Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/ZGmuR6oCgIyebHUx1thjIecL_rI.roa
File: ZGmuR6oCgIyebHUx1thjIecL_rI.roa (raw, json)
Hash identifier: 8RcHYTZeHpg6OqGVYGb0JM4aLSH7nxNuA+Gl4TTdwVM=
Subject key identifier: 64:69:AE:47:AA:02:80:8C:9E:6C:75:31:D6:D8:63:21:E7:0B:FE:B2
Certificate issuer: /CN=b814345affd1506af9af32ec0d77399b7664aa3f
Certificate serial: 01929AAC02567D65A2E3F23EF2E0C99BF860
Authority key identifier: B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/ZGmuR6oCgIyebHUx1thjIecL_rI.roa
Signing time: Thu 17 Oct 2024 13:30:16 +0000
ROA not before: Thu 17 Oct 2024 13:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197641
IP address blocks: 45.144.104.0/22 maxlen: 24
45.144.105.0/24 maxlen: 24
2a0e:ec40::/29 maxlen: 32
2a0e:ec41::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 18 Oct 2024 11:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:ac:02:56:7d:65:a2:e3:f2:3e:f2:e0:c9:9b:f8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b814345affd1506af9af32ec0d77399b7664aa3f
Validity
Not Before: Oct 17 13:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6469ae47aa02808c9e6c7531d6d86321e70bfeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:78:33:78:fa:81:2b:23:24:f9:ff:17:ec:
d3:fa:bc:24:ba:4e:3b:14:3f:94:7a:2b:8b:60:66:
9b:fc:2e:eb:38:96:65:89:23:f3:cf:8c:aa:1b:eb:
9f:c5:92:36:c4:41:58:52:e7:e0:b5:90:c1:8e:98:
30:ab:91:10:bb:5f:9e:87:05:21:80:eb:4b:f1:d9:
1d:b6:82:4f:0d:55:d8:c5:05:b4:22:bc:e3:8a:b2:
69:56:e3:79:1a:fe:a2:e8:b2:3d:af:c4:f7:1c:0f:
39:6d:da:18:90:99:ef:7c:e9:a6:9b:7c:1e:66:2b:
32:31:15:43:a6:b1:73:03:b3:c2:8f:8d:e9:2d:a0:
98:94:43:75:ae:b2:12:96:e1:a4:da:b5:d0:60:e3:
db:50:9c:04:f1:1c:6b:5c:20:4c:6a:b9:78:cd:c2:
2f:65:1b:0a:5b:8c:3e:03:e2:a5:b8:43:6c:47:ae:
43:08:e9:f8:4d:15:0d:ad:a2:3c:ba:db:cf:b2:0a:
4f:f5:75:12:22:4e:76:bb:c6:27:48:48:74:5b:97:
a1:50:f3:6b:ff:bf:90:77:2e:b3:2b:2a:c5:9c:fe:
51:b5:61:a3:87:82:cb:b8:c7:76:e2:08:29:18:c4:
2b:e0:04:37:f4:df:8d:64:4b:88:ef:8c:41:ab:04:
52:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:69:AE:47:AA:02:80:8C:9E:6C:75:31:D6:D8:63:21:E7:0B:FE:B2
X509v3 Authority Key Identifier:
keyid:B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/ZGmuR6oCgIyebHUx1thjIecL_rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.104.0/22
IPv6:
2a0e:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
21:df:22:fe:67:78:6a:da:f8:8a:a1:b7:81:6c:20:d4:3d:56:
5b:b2:bf:a1:e8:0b:62:c4:4a:4f:2c:2d:c7:af:a4:06:cc:16:
3e:44:81:4b:c2:42:23:c0:e4:0f:c6:2c:da:1b:21:8f:65:ed:
fb:41:3a:a4:59:14:58:6a:0e:82:e5:39:92:db:a8:dc:db:b8:
ff:22:ab:bf:e1:44:eb:5b:68:a3:52:45:f4:c2:fe:55:97:0e:
1d:43:70:0c:bf:d6:ee:e2:07:ba:74:20:1b:8f:b9:4d:4d:19:
a4:82:42:1b:9e:3a:d7:12:2c:fb:08:8b:fd:db:91:a3:e1:45:
44:9c:03:8c:c6:7a:31:50:e1:98:40:b6:c3:f1:71:44:e9:04:
8b:83:ad:b4:0c:bc:e3:ef:0a:55:90:90:98:fb:f0:fe:ed:c6:
b0:14:27:3a:27:89:66:f3:b3:f5:b4:f4:5e:00:43:2f:81:2d:
e4:da:87:47:cf:c5:30:e2:f0:34:06:6e:7c:83:63:48:82:9b:
62:ad:2a:11:79:df:60:b8:33:9e:79:3d:7e:20:6f:03:b5:d3:
8e:99:bb:e6:c6:c6:78:80:e2:7a:78:59:8e:5b:e6:d2:e3:5d:
ec:09:b1:b0:f4:1d:e8:c3:1d:cd:c0:1f:6f:f8:4f:a3:64:6e:
6e:ea:dc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 13:32:51 2024 by rpki-client on console-ams.rpki-client.org