Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/g18Sc4VpmaVFez8wreX3Ce79b8w.roa
File: g18Sc4VpmaVFez8wreX3Ce79b8w.roa (raw, json)
Hash identifier: yrRkOgggm3lM07vaY/lkxq5hEVpttXDq+Kg9MiNnRWQ=
Subject key identifier: 83:5F:12:73:85:69:99:A5:45:7B:3F:30:AD:E5:F7:09:EE:FD:6F:CC
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01913CA9769262C5EDBB5502B6B4A2EAF215
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/g18Sc4VpmaVFez8wreX3Ce79b8w.roa
Signing time: Sat 10 Aug 2024 14:20:24 +0000
ROA not before: Sat 10 Aug 2024 14:20:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 45.11.187.0/24 maxlen: 24
2a05:9080:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 11 Aug 2024 14:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3c:a9:76:92:62:c5:ed:bb:55:02:b6:b4:a2:ea:f2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 10 14:20:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=835f1273856999a5457b3f30ade5f709eefd6fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:95:ef:e6:7f:4b:04:f1:93:ad:fe:e2:77:
1a:bc:ba:3e:2a:e4:7e:19:bd:62:e3:6b:71:fe:8f:
d8:39:55:3d:77:96:75:40:97:88:cb:3a:fb:39:c6:
1c:88:e3:f3:03:28:a0:17:22:cc:b8:12:16:1e:75:
07:37:28:d1:fb:3a:c8:10:2e:a1:0d:57:fc:53:59:
7f:8c:e3:90:f2:16:dd:b3:1a:f4:7e:94:a4:87:33:
9c:b4:4a:a1:f6:f9:93:82:01:d2:48:65:68:dc:e5:
d7:10:d5:7b:52:97:35:11:65:c7:b0:e7:ca:87:27:
a0:71:7a:cd:08:b9:ef:b0:ce:ee:09:2c:de:bf:18:
62:c3:cf:71:16:97:c4:1f:67:ca:78:7f:d5:07:cc:
c1:0c:1b:0a:8c:4d:c9:98:a7:06:35:b4:98:5b:32:
f5:16:68:a0:86:30:66:6b:4b:42:9c:5e:3a:79:c4:
31:99:e8:b3:49:72:52:6e:85:e9:d2:c0:4d:17:20:
08:d8:9b:35:22:31:74:7a:09:72:f9:bf:a9:f8:52:
f1:1a:25:3e:04:01:a1:00:26:26:99:90:57:61:ac:
4e:05:c2:bc:26:69:49:01:54:7a:06:cf:9d:62:7a:
dd:97:06:8e:27:39:cb:58:1e:b6:1e:94:76:d6:14:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5F:12:73:85:69:99:A5:45:7B:3F:30:AD:E5:F7:09:EE:FD:6F:CC
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/g18Sc4VpmaVFez8wreX3Ce79b8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.187.0/24
IPv6:
2a05:9080:6::/48
Signature Algorithm: sha256WithRSAEncryption
41:0d:a9:2d:49:f8:8f:93:29:2f:b3:23:4e:e9:01:2b:fc:43:
50:cb:90:da:67:d8:8d:c4:8e:c1:e5:43:81:b2:03:87:d1:6a:
c6:c3:a4:39:9b:8d:59:90:41:49:1f:b6:48:4b:87:aa:f5:64:
10:d1:d8:c0:e1:1d:c7:30:d9:60:c5:e4:df:2c:c8:23:a7:41:
67:30:fa:3b:0f:1c:76:78:eb:75:bb:c9:a3:be:5a:4d:44:c2:
45:7e:21:aa:b4:ae:fc:2c:86:68:e8:f1:f1:f3:27:98:a5:fc:
c9:00:39:ac:72:64:bf:86:18:30:53:14:70:d0:35:a7:57:0e:
81:4d:6f:cd:47:f4:26:7d:b8:6f:df:34:f4:06:61:31:6f:21:
ac:77:3f:fd:e9:89:6f:63:b6:b4:0d:e3:b9:7a:18:e4:96:7e:
6b:8c:a3:70:70:1d:06:cd:35:26:e7:d9:e9:3b:73:7d:30:60:
ae:62:2a:e7:55:38:cb:66:44:ad:0b:0e:16:e8:69:50:ed:b3:
3b:a9:f1:66:89:d7:6e:47:b8:03:9a:b4:6b:e6:7d:df:a8:60:
e0:66:af:df:13:87:c9:08:88:a6:a9:2f:09:a9:6b:1f:05:e2:
3c:b1:26:bd:f3:de:ad:12:92:37:1a:c0:f3:47:26:a8:7b:02:
69:13:a6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 17:36:01 2024 by rpki-client on console-ams.rpki-client.org