Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/EdS3Eu8Pu-b07k1qQ4KQqXl5N68.roa
File: EdS3Eu8Pu-b07k1qQ4KQqXl5N68.roa (raw, json)
Hash identifier: V2OjqIb3Qa79+XNwvxsVJZaZKQ9uKDAPnBuz9J6+sCA=
Subject key identifier: 11:D4:B7:12:EF:0F:BB:E6:F4:EE:4D:6A:43:82:90:A9:79:79:37:AF
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01919CFFEAC0192A5EC9D1EA3A244195F22C
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/EdS3Eu8Pu-b07k1qQ4KQqXl5N68.roa
Signing time: Thu 29 Aug 2024 07:18:23 +0000
ROA not before: Thu 29 Aug 2024 07:18:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.95.226.0/24 maxlen: 24
45.149.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Sep 2024 10:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9c:ff:ea:c0:19:2a:5e:c9:d1:ea:3a:24:41:95:f2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Aug 29 07:18:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11d4b712ef0fbbe6f4ee4d6a438290a9797937af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:43:27:4f:02:70:81:b9:6d:1d:5c:ba:c6:
59:2d:9d:15:ef:41:6d:fd:b2:14:d0:09:fd:98:d2:
86:e6:e3:16:c3:4b:17:b8:70:77:7e:57:48:1b:c1:
44:ed:dc:6f:0c:fc:b1:06:84:4c:8c:40:f8:37:4e:
99:7f:ed:95:d9:48:94:86:4a:a0:9e:2b:ea:dd:c6:
8f:52:fd:f1:85:11:8c:f5:b7:12:5c:0c:7a:22:70:
4f:44:54:f2:2b:b8:69:5b:ba:9e:0b:f6:2e:65:2d:
fb:c2:e1:38:1c:cf:e2:10:ce:4d:0a:19:0c:3d:90:
ad:dc:e8:0b:e4:c4:e0:0a:d1:ce:c2:d6:83:57:d8:
44:b5:a6:30:3d:15:84:3b:b9:9c:e0:ec:99:f2:3d:
f6:cb:78:88:2f:a2:c0:ce:d9:06:71:d9:8b:6d:c2:
5a:e0:8b:e0:7b:19:ff:c1:21:f8:94:a0:6e:84:69:
3e:2d:a0:0e:41:6d:1e:1b:d8:74:22:ed:3c:3e:0e:
25:63:ca:76:d5:95:2e:6d:61:ab:1c:1a:c3:a2:9d:
ab:6a:93:86:2c:07:bf:bc:de:ad:00:cb:e4:af:e1:
fe:78:3e:d0:82:e5:d1:b5:e3:49:ed:97:e9:fd:bb:
fe:22:45:a5:43:46:fc:ae:b5:0c:b6:2f:4b:35:80:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D4:B7:12:EF:0F:BB:E6:F4:EE:4D:6A:43:82:90:A9:79:79:37:AF
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/EdS3Eu8Pu-b07k1qQ4KQqXl5N68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.226.0/24
45.149.7.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:28:60:e4:54:89:6c:7a:19:c1:b7:29:4c:e7:8c:9a:4e:ce:
96:c2:ad:39:a3:80:23:a4:b7:74:91:2d:e8:8f:22:9a:e2:97:
5a:91:ad:c6:4d:be:06:33:3c:a8:83:d9:ff:46:56:d2:b3:12:
f0:2d:9f:02:e2:a3:c6:9b:58:94:12:dc:2b:d5:b3:de:7c:3e:
73:6a:d7:f9:f5:f9:9c:30:58:46:c6:65:ec:ea:b8:ec:44:55:
aa:28:d9:6c:ec:6e:c5:e3:cd:5d:2e:04:95:14:cc:25:4c:19:
65:70:28:65:78:94:d8:8b:ca:51:a4:cf:78:db:cf:83:94:b9:
75:d1:16:79:36:f0:c7:94:32:12:0c:f7:e2:c3:a4:ef:42:5f:
38:93:94:c5:a8:43:f2:75:2e:2a:f9:61:b1:b1:39:c2:fe:cf:
1c:fe:a8:71:a4:9e:db:65:68:04:56:4f:0f:cf:08:2b:e8:4f:
71:06:57:98:f7:cf:3b:ef:50:77:3e:c6:44:2b:c0:27:11:62:
69:c4:a2:37:84:40:e2:f4:1f:b8:72:d0:54:e2:af:65:b6:fd:
8a:c3:46:65:40:d3:48:c5:05:82:9a:9d:0e:87:6c:d9:7c:0f:
af:20:9a:2c:74:20:e1:01:61:b8:b7:4e:b1:32:19:a1:bf:d7:
3a:76:85:9a
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 8 12:45:38 2024 by rpki-client on console-ams.rpki-client.org