Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/mqB5Rov-6dD1q0-4fFt8OcGs4-Y.roa
File: mqB5Rov-6dD1q0-4fFt8OcGs4-Y.roa (raw, json)
Hash identifier: IOoaant+DNma/DluGpSLvCvSYp28kemJHux2VVsy6Fw=
Subject key identifier: 9A:A0:79:46:8B:FE:E9:D0:F5:AB:4F:B8:7C:5B:7C:39:C1:AC:E3:E6
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019192B15CB8854BB94EC2A1ACD75041E575
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/mqB5Rov-6dD1q0-4fFt8OcGs4-Y.roa
Signing time: Tue 27 Aug 2024 07:16:22 +0000
ROA not before: Tue 27 Aug 2024 07:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.95.226.0/24 maxlen: 24
45.149.7.0/24 maxlen: 24
212.81.45.0/24 maxlen: 24
212.81.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 07:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:92:b1:5c:b8:85:4b:b9:4e:c2:a1:ac:d7:50:41:e5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Aug 27 07:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9aa079468bfee9d0f5ab4fb87c5b7c39c1ace3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:53:85:1d:f9:3b:74:b8:2e:c5:a1:74:ac:
b9:22:09:1b:c4:48:31:67:c8:bf:ee:dd:93:d3:c7:
a1:dd:6f:a4:36:be:48:d3:60:99:ac:b3:2e:96:b8:
0e:d8:39:c2:5c:11:56:77:c4:51:68:2d:34:48:e5:
0f:da:97:69:c2:05:c9:b4:60:c7:94:bb:71:0f:76:
9d:4a:13:9e:02:62:77:5f:1c:2e:3d:78:75:55:47:
4b:50:00:24:50:4a:6c:6d:d3:84:ab:f6:eb:fa:e8:
d4:09:a1:74:ae:98:59:38:3e:a4:7f:f8:22:b1:e3:
13:8f:5d:d5:3f:a0:9a:a8:40:a5:0a:2a:87:dc:fa:
43:9b:5e:bf:9a:ad:3e:f6:a0:e5:34:95:cd:b9:26:
46:21:4e:75:10:23:02:55:9f:48:8b:59:b7:49:70:
65:82:35:c2:15:d8:e7:40:65:27:d5:2d:58:31:8d:
c4:b7:ba:6f:1a:cd:88:a1:c6:94:ec:de:cc:ff:82:
c4:b4:5a:fd:c1:e6:cd:e0:52:ce:c8:97:de:0e:4e:
1b:c2:29:51:1a:ab:c3:d1:38:c2:06:ff:27:47:10:
2e:19:b7:58:aa:4f:00:bc:f5:66:76:ea:04:ac:69:
68:3b:08:5a:78:7f:fd:3b:4f:f1:4b:21:4a:3e:13:
de:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A0:79:46:8B:FE:E9:D0:F5:AB:4F:B8:7C:5B:7C:39:C1:AC:E3:E6
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/mqB5Rov-6dD1q0-4fFt8OcGs4-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.226.0/24
45.149.7.0/24
212.81.45.0/24
212.81.47.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:60:72:61:21:d3:3d:9b:5a:9f:36:db:73:20:c5:32:3d:1e:
3f:4d:39:3d:0a:df:28:37:bc:c6:99:3a:bb:85:29:c9:5d:11:
cc:e5:41:72:12:06:49:30:b4:6f:9d:aa:5f:c3:62:57:8b:79:
d1:a6:d4:53:c0:e2:a4:15:31:2e:b7:b5:f8:12:16:80:bc:60:
23:fe:6a:43:45:5c:0a:94:1e:0b:76:8a:f0:43:bc:8b:ce:76:
8a:c2:5a:c4:6c:61:af:30:10:8e:9d:de:42:75:4e:b6:19:eb:
97:e8:f3:a2:0b:02:0a:fa:aa:bd:58:3f:e6:bb:9c:a5:27:33:
74:86:73:50:ec:0b:35:8e:04:b1:c0:78:cb:27:ff:14:3a:22:
d3:a5:f3:c3:a5:7a:fb:7f:00:6b:81:f9:07:17:28:4b:11:9d:
e7:bc:f6:a4:e7:94:0f:7f:13:c3:e1:67:84:63:77:52:95:b2:
20:5f:38:0f:49:ac:bb:38:b8:d4:50:5a:4b:ef:fc:a3:ac:6f:
9b:08:ab:df:32:65:03:7b:62:79:a4:0f:10:9d:04:d0:f5:8a:
01:94:7e:44:8f:a6:a2:5c:40:f6:60:3f:12:d7:43:c9:2e:e4:
9d:a5:cf:ea:db:a6:d4:d0:1b:d3:1f:f7:a6:6e:a9:5e:30:35:
8d:22:57:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 08:34:02 2024 by rpki-client on console-ams.rpki-client.org