Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/I00Hs22LgxIXKTZT0GPMv9Up3pc.roa
File: I00Hs22LgxIXKTZT0GPMv9Up3pc.roa (raw, json)
Hash identifier: 6i52GlxooBf7g1ZtDBvEcL+TR4BFLRZoswvMa1x+mqI=
Subject key identifier: 23:4D:07:B3:6D:8B:83:12:17:29:36:53:D0:63:CC:BF:D5:29:DE:97
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018E13EBC0B33B8CAF5FF7A8502A548CE946
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/I00Hs22LgxIXKTZT0GPMv9Up3pc.roa
Signing time: Wed 06 Mar 2024 13:20:01 +0000
ROA not before: Wed 06 Mar 2024 13:20:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 45.13.179.0/24 maxlen: 24
80.91.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Apr 2024 19:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:eb:c0:b3:3b:8c:af:5f:f7:a8:50:2a:54:8c:e9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Mar 6 13:20:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=234d07b36d8b831217293653d063ccbfd529de97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e6:04:68:19:0f:c6:8b:b5:fe:26:be:0d:30:
b3:56:49:91:d3:69:13:17:cf:4f:a2:f9:08:cd:cb:
37:d4:04:a7:ce:59:b1:21:54:93:78:a0:de:84:62:
29:b6:07:b4:68:99:bf:0c:da:89:2c:af:46:c1:89:
6e:ac:91:1d:87:61:97:8e:b8:0a:e6:cc:ce:ad:c2:
4b:f5:04:46:46:dd:43:df:d4:63:01:5b:4a:82:17:
0a:fa:46:53:36:e9:a2:f6:2f:ea:90:23:0a:69:a1:
97:ab:a6:02:c5:2c:cd:20:64:9e:46:82:ba:32:00:
e4:d3:95:39:ce:62:fe:8f:8b:8d:38:3a:d8:1d:ad:
e9:e9:ec:01:59:d9:a3:5e:4b:96:3b:96:5f:73:eb:
c3:02:53:53:e0:bd:3e:a7:1b:6f:d9:36:ad:7b:fb:
38:63:b0:a8:b6:ad:35:e7:52:1f:cc:f6:a1:36:4e:
ac:9d:1d:85:42:b8:53:6a:5b:a4:49:42:ff:4d:a7:
d7:2b:02:d1:60:ee:d3:23:82:b2:de:cf:37:80:47:
8e:76:b3:b8:4f:6d:47:d6:b8:3f:1b:08:ad:77:4d:
6f:c9:3c:7c:29:74:88:8c:92:94:69:f8:29:8f:0f:
55:95:fc:9b:e8:e2:4b:70:da:7e:44:83:09:7d:9e:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4D:07:B3:6D:8B:83:12:17:29:36:53:D0:63:CC:BF:D5:29:DE:97
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/I00Hs22LgxIXKTZT0GPMv9Up3pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.179.0/24
80.91.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:40:93:18:6e:fd:a4:4e:2f:9c:60:5e:e9:d6:64:fd:78:68:
be:3c:4e:3c:db:4c:61:e4:18:49:b1:8f:39:7e:30:dd:70:60:
a0:e1:cd:b7:ed:5b:2f:e8:7e:6e:25:28:8a:a4:16:e1:61:2e:
41:70:32:f7:85:77:72:be:7e:31:ec:3a:c7:9f:16:d6:c5:3c:
68:0c:de:7b:0f:c3:f9:62:86:cb:a3:7b:97:a9:2c:80:30:f7:
3b:a1:d4:d4:b8:af:15:16:d4:f4:d2:72:0e:23:24:f2:7b:32:
69:59:52:41:26:ec:b8:fb:c8:99:dd:a3:74:25:a2:ba:2d:bd:
b8:51:a6:f1:3e:f6:e2:df:a2:01:e0:c4:85:b5:c0:c0:04:d8:
5c:41:6c:ad:ed:18:78:5e:c2:8e:3d:21:f0:f0:37:21:be:b0:
48:16:3f:23:d0:cf:dd:6e:bb:a6:ec:3b:da:22:b0:6d:02:cd:
83:eb:b3:bd:ea:52:68:6d:9e:68:96:4a:c5:cc:63:ae:e4:a1:
67:15:4a:2e:2e:05:50:d2:bc:99:bf:dd:f7:07:16:d1:4a:d3:
b1:a3:7f:ab:be:bc:01:23:d3:4a:9d:0a:f5:64:0c:01:b5:4f:
ac:b0:63:84:62:83:82:09:26:e5:57:4c:f5:ef:a7:58:85:27:
7c:d5:5d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:12 2024 by rpki-client on console-ams.rpki-client.org