Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/B98dMtCwRJbsId0kkbgQP9IdB4Q.roa
File: B98dMtCwRJbsId0kkbgQP9IdB4Q.roa (raw, json)
Hash identifier: t4GMS1A4dnFxe5XxZPxSRvKQULOIJZ/KWQVVXrhVVcg=
Subject key identifier: 07:DF:1D:32:D0:B0:44:96:EC:21:DD:24:91:B8:10:3F:D2:1D:07:84
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 0191A9B0340D56D2906BF9B5DACAAC0FCF23
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/B98dMtCwRJbsId0kkbgQP9IdB4Q.roa
Signing time: Sat 31 Aug 2024 18:26:22 +0000
ROA not before: Sat 31 Aug 2024 18:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64286
IP address blocks: 45.84.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 14:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a9:b0:34:0d:56:d2:90:6b:f9:b5:da:ca:ac:0f:cf:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Aug 31 18:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07df1d32d0b04496ec21dd2491b8103fd21d0784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:95:32:49:5d:2a:38:cd:57:d0:83:d8:10:81:
48:be:6b:b5:96:ae:fd:2e:ac:fe:50:dc:d8:a7:b3:
d5:8e:ac:e7:59:cc:2d:ee:c4:8d:63:93:ba:56:fb:
6b:11:2f:c0:20:80:11:7d:aa:17:68:3d:4c:5c:3d:
86:ec:7e:8a:be:ef:b2:14:ab:99:ed:dd:91:a6:02:
2d:d9:3f:e8:6c:a3:ba:f1:3b:31:20:08:0e:d7:2c:
ae:ac:68:b0:7b:4c:36:61:77:a9:30:0c:4a:be:62:
ec:ed:3f:71:5d:a6:86:46:f2:18:5d:c6:db:05:2b:
ac:ff:29:6c:bb:50:34:98:93:0a:a8:9e:0d:1b:43:
e2:66:33:cd:c2:50:64:82:02:ea:9c:5c:e5:26:de:
2f:c8:8e:a0:01:af:da:b6:f2:b6:8c:cf:4b:f8:de:
10:bd:b8:01:2a:73:ab:2f:09:88:cd:58:88:d6:5b:
76:30:62:3c:0a:35:90:53:9e:61:25:94:d9:e7:28:
7c:70:2e:07:48:9d:be:9d:a1:3e:85:50:f1:e9:0f:
d2:47:8d:cb:71:9f:c0:ab:0c:33:f7:6a:24:6b:d2:
1e:3c:70:bd:c3:ae:93:39:ed:96:8f:20:6b:e6:d7:
a0:bb:4a:87:41:a3:47:7c:9b:7f:7e:6c:25:04:32:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DF:1D:32:D0:B0:44:96:EC:21:DD:24:91:B8:10:3F:D2:1D:07:84
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/B98dMtCwRJbsId0kkbgQP9IdB4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.102.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e5:1c:1f:3f:d3:e3:f1:4f:76:32:c4:55:86:d5:fb:6f:e9:
2c:31:a1:47:68:0d:1e:6d:88:a7:a1:28:ab:63:7d:b0:0a:ce:
fe:b4:2d:bc:da:f7:d4:f3:15:51:de:a1:03:2c:c7:1c:0c:9d:
0c:44:29:fc:68:90:e4:ac:bb:d9:55:0c:98:7d:47:19:70:fe:
4e:42:f3:85:e9:de:26:3a:ae:a7:0d:7e:39:4b:10:e8:d0:eb:
3d:ed:2b:f1:cc:d3:0b:c8:bf:10:17:9a:c0:b9:1d:bc:0a:ab:
78:00:19:cd:0d:d9:cc:ff:b4:c5:f6:d0:32:89:c4:3f:0f:f3:
03:25:a5:51:d9:dc:7f:bd:57:50:27:d2:4a:90:70:77:30:ad:
70:f2:31:39:55:2f:e0:96:de:6d:c2:ae:d4:44:37:b7:8d:9d:
cb:b3:69:6a:98:68:21:3c:7c:46:08:a6:a7:f6:3d:3e:70:c2:
50:29:bd:ce:8a:a8:3f:61:d4:a3:d0:65:ef:0c:27:00:7c:fc:
60:d5:e4:8d:3a:79:30:42:08:94:82:5d:7d:98:d0:dc:10:99:
ea:83:d2:3e:ce:cb:eb:11:2f:2e:ef:6b:97:96:28:02:e7:d2:
ee:34:23:a7:91:3f:17:37:e1:80:9e:47:7c:b6:f5:d3:61:f4:
53:9d:97:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 19:35:31 2024 by rpki-client on console-fra.rpki-client.org