Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/IdJ8riLsd0Kj2O80LWZZt7Lkvn4.roa
File: IdJ8riLsd0Kj2O80LWZZt7Lkvn4.roa (raw, json)
Hash identifier: zDS58z4W5Jznkm80TWrfay076ZyySncjU7DuCbmIYnA=
Subject key identifier: 21:D2:7C:AE:22:EC:77:42:A3:D8:EF:34:2D:66:59:B7:B2:E4:BE:7E
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019266D998C55B058BBA957797E36B616C64
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/IdJ8riLsd0Kj2O80LWZZt7Lkvn4.roa
Signing time: Mon 07 Oct 2024 11:59:49 +0000
ROA not before: Mon 07 Oct 2024 11:59:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216234
IP address blocks: 45.9.74.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Oct 2024 16:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:d9:98:c5:5b:05:8b:ba:95:77:97:e3:6b:61:6c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Oct 7 11:59:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21d27cae22ec7742a3d8ef342d6659b7b2e4be7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7d:30:86:59:73:16:e8:8a:88:ee:dd:aa:4f:
0b:d2:64:6a:0a:d3:14:a4:b3:11:0e:65:d0:0c:d9:
86:67:55:90:6e:d2:32:9e:7a:ae:bb:09:60:94:ef:
08:23:1b:70:d2:85:c9:7f:47:f6:3b:5b:2d:25:bf:
3f:8d:d5:6f:e8:d3:f4:f1:aa:a7:50:94:35:d4:97:
7b:a0:24:c9:7d:de:01:8f:2d:06:86:89:78:5f:a8:
f7:4f:80:74:e1:86:86:70:48:00:fe:a2:48:25:2a:
cc:b4:0b:b7:a7:08:bd:d1:0e:56:3b:4f:ad:57:d9:
df:51:fe:5a:7d:d4:ba:15:2f:ae:ec:1e:ca:98:77:
62:ff:16:b3:29:79:4a:1c:15:4e:4a:1e:22:f3:3d:
3c:a9:c4:c7:a8:b0:18:9c:6f:4e:d8:74:10:05:7b:
f3:58:d9:e9:3b:1a:39:99:d3:69:fc:e7:06:c3:d8:
7e:e7:4a:63:b7:ec:36:5f:72:c0:95:6c:42:ef:63:
3d:0f:7f:a0:cd:d8:30:97:d0:45:7d:1c:30:2c:5c:
15:46:69:ed:30:af:50:8f:d2:ae:c0:bb:b7:38:6a:
34:ac:35:ff:29:e2:71:b9:ef:23:09:1b:ef:2d:13:
df:ff:fe:11:50:63:1b:6d:26:de:40:89:f2:fe:6f:
9c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D2:7C:AE:22:EC:77:42:A3:D8:EF:34:2D:66:59:B7:B2:E4:BE:7E
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/IdJ8riLsd0Kj2O80LWZZt7Lkvn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.74.0/24
193.109.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:95:7d:ce:f5:71:3c:e3:f3:6f:1f:2c:29:d9:ab:f3:3e:0d:
19:58:50:72:f5:58:4a:c7:c0:50:46:08:07:59:d2:c2:4f:20:
db:fe:62:3c:c6:40:e4:73:5f:9b:fb:8e:22:0b:1f:80:17:f6:
45:4f:6a:53:5a:9a:e9:72:62:d7:fd:2a:d7:6c:4b:10:d9:5d:
2f:4d:79:6e:51:5d:a4:8f:cb:42:96:82:81:d4:77:8a:82:77:
2e:f1:9d:0d:4c:2a:8c:39:6d:1e:fa:01:86:4d:8d:3d:4e:1b:
4f:f1:d4:4f:f9:a7:80:6d:f7:df:af:28:2a:6c:cd:2b:18:91:
2a:ab:3c:c3:90:a8:bc:fa:84:79:0c:41:8a:ec:16:0f:9e:98:
67:9e:2f:c1:3f:2a:a6:8a:d9:45:60:94:19:8a:77:27:b0:7f:
6b:03:9d:95:3c:93:c7:72:55:2c:aa:d6:c7:1c:79:53:07:5e:
e3:32:78:b3:dc:a7:67:bd:83:a7:d7:0c:8c:1e:c8:c0:b5:5b:
1c:de:d8:1c:96:43:02:ef:98:2a:53:15:6f:95:a1:43:60:92:
cf:6e:15:a8:25:0f:72:70:25:b7:b2:c3:30:d8:d3:21:a4:02:
70:57:f3:c0:50:77:32:f9:28:e2:aa:76:b1:3b:40:47:37:12:
0e:e9:a3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 18:06:43 2024 by rpki-client on console-fra.rpki-client.org