8e:cc:97:64:b0:d0:
96:b1:b8:dd:d0:8c:40:dd:28:3a:01:2d:b9:b5:11:
45:0d:fb:c4:47:74:00:91:ee:03:18:b3:51:9e:88:
3b:21:ba:f5:47:c5:8a:df:5e:12:6f:29:27:76:8b:
be:13:87:62:6a:af:ec:96:92:1e:cc:ec:ec:19:cf:
e2:9a:6d:15:e0:b4:41:e1:df:ff:67:3e:7f:d1:90:
31:01:01:17:cd:29:42:de:b8:c8:48:91:83:29:48:
72:56:43:ae:85:62:ec:c3:02:56:97:d5:c0:db:68:
89:6e:b5:26:86:cf:43:ba:dc:4f:fb:80:9e:2d:d4:
f2:5b:d2:3e:4f:87:37:d9:15:67:ed:a1:38:f4:b2:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F7:CE:46:3A:42:CD:35:65:E4:AC:BD:85:8C:A4:F5:9A:D0:BD:FF
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/3ffORjpCzTVl5Ky9hYyk9ZrQvf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.102.0/24
IPv6:
2a10:3b04::/30
Signature Algorithm: sha256WithRSAEncryption
6b:1c:64:2e:7c:01:56:72:65:f0:a7:66:ff:ba:7d:84:1e:cf:
0d:ad:62:09:d5:a3:1f:4e:20:ce:1c:de:bd:72:d1:2e:6f:7c:
97:a0:4d:ed:79:14:39:9e:7d:53:ac:de:7b:f7:84:7f:25:84:
d2:4b:cc:24:ec:b6:c5:aa:31:e9:82:4b:69:64:64:2f:6b:a6:
96:c3:ac:51:f5:58:b5:e4:62:cd:04:2b:dd:a7:44:d6:08:72:
74:ac:da:3f:f1:67:7f:6e:fa:86:55:84:1c:33:48:81:b4:6c:
0e:e3:aa:30:9c:6b:36:7a:ad:88:3c:a2:5d:cc:84:f3:ce:4f:
15:6f:98:df:22:04:54:8c:c9:25:89:67:e1:20:bd:d2:a3:33:
56:18:d2:b6:33:c4:6a:3a:4b:26:39:fa:58:14:04:62:f7:1f:
00:0c:77:26:44:3d:8d:fa:f4:4b:19:3e:c6:d6:dc:d1:39:bd:
0f:cf:0f:93:da:7c:ed:77:67:d4:74:0d:09:d7:0e:e2:ec:67:
3f:9d:10:99:8c:a0:c1:c8:f5:ec:2d:12:13:97:5a:7a:33:7b:
ba:0c:13:0f:55:ae:30:e7:11:4e:3f:4f:50:c1:03:9e:75:da:
8d:f3:31:f2:1f:67:0e:b0:29:4d:60:b9:8c:36:66:dc:13:c5:
41:3e:cf:0b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZEt6nCjs9VThOKgHM9d2IwQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDg0OTU2NzM2NTQ5ZWFiM2IwNmUyM2FhYjg5Y2E1OTkz
YTgwNzYwHhcNMjQwODA3MTczNzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGY3Y2U0NjNhNDJjZDM1NjVlNGFjYmQ4NThjYTRmNTlhZDBiZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjhaZpf2sEircMf6HRQdHIrPzCs2
WtDnVIjiF9pF5JzkRsECChe2NuBMsgamFtP6yHDLu7/sG9PUajVVVJyXrnf5SvA8
ytQRxkSuzFxmldiA8FX0lL4X+IIYqev3RqDOmwDQjIMtm3urpAExdKknvIGOzJdk
sNCWsbjd0IxA3Sg6AS25tRFFDfvER3QAke4DGLNRnog7Ibr1R8WK314Sbykndou+
E4diaq/slpIezOzsGc/imm0V4LRB4d//Zz5/0ZAxAQEXzSlC3rjISJGDKUhyVkOu
hWLswwJWl9XA22iJbrUmhs9DutxP+4CeLdTyW9I+T4c32RVn7aE49LIamwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFN33zkY6Qs01ZeSsvYWMpPWa0L3/MB8GA1UdIwQY
MBaAFCdISVZzZUnqs7BuI6q4nKWZOoB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3Mjgt
YWQxNjNhYjM1NGM4LzEvM2ZmT1JqcEN6VFZsNUt5OWhZeWs5WnJRdmY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3MjgtYWQxNjNhYjM1NGM4
LzEvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALVRmMA0E
AgACMAcDBQIqEDsEMA0GCSqGSIb3DQEBCwUAA4IBAQBrHGQufAFWcmXwp2b/un2E
Hs8NrWIJ1aMfTiDOHN69ctEub3yXoE3teRQ5nn1TrN5794R/JYTSS8wk7LbFqjHp
gktpZGQva6aWw6xR9Vi15GLNBCvdp0TWCHJ0rNo/8Wd/bvqGVYQcM0iBtGwO46ow
nGs2eq2IPKJdzITzzk8Vb5jfIgRUjMkliWfhIL3SozNWGNK2M8RqOksmOfpYFARi
9x8ADHcmRD2N+vRLGT7G1tzROb0Pzw+T2nztd2fUdA0J1w7i7Gc/nRCZjKDByPXs
LRITl1p6M3u6DBMPVa4w5xFOP09QwQOeddqN8zHyH2cOsClNYLmMNmbcE8VBPs8L
-----END CERTIFICATE-----
Generated at Tue Aug 20 01:15:46 2024 by rpki-client on console-fra.rpki-client.org