Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/MiA1--rdHqHj7d8DEMB1wXblXLo.roa
File: MiA1--rdHqHj7d8DEMB1wXblXLo.roa (raw, json)
Hash identifier: z48yuW1DPKjNeoMIxGOjOU3CC95XJhW5xvMIvzG6PGk=
Subject key identifier: 32:20:35:FB:EA:DD:1E:A1:E3:ED:DF:03:10:C0:75:C1:76:E5:5C:BA
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01910CD8CA66E98C0E96F1639437FDEB9352
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/MiA1--rdHqHj7d8DEMB1wXblXLo.roa
Signing time: Thu 01 Aug 2024 07:30:19 +0000
ROA not before: Thu 01 Aug 2024 07:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201364
IP address blocks: 45.10.56.0/24 maxlen: 24
2a0f:3380::/32 maxlen: 32
2a0f:3381::/32 maxlen: 32
2a0f:3382::/32 maxlen: 32
2a0f:3383::/32 maxlen: 32
2a0f:3384::/32 maxlen: 32
2a0f:3385::/32 maxlen: 32
2a0f:3386::/32 maxlen: 32
2a0f:3387::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 22 Aug 2024 13:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0c:d8:ca:66:e9:8c:0e:96:f1:63:94:37:fd:eb:93:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Aug 1 07:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=322035fbeadd1ea1e3eddf0310c075c176e55cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:d9:da:8c:21:85:94:dd:c8:c5:93:a9:c0:
94:f8:ba:16:b7:54:a9:e2:81:a6:f6:76:61:bc:e2:
17:ea:a4:9e:1f:ea:06:35:54:87:28:c2:85:60:41:
0f:dd:34:9b:7b:3a:07:83:5f:d6:f2:2b:54:54:ae:
a6:ea:5c:a8:de:c0:96:95:0c:37:89:28:d3:05:d7:
25:d5:38:fc:5b:09:e6:a3:ff:b9:8c:1b:2a:48:5a:
31:fa:86:63:2d:0e:38:d8:db:66:4b:3d:8b:6e:1f:
86:d5:ef:ed:94:c4:f3:f9:86:70:d4:f5:30:55:6a:
bb:05:39:35:1b:2e:15:db:a2:22:96:4c:43:89:96:
d3:25:2b:1d:b9:21:e7:04:d6:aa:e8:c0:e2:3c:07:
83:4f:c2:ba:46:40:3b:ad:85:39:89:d7:8d:bd:4c:
9e:5f:af:af:b1:e7:af:ef:22:4f:b0:b2:fa:51:bc:
92:b4:0a:55:e4:dc:c6:60:3f:d5:53:e3:19:81:e7:
76:88:16:d5:0f:3c:5f:c4:68:73:f8:79:23:b1:29:
47:21:e4:79:f0:fe:ce:8d:bf:72:b8:b6:d5:2b:97:
c3:02:81:fd:e7:ec:d7:b0:41:50:3f:34:fb:71:bf:
80:ff:09:c5:39:ef:99:c9:3c:7a:3a:97:de:51:a5:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:20:35:FB:EA:DD:1E:A1:E3:ED:DF:03:10:C0:75:C1:76:E5:5C:BA
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/MiA1--rdHqHj7d8DEMB1wXblXLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.56.0/24
IPv6:
2a0f:3380::/29
Signature Algorithm: sha256WithRSAEncryption
3c:4b:30:5c:44:20:85:f8:e0:1e:7b:5e:a2:09:04:ac:12:f0:
b0:22:f9:d3:03:fd:73:8f:a6:9c:2f:28:5d:c5:cc:d3:19:89:
83:77:f8:dc:8a:d5:eb:54:36:48:ca:da:e5:c4:ba:f4:79:41:
5c:23:64:4a:bc:d2:e5:90:c9:39:2f:1c:15:d6:73:95:18:f7:
6e:cf:82:3b:f1:63:09:72:ab:f7:fc:2d:5e:f1:22:89:c9:ea:
df:5a:8d:9d:9a:dc:bc:62:b7:b5:20:cb:b9:dc:ff:05:8e:af:
d1:8c:8a:7d:73:c3:dd:f0:0e:19:c8:e6:3a:59:dd:00:25:f1:
e6:1d:fd:66:09:84:10:6d:a6:f1:a2:54:a4:a2:ab:5d:b7:3b:
3e:02:35:41:18:d3:8e:bf:e4:da:90:7b:cb:53:69:0e:26:38:
bf:e5:4b:4e:0a:d8:a9:e4:0c:dd:b0:8e:83:cb:9c:3a:80:34:
63:66:e9:bb:90:8f:82:42:7c:f2:89:52:9b:e3:cb:b7:9a:c5:
a6:88:ba:d7:21:48:1c:33:ee:7e:6f:96:bc:16:a6:73:8c:cc:
42:58:6f:f1:8c:4d:c6:a0:55:9e:18:7a:04:4c:46:88:96:a8:
ed:00:50:16:fc:19:15:09:dd:3d:b9:1c:27:f0:5e:57:e1:b5:
42:f2:42:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 17:02:48 2024 by rpki-client on console-fra.rpki-client.org