Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9kIzpp5tkNlZQ6q5ydFRRfyMCs8.roa
File: 9kIzpp5tkNlZQ6q5ydFRRfyMCs8.roa (raw, json)
Hash identifier: ayEJXbOoa2qYHVC9k/CDt4Vqkn36UsOF6TEznxi3oAE=
Subject key identifier: F6:42:33:A6:9E:6D:90:D9:59:43:AA:B9:C9:D1:51:45:FC:8C:0A:CF
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018E094E77E278B9D048819B98DC58EE0095
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9kIzpp5tkNlZQ6q5ydFRRfyMCs8.roa
Signing time: Mon 04 Mar 2024 11:52:01 +0000
ROA not before: Mon 04 Mar 2024 11:52:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 21:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:09:4e:77:e2:78:b9:d0:48:81:9b:98:dc:58:ee:00:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 4 11:52:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f64233a69e6d90d95943aab9c9d15145fc8c0acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7b:94:1d:cc:e4:fb:f3:2c:b2:7f:4e:96:36:
b4:01:8b:39:66:17:1b:be:ac:24:6e:8f:03:12:4f:
0e:3e:f5:03:b2:cd:ff:ff:51:a7:02:ab:09:41:8e:
5a:78:e1:b1:bc:4a:8e:4f:5a:55:4e:19:1b:0f:74:
70:ca:00:eb:62:46:e7:3e:e7:7d:af:b1:dc:01:a3:
a9:7e:24:9f:a8:f6:5f:55:1b:63:2d:e1:67:55:1d:
ba:24:7e:e4:f6:a2:0f:cc:cd:da:4f:73:03:75:b3:
04:51:24:0f:19:c7:51:ef:72:24:c3:85:44:a9:95:
3d:b5:01:72:f5:40:7e:4c:05:fe:f7:05:bf:49:b2:
6c:ec:2c:ca:2a:0d:00:d2:23:54:fb:ed:6c:9e:a6:
de:71:c8:20:db:aa:e7:5e:ee:3d:87:1b:a2:2f:d7:
e2:c7:f4:75:cd:b1:a4:e0:fb:b3:c6:ea:cb:c9:bf:
69:a7:87:d1:69:2a:3d:88:48:69:0a:8a:4e:6c:cc:
7d:2e:ef:5a:ce:3e:98:20:28:74:d8:a1:85:4f:c9:
2b:25:d4:19:40:db:01:77:d2:a6:5f:78:0f:6d:1f:
bb:91:a3:bb:fc:a5:29:a4:53:44:4a:a3:28:9e:73:
6c:b7:77:75:6f:3a:94:3d:54:26:ba:da:b0:d8:33:
aa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:42:33:A6:9E:6D:90:D9:59:43:AA:B9:C9:D1:51:45:FC:8C:0A:CF
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9kIzpp5tkNlZQ6q5ydFRRfyMCs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.205.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:33:94:fe:ba:91:ca:d2:f5:b1:75:45:7e:2b:54:a4:bb:ca:
a5:54:76:6a:53:f3:7a:b3:54:da:8f:10:d4:a5:de:f9:63:7f:
25:ec:a7:eb:29:a3:5e:9a:92:d6:4d:7b:21:18:4e:b7:1c:2d:
62:93:37:98:cc:21:0b:18:e5:84:6b:80:4c:ad:0c:be:83:e5:
8f:a8:1e:b6:23:80:d1:df:ad:43:8b:ce:0f:bd:10:f7:ab:fd:
3f:1c:89:ab:20:6a:7b:46:0b:20:27:73:46:f3:99:b3:e9:04:
e7:e9:ec:d8:2c:82:ac:68:ab:bb:b5:6c:0d:c4:cf:e4:cc:96:
bd:d5:b9:2b:29:2d:27:e8:93:b2:e1:70:18:6d:a6:e3:e1:4e:
25:41:15:12:8e:06:d8:39:a8:3c:7b:df:58:34:32:2c:d4:ac:
be:11:e4:ff:9c:27:4b:12:89:34:96:50:4a:a2:00:10:61:b5:
4c:82:df:40:a2:dc:1a:bf:4a:96:ab:de:24:e5:69:3b:b2:39:
83:7b:b6:c7:ef:3c:51:21:10:b1:33:c7:12:86:c2:d7:ec:99:
8b:27:58:94:1b:80:79:ec:4a:c7:9e:98:31:ad:ed:4f:19:02:
6e:32:60:8f:6d:a8:ca:bd:b8:7d:35:75:33:8d:8e:eb:25:f1:
d4:92:62:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:24 2024 by rpki-client on console-fra.rpki-client.org