Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/o_dK0jkaH1fWE9nJLJzAuNzHJm4.roa
File: o_dK0jkaH1fWE9nJLJzAuNzHJm4.roa (raw, json)
Hash identifier: Kgrm7kyFThGItYdw/WT+hhjHqIP2yZXNAXzXUoxrU5g=
Subject key identifier: A3:F7:4A:D2:39:1A:1F:57:D6:13:D9:C9:2C:9C:C0:B8:DC:C7:26:6E
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018CDE23A9FD8DA6102B54A1F210978C95B3
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/o_dK0jkaH1fWE9nJLJzAuNzHJm4.roa
Signing time: Sat 06 Jan 2024 09:38:48 +0000
ROA not before: Sat 06 Jan 2024 09:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41236
IP address blocks: 45.145.19.0/24 maxlen: 24
45.135.224.0/24 maxlen: 24
45.139.68.0/24 maxlen: 24
45.91.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 08:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:de:23:a9:fd:8d:a6:10:2b:54:a1:f2:10:97:8c:95:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 6 09:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3f74ad2391a1f57d613d9c92c9cc0b8dcc7266e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:2e:64:fd:34:e8:96:72:89:b9:69:cc:64:
ec:f2:6f:c6:c9:3f:17:13:f1:10:e9:16:a6:39:0d:
a7:26:44:ee:9c:ae:d3:18:93:4b:a8:44:32:07:6c:
89:40:fe:62:5b:c4:6a:c7:1c:33:08:32:2e:d2:91:
52:7f:36:60:0e:70:cc:e7:5f:2c:06:26:30:9a:a9:
cb:4f:8f:24:b8:db:59:c9:cf:59:c6:e8:73:b7:8a:
17:87:96:9b:98:a9:6e:5e:44:b0:60:04:eb:76:a0:
95:63:dd:36:39:19:ca:00:24:bd:1f:34:05:a4:01:
2a:63:8a:50:c7:d3:08:3f:8c:4f:db:be:65:94:b8:
85:51:24:61:46:da:7c:16:03:0d:36:6d:4a:f8:b8:
e5:9e:5e:8b:56:8a:81:bf:0b:2a:3f:b4:05:40:ba:
a5:ee:45:f1:14:f2:70:51:37:8d:c2:d3:f0:08:dd:
d0:07:53:97:6b:19:c9:fb:1f:0a:62:6a:3c:7b:05:
c1:da:30:59:e2:39:44:92:c9:e5:18:7b:bf:50:23:
9a:66:2a:11:26:a1:7b:4f:dd:26:fe:ca:fe:65:56:
6f:8d:d0:02:52:c6:2d:ed:3c:60:48:79:24:eb:59:
f1:ed:32:fc:4a:8b:ff:51:2d:e0:45:db:04:14:9b:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F7:4A:D2:39:1A:1F:57:D6:13:D9:C9:2C:9C:C0:B8:DC:C7:26:6E
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/o_dK0jkaH1fWE9nJLJzAuNzHJm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.6.0/24
45.135.224.0/24
45.139.68.0/24
45.145.19.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:2f:21:67:dd:c1:c2:7a:c2:53:f9:74:2c:d0:0c:f8:a6:91:
8f:21:7e:28:35:1e:f0:bc:31:f9:01:14:65:dd:2b:00:84:66:
5e:99:c3:f3:b4:e1:f3:62:aa:54:ee:23:ee:e0:3d:d5:90:37:
02:d1:c5:4f:94:39:27:ab:21:b1:29:03:ca:d3:bd:e6:95:73:
3e:77:5b:90:9a:e9:a0:e1:0a:fc:f8:f9:f2:20:3f:b3:29:5f:
bc:99:af:a0:12:9e:f2:e5:1d:41:5e:21:9c:17:01:3e:3c:d7:
33:16:b2:22:bf:93:70:ad:f2:5c:2e:e6:42:33:bb:cc:30:70:
6d:de:31:49:67:c1:66:10:b9:2b:5c:c0:d3:c5:b6:eb:65:15:
7d:8d:0c:65:43:f8:0c:53:c5:2b:ac:1f:15:89:cf:d3:18:e9:
90:1a:f3:a6:cd:99:9b:51:1f:47:1e:d4:ec:15:54:47:0f:c9:
c3:08:4c:1f:32:03:36:17:e5:4e:db:ce:41:e1:55:11:3e:2c:
73:df:8e:f6:ea:7c:44:df:f9:6f:c5:b2:61:69:96:9e:3d:71:
f9:d9:33:27:fb:43:d7:4d:08:c7:fa:3c:09:93:6a:85:88:4a:
1d:61:18:11:50:90:c3:ac:40:c0:6b:69:c7:be:e9:f5:44:27:
88:7a:f9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:53 2024 by rpki-client on console-fra.rpki-client.org