Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/FPeq9CQqVBzhAGUBUQvuOsS2e78.roa
File: FPeq9CQqVBzhAGUBUQvuOsS2e78.roa (raw, json)
Hash identifier: p9bifEvWtZCrlpgT+RTuJxJGqS5G/EgNrPHRcMQibcw=
Subject key identifier: 14:F7:AA:F4:24:2A:54:1C:E1:00:65:01:51:0B:EE:3A:C4:B6:7B:BF
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0191E50F44A5A5E9D0A5F2F4906AD62B28DB
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/FPeq9CQqVBzhAGUBUQvuOsS2e78.roa
Signing time: Thu 12 Sep 2024 07:07:48 +0000
ROA not before: Thu 12 Sep 2024 07:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 45.141.234.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 07:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:0f:44:a5:a5:e9:d0:a5:f2:f4:90:6a:d6:2b:28:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Sep 12 07:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14f7aaf4242a541ce1006501510bee3ac4b67bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e8:f6:1c:7c:4c:2a:8d:84:50:1b:17:34:40:
ab:08:f5:ad:21:1f:b6:c0:30:e3:43:cc:38:d1:11:
9e:a8:98:aa:86:33:46:5c:9f:91:a8:93:20:a1:8a:
52:61:10:29:ec:fd:ab:37:d6:3c:be:49:f7:bc:7e:
72:c7:1a:31:38:c6:e0:d1:13:e7:b5:c1:94:8c:43:
49:8f:8e:b5:80:3f:16:30:76:47:19:6f:06:87:d7:
25:92:2c:a0:0c:6b:99:95:60:99:bc:06:7e:42:d8:
59:35:a3:27:a2:e3:66:8f:e8:31:8f:6e:f7:3c:09:
3b:66:46:76:0f:c3:88:61:c0:c7:54:cc:17:f4:70:
a5:55:6c:4f:7b:7e:2d:d5:6c:9e:74:53:db:e9:2a:
a4:4c:9e:21:da:13:cc:0c:f7:75:da:2c:0d:25:f5:
74:7c:97:cd:31:d0:de:1a:b6:65:24:14:ce:25:e3:
97:f9:4f:fa:82:dc:60:67:2d:64:91:78:86:3b:46:
1c:56:5c:3a:aa:5d:d5:7c:c5:d1:fd:50:2c:9e:25:
de:db:dc:23:aa:22:e2:72:90:92:f5:11:05:21:0d:
5d:20:2e:a3:57:44:e8:6e:8a:bb:e2:e5:a0:01:8b:
dc:3d:c4:71:f2:66:00:f7:1d:cc:9b:5f:d6:21:a3:
5a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F7:AA:F4:24:2A:54:1C:E1:00:65:01:51:0B:EE:3A:C4:B6:7B:BF
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/FPeq9CQqVBzhAGUBUQvuOsS2e78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.234.0/24
91.92.40.0/24
91.92.42.0/23
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
22:9c:be:79:c6:af:02:c6:30:c1:1d:3b:fa:b0:fb:cc:64:f9:
b4:1f:33:07:4a:62:94:9e:9c:93:7e:b8:33:59:79:44:b5:50:
13:81:f3:04:11:a8:8a:00:98:58:33:94:e5:d7:a3:75:80:7a:
4c:e4:76:57:09:21:e8:a7:3e:fb:4b:7b:bb:8f:ca:68:e7:df:
ae:50:2e:f4:e2:e8:b2:e6:ae:0b:28:82:5e:5a:10:dd:8a:c3:
52:7d:30:c8:43:88:79:ab:ea:77:0d:f3:52:b8:1c:56:59:fe:
b4:a9:cf:fd:3f:99:b1:5a:a0:e4:5c:22:58:f8:97:ec:e6:ec:
ad:b2:d2:bc:13:ca:4a:bf:f3:d5:15:a4:37:0e:e2:b4:10:66:
f5:e8:01:3f:cc:74:09:5a:cc:32:4b:26:d8:88:e1:76:05:10:
4f:02:60:ba:e8:8c:2f:11:8f:22:2c:d2:52:85:53:7e:63:c5:
90:67:50:97:09:33:52:9a:9b:b6:a6:c3:e7:12:a2:6f:0e:1c:
e9:b7:e6:40:23:78:da:98:13:af:3f:53:fc:93:92:b6:43:14:
5d:00:eb:a2:18:76:10:93:f9:2e:0a:ac:65:15:b3:cd:2c:1a:
06:5b:e1:f0:da:91:1d:09:d0:10:3d:5c:bd:07:59:bd:74:1f:
1d:70:1c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 09:19:46 2024 by rpki-client on console-ams.rpki-client.org