Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/FN1DbVDi028DTIN2P7S98niqipw.roa
File: FN1DbVDi028DTIN2P7S98niqipw.roa (raw, json)
Hash identifier: AeRIgNkItsGlsZmOyAiblwZI3S/a9yHbrwTBdvj3lXY=
Subject key identifier: 14:DD:43:6D:50:E2:D3:6F:03:4C:83:76:3F:B4:BD:F2:78:AA:8A:9C
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 018DA7599335CA2C68D8A2EAE0118A8B9849
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/FN1DbVDi028DTIN2P7S98niqipw.roa
Signing time: Wed 14 Feb 2024 11:21:21 +0000
ROA not before: Wed 14 Feb 2024 11:21:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 45.13.30.0/23 maxlen: 23
45.94.25.0/24 maxlen: 24
77.83.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 11:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:59:93:35:ca:2c:68:d8:a2:ea:e0:11:8a:8b:98:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Feb 14 11:21:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14dd436d50e2d36f034c83763fb4bdf278aa8a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:d7:45:b9:7c:ea:9a:ba:e5:f1:54:85:8d:
eb:b9:9f:f2:09:62:d5:c3:cb:dd:5e:b6:08:08:96:
0f:fc:ca:de:e8:f4:43:6e:3d:53:f0:64:4f:6f:35:
6f:e4:b3:97:f5:aa:c7:9c:3b:87:c5:c8:0c:70:42:
f0:fe:9c:9f:d6:4b:16:a6:01:b8:7a:74:f4:63:67:
5c:87:c9:62:66:b2:b6:ac:42:f6:c9:6c:cf:84:55:
26:c9:ba:4c:e1:f3:8f:b0:b7:0e:73:a6:3f:e3:fc:
2c:1d:2d:32:90:04:d3:4b:ee:f1:87:8a:ca:94:12:
9a:22:c3:3e:3c:0e:25:23:37:c7:e4:21:a6:71:88:
96:81:47:f7:cc:fe:2f:1b:6e:dd:b9:5a:d8:84:9f:
2a:c4:69:99:71:b7:d1:9c:21:35:06:6a:16:fb:8d:
4c:ca:d1:a3:70:2f:c7:a3:8a:63:dd:72:27:41:c9:
d9:cd:f2:e1:11:27:20:3f:05:3b:58:0a:f8:3b:4c:
bb:9d:97:14:c8:57:46:2a:99:98:b2:3d:88:5f:c4:
81:03:63:81:e4:e4:a8:a1:13:1f:4d:15:23:a4:da:
6a:07:83:a1:bd:a5:e2:35:ed:d8:7f:e5:5f:17:4d:
b3:72:4d:95:84:9b:f8:01:b9:e9:26:e7:be:c9:e9:
f5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DD:43:6D:50:E2:D3:6F:03:4C:83:76:3F:B4:BD:F2:78:AA:8A:9C
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/FN1DbVDi028DTIN2P7S98niqipw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.30.0/23
45.94.25.0/24
77.83.223.0/24
Signature Algorithm: sha256WithRSAEncryption
af:89:59:67:e3:25:9c:14:34:4f:52:ef:7e:bf:50:45:b7:86:
ef:c9:36:cf:02:5c:19:ba:2c:1e:26:b7:cc:d6:1d:ba:49:fc:
06:2a:e0:0b:09:17:6a:0c:50:f8:ef:97:5d:df:2c:29:6d:e9:
0b:90:5e:23:ff:14:de:1a:07:08:47:0f:2c:64:e0:0f:46:6c:
34:4e:17:41:9e:9a:0c:6b:8b:00:dc:1d:c6:c3:c1:e4:47:9d:
c0:f5:bc:50:9f:6c:69:ec:0c:ce:f6:21:3e:6a:7e:0e:32:e4:
55:ed:55:b5:32:b0:f4:2c:e0:3e:b9:76:78:a3:46:fe:9e:1b:
c8:49:44:3c:62:6b:58:89:f3:ce:ec:9e:d5:f9:6f:0a:d9:63:
29:b4:bb:af:ad:90:bd:3e:67:63:c6:f1:e6:81:74:73:13:e3:
a6:63:05:e9:2c:ed:b7:89:f0:03:73:2d:ae:ff:78:9d:91:ad:
dc:7c:af:ea:96:e7:60:af:95:9d:bf:b6:3c:17:23:8f:11:29:
88:48:82:cb:7f:a8:d5:75:8a:49:d7:01:ed:e3:bf:f5:5b:79:
46:c6:3f:6b:30:80:1f:5c:36:36:6b:44:fe:97:c9:26:27:7e:
3e:78:ee:f5:ff:75:b7:dc:d4:9b:65:a5:ed:9f:e7:9f:c6:a6:
2e:2e:c2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:14 2024 by rpki-client on console-fra.rpki-client.org