Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/I3tALvSBtoVfZfrHb6nWXWjOKHQ.roa
File: I3tALvSBtoVfZfrHb6nWXWjOKHQ.roa (raw, json)
Hash identifier: sikGp0RcaYEy65nb/e5KKM8BZrBIqWx222zFBHENdDE=
Subject key identifier: 23:7B:40:2E:F4:81:B6:85:5F:65:FA:C7:6F:A9:D6:5D:68:CE:28:74
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018CCC41436C7451968873355CF90324D5AE
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/I3tALvSBtoVfZfrHb6nWXWjOKHQ.roa
Signing time: Tue 02 Jan 2024 22:17:58 +0000
ROA not before: Tue 02 Jan 2024 22:17:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.141.196.0/24 maxlen: 24
213.139.228.0/24 maxlen: 24
85.209.105.0/24 maxlen: 24
85.209.107.0/24 maxlen: 24
85.209.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jan 2024 20:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cc:41:43:6c:74:51:96:88:73:35:5c:f9:03:24:d5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 2 22:17:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=237b402ef481b6855f65fac76fa9d65d68ce2874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:4b:02:6f:32:b7:ac:25:c1:20:28:8c:98:
b4:1f:ee:fa:d6:2d:11:74:4a:ef:22:fb:36:5d:3f:
95:b5:f8:1d:e3:a5:f7:bf:00:eb:8c:42:ed:1c:49:
75:25:9c:00:4c:69:d8:e4:6f:7a:69:73:6d:d4:94:
a1:ab:d0:4d:5c:4c:3d:65:c0:24:26:76:25:b3:50:
b5:fd:99:fd:9e:b1:ff:29:5a:20:74:cc:13:b8:fc:
db:26:cb:f2:a4:d9:93:c0:56:e1:a6:37:b6:ab:d7:
95:c4:eb:ad:63:c7:4d:7e:a8:c0:12:0c:8d:bd:5e:
a5:e8:08:89:6f:e0:0b:d2:37:fc:02:32:f8:a0:e8:
8c:5b:e5:11:63:e1:3e:bb:be:5b:fa:ad:d9:a7:27:
6d:f8:29:7a:f0:b0:17:40:8c:4e:13:54:63:49:f3:
dc:b5:01:35:5c:3e:08:9d:57:4e:68:91:ec:99:fb:
86:44:96:c6:57:bc:64:a3:3e:c5:a1:d5:1e:b4:18:
a8:7a:09:1e:9b:3a:0a:ee:fe:2a:66:ba:be:9c:48:
99:27:9e:1c:3f:f3:20:f5:b4:e4:a9:03:6d:b8:6a:
e7:06:1d:02:e2:18:27:5b:b6:05:07:66:93:89:b9:
19:19:df:92:2f:85:0b:84:b6:ff:4c:ff:b7:01:bd:
48:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7B:40:2E:F4:81:B6:85:5F:65:FA:C7:6F:A9:D6:5D:68:CE:28:74
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/I3tALvSBtoVfZfrHb6nWXWjOKHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.196.0/24
85.209.105.0-85.209.107.255
213.139.228.0/24
Signature Algorithm: sha256WithRSAEncryption
83:1e:20:47:6b:0b:1a:0f:bb:32:f5:b8:00:c8:a2:fe:80:03:
a1:44:de:d1:14:83:a5:b9:c8:64:d0:36:c1:93:0f:f3:54:97:
39:75:f3:13:18:11:06:4d:c0:7d:cf:43:f7:4b:da:7f:04:87:
82:ba:be:58:2c:a5:7f:9f:7f:8d:ee:b5:57:ba:1c:30:06:19:
ed:51:13:7d:3f:2e:d3:3e:36:ee:a8:c1:a3:72:f6:de:1c:8a:
c6:9a:51:80:9e:6f:68:d7:55:1c:98:45:9f:3b:74:ca:e3:df:
64:ec:4a:4c:ce:20:e3:79:58:1e:33:e5:40:ff:96:0a:5e:6d:
63:c2:e7:3f:8f:6e:8a:0b:9f:4e:88:33:95:c7:1f:70:56:f8:
e6:d2:be:30:e7:ff:1b:92:c1:4f:cf:43:8b:be:de:2f:39:0c:
e4:4a:cd:ef:c6:1b:3f:b9:83:1d:41:38:22:d3:c5:46:e0:54:
4a:f2:f3:43:b2:a6:e3:a6:f2:12:69:be:ad:1b:ce:56:f4:c4:
ee:00:10:ef:16:bc:03:c8:53:12:b4:d5:4b:db:86:c1:0b:54:
36:20:10:cb:1b:e5:6f:8f:53:84:8f:1e:08:cd:f4:98:7e:78:
1e:c9:a9:b7:fd:fc:46:f0:7e:28:d5:0d:7d:90:a4:7b:c5:7b:
dd:9b:6e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org