Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iZzf_TAn-0h_t6jlyEMymLsKvRY.roa
File: iZzf_TAn-0h_t6jlyEMymLsKvRY.roa (raw, json)
Hash identifier: NwQUfLL/TUrBjv18L2DRkdDlo89xnDQtdGBc9wLRxds=
Subject key identifier: 89:9C:DF:FD:30:27:FB:48:7F:B7:A8:E5:C8:43:32:98:BB:0A:BD:16
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018F9587A16F1119E0446A7DC20D521A3669
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iZzf_TAn-0h_t6jlyEMymLsKvRY.roa
Signing time: Mon 20 May 2024 10:24:04 +0000
ROA not before: Mon 20 May 2024 10:24:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 45.8.195.0/24 maxlen: 24
45.8.197.0/24 maxlen: 24
45.8.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 16:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:87:a1:6f:11:19:e0:44:6a:7d:c2:0d:52:1a:36:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 20 10:24:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=899cdffd3027fb487fb7a8e5c8433298bb0abd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ed:26:ca:77:3f:20:ec:35:d4:32:15:90:b0:
c2:19:6d:c7:a1:7e:09:d6:3a:0d:1a:cf:d7:dc:9e:
9d:2e:fc:5b:2a:f3:32:8d:aa:65:87:c8:73:ca:04:
70:44:6d:1f:86:ce:3b:50:2f:5b:f5:5a:ce:0d:ae:
bd:2e:25:55:48:5d:68:1b:35:27:a9:8e:35:74:6b:
cd:28:4b:b1:a1:44:1e:f0:aa:1d:be:cb:5a:91:50:
35:9c:5d:2f:05:bb:5d:94:b7:78:10:d3:e8:4a:42:
97:19:75:21:f2:48:c7:93:e0:15:9d:ff:ea:44:10:
e1:a7:3d:0e:ea:9a:30:cf:2a:7b:f2:73:27:ff:22:
d8:2e:35:96:c4:22:f4:9d:68:21:4a:53:6e:a9:47:
bc:8e:8d:48:d0:dc:42:8e:56:0e:67:75:bd:00:ef:
0b:32:c7:d9:c4:55:52:9c:41:20:d5:8e:9b:bb:c6:
c2:ea:18:02:1a:20:ab:ba:b5:7d:b9:b4:34:24:81:
46:37:19:30:ab:a0:62:66:37:55:10:63:11:6b:2a:
e1:dc:a3:74:50:2d:25:64:4a:6d:8f:a1:95:88:84:
db:cb:80:9d:52:c5:86:46:d1:7c:dd:d3:4a:bf:7b:
71:7c:1e:7c:81:a5:bd:d3:63:63:9e:2a:40:f8:e0:
58:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9C:DF:FD:30:27:FB:48:7F:B7:A8:E5:C8:43:32:98:BB:0A:BD:16
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iZzf_TAn-0h_t6jlyEMymLsKvRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.195.0/24
45.8.197.0-45.8.198.255
Signature Algorithm: sha256WithRSAEncryption
22:ce:35:20:eb:00:5e:e0:b3:0b:93:16:7f:01:97:21:69:26:
7f:a1:fe:af:68:ff:94:7c:cf:6b:20:a1:0e:e0:2e:9a:1f:cf:
d9:73:9a:6b:22:3a:7a:f3:49:70:52:ab:22:fe:46:28:be:fc:
aa:4b:a5:a9:7f:e7:f2:b5:53:cf:44:9a:cf:ee:19:bc:90:f8:
15:00:eb:1d:47:bb:5d:b2:80:37:b9:dc:77:24:03:7a:55:28:
81:d3:0a:4b:40:0d:93:f3:c9:3a:5c:d1:5d:77:fe:e5:3a:1b:
7c:8e:67:5f:05:2f:5d:f4:7f:34:ae:69:3d:c3:94:bb:e5:da:
5a:bd:2e:18:e5:4e:73:10:45:44:3a:a4:30:3a:9a:3e:01:52:
c7:67:21:7a:e4:41:1d:f9:df:3f:cd:8e:dc:ff:88:c7:a3:00:
10:ff:59:9d:e5:65:e6:9f:61:6f:c8:63:94:78:1d:dd:fd:ac:
77:f9:b8:f0:d8:1e:66:78:ed:5d:84:d6:b1:8e:c3:ae:44:eb:
42:9f:7b:a9:99:27:0f:5f:81:91:32:91:e9:7d:e0:21:1b:c2:
2a:d9:ae:5b:18:8d:41:77:d1:0c:0a:ea:00:82:ce:47:bb:bd:
11:f2:5c:86:bd:01:ad:da:3a:49:c2:d8:73:8c:66:ff:b0:45:
04:83:fe:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:11 2025 by rpki-client