Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/IZ6oVJsQUf_9swgoEWiDbwt9A3A.roa
File: IZ6oVJsQUf_9swgoEWiDbwt9A3A.roa (raw, json)
Hash identifier: tx93Il/WvKtrQ+071TcLGTi1s59vDVh1Edylv3ZtcHE=
Subject key identifier: 21:9E:A8:54:9B:10:51:FF:FD:B3:08:28:11:68:83:6F:0B:7D:03:70
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018D5EBFFE1A61E096E222927C6AE5B67E41
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/IZ6oVJsQUf_9swgoEWiDbwt9A3A.roa
Signing time: Wed 31 Jan 2024 09:00:56 +0000
ROA not before: Wed 31 Jan 2024 09:00:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41236
IP address blocks: 45.91.6.0/24 maxlen: 24
45.135.224.0/24 maxlen: 24
45.139.68.0/24 maxlen: 24
45.139.71.0/24 maxlen: 24
45.145.18.0/24 maxlen: 24
45.145.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 08:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:bf:fe:1a:61:e0:96:e2:22:92:7c:6a:e5:b6:7e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 31 09:00:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=219ea8549b1051fffdb308281168836f0b7d0370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:58:35:b2:8f:09:d0:07:67:99:70:f8:2c:
19:1a:b0:72:34:ee:b2:4f:08:da:a8:87:9e:de:4e:
97:65:d1:1f:f0:80:95:f4:11:54:3a:de:68:59:e0:
28:cb:2b:fe:19:ee:12:39:d6:1b:bf:5f:a3:6d:49:
36:c6:1c:82:27:e6:49:ff:40:ff:e3:63:19:96:63:
4b:e2:e5:ea:3e:eb:94:6a:44:a8:d6:ce:25:6b:a9:
27:96:f3:eb:2a:62:b8:b3:c7:ba:87:e2:99:b5:4b:
62:9d:de:8e:96:14:65:89:ba:be:14:cb:ed:38:ab:
b1:7a:ff:c9:a3:e2:0f:1b:65:b7:49:b8:a2:ae:36:
ae:4a:03:6e:d8:53:00:06:5d:61:1b:8e:83:d4:25:
8c:3d:ec:94:c7:ba:de:94:0f:8a:3d:e6:56:6c:8f:
c3:f7:4a:7d:33:75:35:fd:12:f8:7b:21:97:07:3c:
8e:b5:70:32:52:8a:d8:a3:9f:c6:a1:2c:e3:72:03:
2e:18:99:42:9c:d7:01:7e:93:b7:2e:42:97:53:b0:
11:e7:cc:6d:d5:5e:e3:d6:4c:9c:d2:da:5a:72:18:
db:d5:9d:db:f6:16:20:1a:93:b6:7d:44:b9:9b:8a:
6b:dc:a0:3e:37:4e:ba:ed:a3:be:43:d8:a0:37:73:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9E:A8:54:9B:10:51:FF:FD:B3:08:28:11:68:83:6F:0B:7D:03:70
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/IZ6oVJsQUf_9swgoEWiDbwt9A3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.6.0/24
45.135.224.0/24
45.139.68.0/24
45.139.71.0/24
45.145.18.0/23
Signature Algorithm: sha256WithRSAEncryption
dd:65:2b:47:9b:9b:bd:55:d3:47:94:60:16:10:72:70:d3:5e:
70:c8:d0:f3:6d:ca:45:5e:af:b4:4b:52:9e:c4:08:5f:c4:88:
17:d6:64:ac:ef:cc:e6:e3:58:fd:a8:8a:1a:e2:0a:e4:a8:3d:
e2:8d:7a:ca:b7:5e:94:89:80:45:50:59:98:12:cc:b2:a6:ae:
c8:b3:99:5f:87:46:00:09:31:5e:07:3c:0e:c2:d3:6d:27:9c:
11:34:c6:53:99:bf:79:e0:b4:d3:24:f5:42:76:a8:c7:06:15:
c2:af:90:ea:fe:f6:79:d7:37:05:bc:94:d7:81:59:68:66:dd:
a6:2d:40:da:29:68:ec:6d:46:2d:90:5f:c1:94:53:15:13:d3:
ed:44:5b:c3:ac:b6:57:3a:a4:2f:c9:1c:78:e4:89:cf:d6:5a:
71:46:df:1a:a4:09:93:6c:8d:6a:ad:c8:af:e7:12:fd:1d:51:
28:8e:11:c3:e3:96:20:50:23:59:86:b0:e0:99:0e:73:70:3a:
32:3d:c8:3c:4e:75:27:5b:89:e1:d8:4f:69:d7:95:a8:c4:ea:
db:f8:7a:94:d7:db:23:68:6c:0a:62:a1:14:d9:26:b8:c1:dd:
f0:42:ae:82:e8:94:64:24:4d:31:86:71:7b:75:07:00:5f:75:
75:00:dc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:53 2024 by rpki-client on console-fra.rpki-client.org