Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/i8C_hQOLZPy3j7-l0JyD6pO1Xfg.roa
File: i8C_hQOLZPy3j7-l0JyD6pO1Xfg.roa (raw, json)
Hash identifier: aVmr8D8Z+jjFJC++1qocqJOrpaPShr4CeUgjs0hRun8=
Subject key identifier: 8B:C0:BF:85:03:8B:64:FC:B7:8F:BF:A5:D0:9C:83:EA:93:B5:5D:F8
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019256A640A41192181E85D7C4B66036822E
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/i8C_hQOLZPy3j7-l0JyD6pO1Xfg.roa
Signing time: Fri 04 Oct 2024 08:29:48 +0000
ROA not before: Fri 04 Oct 2024 08:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.95.226.0/24 maxlen: 24
45.149.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 12:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:a6:40:a4:11:92:18:1e:85:d7:c4:b6:60:36:82:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Oct 4 08:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bc0bf85038b64fcb78fbfa5d09c83ea93b55df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:74:82:d9:6b:9d:25:ce:67:6c:f8:bc:59:a2:
a3:0e:55:e0:ef:87:74:8b:43:44:23:a4:16:89:0c:
e7:d0:15:62:d7:42:91:c5:82:93:6a:28:d7:0f:4c:
20:8f:d6:f9:1b:14:e6:af:36:ec:20:a1:16:78:e8:
a1:91:ea:2d:fc:43:38:1c:81:ee:95:cd:e9:9c:cb:
86:f4:d7:b0:98:64:b4:ac:a7:5a:f7:e5:a9:5f:b6:
5e:d9:d7:47:56:7e:96:44:60:e9:fd:d3:8a:56:c3:
5c:05:7c:59:4b:93:5d:77:b1:22:b3:32:e7:26:ac:
9d:b7:59:dd:06:2b:35:8d:83:cd:53:77:86:db:e1:
35:63:1e:08:c2:a8:9f:f7:09:4f:6a:17:6e:d8:21:
66:d2:59:ed:d6:d3:86:91:75:79:2c:2a:76:a9:31:
3a:95:d4:73:40:8f:f9:f0:58:ca:d7:16:0c:54:9b:
bb:6c:70:fa:fa:c8:27:4c:b4:4f:c8:8a:0d:b1:e9:
81:2f:43:c3:1d:d4:12:41:7a:a0:1d:4c:28:28:bf:
f4:ef:89:04:be:29:70:ec:ce:6d:83:26:27:1d:f2:
d8:f9:8a:57:d3:78:61:63:55:3b:f0:db:9a:54:fd:
86:27:66:8e:90:9f:b3:7b:10:c0:f0:be:56:cd:82:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C0:BF:85:03:8B:64:FC:B7:8F:BF:A5:D0:9C:83:EA:93:B5:5D:F8
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/i8C_hQOLZPy3j7-l0JyD6pO1Xfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.226.0/24
45.149.7.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e6:80:f7:5e:f4:e1:15:7e:cb:73:ac:30:4a:a8:0c:ad:d3:
32:c2:5c:c5:c7:02:48:95:63:7d:5b:6c:f1:36:99:77:6a:13:
1c:0b:1c:2c:29:b4:f0:11:7b:f1:fe:75:30:0d:73:ca:98:6e:
4b:b6:37:5b:96:18:9d:74:19:10:ba:4c:e2:96:e9:b0:19:40:
7b:bc:08:06:3b:75:e0:99:4a:61:89:ec:44:3a:6d:69:05:8d:
d4:c2:cd:b0:8a:40:22:ef:c4:fb:1b:27:d2:81:a4:bd:a6:7e:
48:38:03:7e:7a:2c:0c:5b:6f:83:c8:28:9f:6e:e8:10:85:ae:
38:de:09:30:a0:b4:14:d1:2c:92:65:4f:5c:16:6f:6f:c5:49:
01:ff:03:cb:ed:48:e4:4e:c3:73:7c:d9:95:40:55:bf:3b:56:
1b:60:4a:4c:51:07:b5:ff:df:39:77:05:16:49:3e:f0:6a:7e:
88:ce:38:e7:40:fa:f6:eb:83:f8:4a:7c:84:f1:c1:59:63:fd:
7b:d7:0c:c4:5c:0d:5e:da:6e:5e:34:0d:19:e3:a9:50:25:48:
6b:18:79:30:76:01:e8:af:58:74:3c:15:d0:a7:ca:aa:42:b4:
b8:2b:6a:0e:6b:c5:12:e4:ff:41:67:d5:77:da:d6:07:23:e4:
d6:a0:55:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 17:29:47 2024 by rpki-client on console-ams.rpki-client.org