Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_gxPfddhMw8REaxiuZ0j70YuWKo.roa
File: _gxPfddhMw8REaxiuZ0j70YuWKo.roa (raw, json)
Hash identifier: Q0Z4WjCNcmdtOALUXSH9ifQvdcT6VuO0HSWZqy9OEUI=
Subject key identifier: FE:0C:4F:7D:D7:61:33:0F:11:11:AC:62:B9:9D:23:EF:46:2E:58:AA
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0191AF789C137462513771F92D7548DE6D7A
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_gxPfddhMw8REaxiuZ0j70YuWKo.roa
Signing time: Sun 01 Sep 2024 21:23:22 +0000
ROA not before: Sun 01 Sep 2024 21:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.8.205.0/24 maxlen: 24
85.208.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 19:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:af:78:9c:13:74:62:51:37:71:f9:2d:75:48:de:6d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 1 21:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe0c4f7dd761330f1111ac62b99d23ef462e58aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:2b:e9:52:d7:c8:fc:56:42:9c:d8:19:fe:
b2:f3:54:33:f8:7d:28:77:02:12:1c:4f:75:6c:4b:
9b:ae:50:71:3a:aa:40:fa:48:de:90:d8:b9:23:cb:
47:cf:3a:0b:53:66:79:43:2b:68:54:30:0c:01:00:
9e:e3:9c:30:0d:2d:2c:c8:91:2c:72:37:73:21:ad:
a4:23:bb:d5:e5:26:e1:bf:10:5d:91:46:c1:4d:d2:
a4:bb:b6:32:62:d4:cb:66:14:b6:4b:85:04:5f:a0:
64:dd:a6:60:9b:3d:99:6d:18:ab:bf:cd:5a:36:b8:
05:a1:60:1d:1c:f1:07:9a:15:94:a1:94:0b:73:5d:
60:17:65:c3:59:46:32:94:41:0c:5e:4e:da:cf:e1:
2f:d5:3f:68:69:69:6d:b7:44:36:e2:20:d4:3a:0a:
56:a4:15:10:1d:e1:f9:c0:75:cd:9d:af:c5:76:fd:
85:7b:8a:b1:ef:1d:7f:80:23:fc:f0:09:65:63:09:
bf:68:b0:d8:1f:6e:e4:42:bf:78:9f:10:8c:34:02:
6e:4b:1b:a7:b6:ac:84:8c:32:ca:dd:6d:73:07:4e:
55:fe:48:03:e7:a7:c9:0c:2a:20:7f:db:bf:98:c7:
15:d0:1b:9b:b6:0d:ff:f3:87:f7:86:ed:cb:40:f0:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0C:4F:7D:D7:61:33:0F:11:11:AC:62:B9:9D:23:EF:46:2E:58:AA
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_gxPfddhMw8REaxiuZ0j70YuWKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.205.0/24
85.208.105.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:98:fb:59:e0:00:81:7d:64:a7:4a:79:5e:78:2c:3f:db:bc:
ff:e8:f3:a8:cb:4e:fa:b5:30:50:90:60:8f:7d:5f:c3:70:a5:
e1:49:94:c5:94:58:75:0e:95:6c:7e:77:63:02:59:81:36:fa:
fe:0d:e9:57:f3:c6:b1:e9:30:49:dc:1c:1c:7f:90:b3:72:38:
cd:35:62:5a:65:38:14:72:0b:2f:6e:a1:4c:ca:c1:38:14:66:
ef:22:57:14:3d:15:e1:7c:22:be:ee:bd:c1:e4:f8:7f:f7:45:
43:b1:1b:62:5c:76:0b:bd:74:65:ec:fc:81:9e:43:04:ba:a8:
08:1a:ce:f0:be:dd:c2:e8:40:64:e8:e6:68:55:05:5d:8e:a0:
2c:4a:8b:93:c3:f8:f0:fa:59:0e:2d:57:47:d2:82:dd:bf:ea:
d3:ed:de:ba:ee:ba:e5:69:2b:4f:0b:9b:77:b4:c8:3b:47:9f:
ec:33:cc:41:43:90:e6:8b:40:51:5a:f8:dd:3e:d4:a5:e9:af:
da:b3:56:8c:ee:0e:cf:d2:fd:d0:d1:00:0a:1b:42:d4:63:a1:
96:80:d0:83:20:75:8b:c6:3c:8c:5e:9d:26:40:03:ac:9b:95:
da:c5:4b:cf:91:7e:05:5b:c4:2c:ac:6a:08:32:e4:5d:52:d6:
5c:a7:2d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:47 2025 by rpki-client