Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4IDUSaclcXsQX5cJ_BFdbpfEdMs.roa
File: 4IDUSaclcXsQX5cJ_BFdbpfEdMs.roa (raw, json)
Hash identifier: m5uUi/z/aOLQNvPxSWcfDnMZXKeRsY3kcGZTvaauhF0=
Subject key identifier: E0:80:D4:49:A7:25:71:7B:10:5F:97:09:FC:11:5D:6E:97:C4:74:CB
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0192E7F71191F41F745F624346364CB2D916
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4IDUSaclcXsQX5cJ_BFdbpfEdMs.roa
Signing time: Fri 01 Nov 2024 13:43:01 +0000
ROA not before: Fri 01 Nov 2024 13:43:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199724
IP address blocks: 45.10.56.0/24 maxlen: 24
2a0a:37c0::/29 maxlen: 29
2a0a:37c0::/32 maxlen: 32
2a0a:37c1::/32 maxlen: 32
2a0a:37c2::/32 maxlen: 32
2a0a:37c3::/32 maxlen: 32
2a0a:37c4::/32 maxlen: 32
2a0a:37c5::/32 maxlen: 32
2a0a:37c6::/32 maxlen: 32
2a0a:37c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 02 Nov 2024 10:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e7:f7:11:91:f4:1f:74:5f:62:43:46:36:4c:b2:d9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Nov 1 13:43:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e080d449a725717b105f9709fc115d6e97c474cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:a1:c9:11:20:50:43:cf:f3:bb:36:ed:8b:
bb:29:b6:46:b9:fe:56:ce:7f:ec:43:ff:25:41:e9:
27:74:b8:8e:d2:04:b4:92:4c:2b:2c:23:5b:53:82:
f2:6c:d7:84:91:b0:f2:01:5a:15:62:1c:3c:48:6a:
ef:76:8a:90:28:63:56:3e:c3:86:ba:19:cb:68:6d:
97:45:ef:d7:29:2f:43:08:4c:f7:59:62:de:2b:08:
a3:23:e3:16:07:98:86:ef:c2:8d:2d:7b:ea:d1:ed:
52:ad:9a:6b:2f:f0:53:35:0b:52:9c:1c:6a:18:16:
16:67:ba:f0:9a:c4:56:df:53:aa:d5:40:b3:4d:14:
ed:a6:72:ed:6f:55:ff:ad:0e:bb:0e:ae:9b:06:07:
29:8e:e0:fc:67:6f:5c:f3:20:26:54:4e:11:22:d5:
eb:d9:93:46:1b:79:92:c6:08:de:0b:70:5c:cf:f6:
73:84:fe:ae:1b:bd:5f:19:78:d1:53:d8:40:18:a4:
2b:dc:7a:7a:58:35:50:7b:8d:d1:4c:4b:ab:dd:2b:
a4:ca:55:76:34:42:71:2c:76:6e:71:81:62:18:d8:
89:e4:9f:0b:46:7c:f6:e6:f1:eb:99:19:86:7e:8f:
f2:75:fd:ec:60:c9:28:27:65:f6:50:c4:11:38:fe:
26:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:80:D4:49:A7:25:71:7B:10:5F:97:09:FC:11:5D:6E:97:C4:74:CB
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4IDUSaclcXsQX5cJ_BFdbpfEdMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.56.0/24
IPv6:
2a0a:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
87:da:1c:d5:f1:95:15:2c:ac:0d:a1:b1:6a:6c:8f:ca:24:48:
af:b2:17:43:95:9b:5d:b9:0d:e9:d9:cd:3e:22:6c:b0:c8:59:
e5:76:8f:f3:21:90:b8:ee:b3:0d:fa:8a:b1:91:ef:95:57:5c:
69:b7:77:ab:be:81:7f:a4:36:17:24:4f:f4:32:91:c3:c3:ba:
83:34:37:18:66:d6:b6:4d:2b:06:f0:e8:3e:b0:60:84:6c:d3:
37:25:ad:24:e1:ac:81:32:33:ac:d3:73:a8:2d:07:66:86:19:
7a:5a:89:a8:d0:a5:e8:58:05:ea:29:ef:9e:9c:99:cb:ce:90:
0e:ea:f1:70:a1:cc:84:28:6a:02:da:83:e3:37:db:24:ac:f0:
11:7d:0d:ce:d6:a4:a8:b9:bd:f6:a6:24:32:72:b2:82:86:75:
54:a9:83:c2:82:cf:b5:af:09:bd:48:c3:ba:c2:4f:92:a1:95:
88:8a:91:d2:85:f2:e5:6b:e0:88:12:6d:95:c6:78:09:d1:23:
72:ef:75:84:00:b1:7f:15:cc:35:9b:18:4d:ae:58:cc:33:d8:
76:70:0e:35:a4:8b:37:fc:81:1a:cc:f2:10:33:6a:1b:df:08:
a5:99:37:f7:42:7c:7c:57:d4:0e:26:fb:36:0a:a2:f5:8d:56:
59:7a:1b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 12:23:53 2024 by rpki-client on console-fra.rpki-client.org