Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/l6KZAM88jY36I-WUaEw3iI7WWSk.roa
File: l6KZAM88jY36I-WUaEw3iI7WWSk.roa (raw, json)
Hash identifier: J5vlMc5b/an5M53ZZ3/EoFoM6jGiENU+InrB+FonRG0=
Subject key identifier: 97:A2:99:00:CF:3C:8D:8D:FA:23:E5:94:68:4C:37:88:8E:D6:59:29
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 0193503068B572F24EB2CE73B956045764AC
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/l6KZAM88jY36I-WUaEw3iI7WWSk.roa
Signing time: Thu 21 Nov 2024 19:26:09 +0000
ROA not before: Thu 21 Nov 2024 19:26:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 45.13.31.0/24 maxlen: 24
77.83.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:30:68:b5:72:f2:4e:b2:ce:73:b9:56:04:57:64:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Nov 21 19:26:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97a29900cf3c8d8dfa23e594684c37888ed65929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:2b:f8:6b:cc:d6:37:75:65:14:08:03:55:
49:61:de:ee:60:05:bd:3a:ad:94:93:1f:53:8e:31:
a9:26:21:3d:cd:54:39:e4:7e:42:11:75:6b:9d:d8:
3e:c1:24:d1:da:88:48:1c:91:02:d9:d0:bd:29:9a:
5c:42:da:0b:39:ba:0f:7d:a0:b8:04:e9:00:13:59:
a5:a0:37:32:7a:9b:31:42:f4:e0:13:a9:11:84:f8:
1c:15:84:7b:16:37:1c:e3:ae:e0:e3:63:e8:f0:37:
2d:07:bd:d0:55:00:31:fe:71:0b:e8:22:19:eb:0e:
1c:88:93:c8:0b:14:f3:aa:17:af:83:cc:3a:cc:e5:
05:bb:b9:f8:ec:a7:66:45:23:f9:58:50:f0:97:60:
5c:7b:68:ee:a5:18:d4:61:1f:1c:d9:91:3c:b7:9f:
bc:f1:64:cb:eb:ed:73:51:95:80:0d:46:bf:94:78:
76:54:8d:b3:46:dc:41:81:43:12:59:8b:90:6b:20:
9c:c9:42:68:a5:bb:07:ca:a1:d7:59:bd:6f:c5:88:
41:17:eb:97:de:ec:f7:f0:e1:05:61:e7:22:ea:06:
f8:ff:ce:d7:7d:9b:54:9c:b6:c9:52:c3:76:72:ef:
53:61:55:7e:0b:b8:17:ad:e6:f4:f5:63:24:7d:88:
52:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A2:99:00:CF:3C:8D:8D:FA:23:E5:94:68:4C:37:88:8E:D6:59:29
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/l6KZAM88jY36I-WUaEw3iI7WWSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.31.0/24
77.83.223.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b3:ab:6d:8c:2c:ce:81:be:5d:62:c3:60:64:33:1e:7e:fa:
e4:fa:94:8c:1d:40:27:c0:5f:52:88:0d:59:c2:c0:e4:54:e4:
a4:bf:90:e7:b6:e1:85:43:2a:71:3e:97:40:04:43:b9:20:e0:
5d:56:b1:cc:6f:fb:e4:e9:b7:eb:91:19:e4:5e:af:95:5d:0e:
5f:f8:8d:e2:25:d9:35:63:31:5e:52:5f:a4:85:fb:bc:bb:2c:
94:3d:66:9f:50:82:37:da:f3:b1:af:76:4b:69:d7:c1:b3:d0:
a6:07:1b:f4:4e:9b:21:90:c5:46:f1:79:c1:97:07:35:a6:cf:
55:8c:cb:3b:bd:7e:8d:b4:d8:8d:a6:ba:7d:63:15:7b:e5:04:
5c:b7:51:ff:ae:b5:aa:96:b2:0d:6c:c5:b7:e8:bb:01:d8:49:
64:9f:fb:37:d4:19:f5:5a:11:aa:ac:45:04:fa:5f:71:69:02:
2a:1b:6b:75:c2:ac:d1:b1:ff:16:7c:64:b8:ca:80:9b:83:37:
d2:7f:86:ff:e0:f5:2a:5b:8e:15:50:e1:51:c8:7d:49:34:86:
40:26:49:a5:43:03:b7:50:44:4a:e9:5b:7c:e6:44:46:c3:81:
ef:49:d6:79:27:c7:cb:ca:e3:73:68:47:16:63:63:07:f6:a6:
7a:66:8b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:21 2025 by rpki-client