Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/PsXe9IeFXOJeyJaTehUHsyiQqc0.roa
File: PsXe9IeFXOJeyJaTehUHsyiQqc0.roa (raw, json)
Hash identifier: lElvTEYo9oMSb8aIb8dThb6Nt0q3TIfvdeXaV/y3EZI=
Subject key identifier: 3E:C5:DE:F4:87:85:5C:E2:5E:C8:96:93:7A:15:07:B3:28:90:A9:CD
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 018FC002D7F75625F3140EF182145C672687
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/PsXe9IeFXOJeyJaTehUHsyiQqc0.roa
Signing time: Tue 28 May 2024 16:22:42 +0000
ROA not before: Tue 28 May 2024 16:22:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24994
IP address blocks: 45.81.149.0/24 maxlen: 24
185.202.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 15:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c0:02:d7:f7:56:25:f3:14:0e:f1:82:14:5c:67:26:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: May 28 16:22:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ec5def487855ce25ec896937a1507b32890a9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c7:3f:06:f7:10:dc:ac:7b:c8:38:22:a7:76:
8c:ff:cf:ed:a3:66:36:23:9a:3a:a0:ed:21:99:9c:
2e:27:f5:80:72:6e:38:5b:e8:ba:17:23:7e:22:e7:
03:c2:62:3b:96:8f:0c:52:93:d4:1a:17:4d:02:0a:
38:bc:e9:36:8e:fd:c9:9d:dc:0f:9d:ac:24:8c:f8:
4e:ce:11:cf:a1:74:2f:fc:10:e6:ef:8b:a4:60:ba:
40:0b:61:12:6a:85:6d:46:29:19:c6:f5:f1:a9:7f:
a5:43:78:e2:35:6d:97:c1:cc:75:6f:9d:20:60:79:
6f:90:43:29:14:55:11:da:2f:d2:99:70:ad:9d:ee:
a7:dc:66:e0:c2:51:ce:df:ca:7d:25:53:e7:d1:d4:
7a:21:5e:46:76:9b:72:ff:85:95:5f:c3:e6:bf:4b:
2f:a5:44:18:aa:ed:13:6b:34:0a:32:41:1b:81:ba:
1d:40:36:f8:7f:f2:8c:70:8c:a8:bb:d1:2c:6b:84:
44:4a:6f:aa:c4:c9:2d:c0:e0:51:a5:3f:cb:ab:b3:
fe:43:60:ce:1d:f6:f2:19:01:01:ac:b9:3c:90:86:
12:71:2d:72:97:51:c0:a3:09:db:64:75:86:bd:6e:
9c:1b:2e:d0:3d:44:10:3e:93:fe:05:7b:72:66:7a:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C5:DE:F4:87:85:5C:E2:5E:C8:96:93:7A:15:07:B3:28:90:A9:CD
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/PsXe9IeFXOJeyJaTehUHsyiQqc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.149.0/24
185.202.175.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b6:3d:44:dc:35:96:3a:2b:2d:2e:06:a2:c5:5a:54:8e:34:
f8:29:a8:23:d1:23:2c:5a:3c:9b:cd:c0:d8:95:68:bd:94:e6:
e8:97:9b:71:31:63:05:22:a1:8f:21:13:99:b4:a9:70:d1:da:
b6:ff:5f:1d:02:76:51:de:46:9e:87:7c:5f:45:21:d7:4f:cd:
ab:44:36:ca:03:14:44:9e:e4:f4:9c:7a:e4:45:96:6a:a6:1c:
2f:8c:de:ff:89:53:92:da:b1:0e:2d:38:a0:ce:54:04:e2:ac:
d3:62:21:4b:78:a2:b9:08:9b:2d:92:8b:c2:eb:16:cd:ea:2f:
24:54:cb:dc:08:64:86:07:9b:de:ea:62:9b:94:bb:6e:4d:30:
45:2e:28:98:0b:dc:6d:23:fa:8d:76:2d:80:8c:47:17:99:e7:
16:59:bb:27:f6:d1:46:49:e4:00:d2:c9:bb:9f:e9:8a:f8:7e:
b7:66:a3:e0:f6:0a:c6:73:f0:92:d8:27:32:d9:7b:82:56:29:
6a:57:b5:ed:34:15:8c:e8:5c:6d:a4:c8:ac:5b:c1:da:42:42:
63:e8:2d:13:cd:2f:3f:be:a0:75:1f:ae:fb:7b:5a:91:50:07:
a5:27:25:ca:ba:2b:2c:a1:c0:61:17:89:18:26:2f:21:f1:66:
ed:3a:39:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 19:28:08 2024 by rpki-client on console-ams.rpki-client.org