Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/n9oPi6G_nTY9P0JW2Gg_Upgg0HU.roa
File: n9oPi6G_nTY9P0JW2Gg_Upgg0HU.roa (raw, json)
Hash identifier: LDox3tfKA4Ozc8y1u/FPPzbu64M+q5tIkp5Mkr5zUDM=
Subject key identifier: 9F:DA:0F:8B:A1:BF:9D:36:3D:3F:42:56:D8:68:3F:52:98:20:D0:75
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 018AB62DEC58C3DFC652019685BA1CFC3E92
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/n9oPi6G_nTY9P0JW2Gg_Upgg0HU.roa
Signing time: Thu 21 Sep 2023 05:19:37 +0000
ROA not before: Thu 21 Sep 2023 05:19:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3249
IP address blocks: 45.139.107.0/24 maxlen: 24
2a13:cec0::/48 maxlen: 48
2a13:cec1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:2d:ec:58:c3:df:c6:52:01:96:85:ba:1c:fc:3e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Sep 21 05:19:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fda0f8ba1bf9d363d3f4256d8683f529820d075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:61:df:f3:b0:ab:4a:ce:19:3b:1e:89:c2:70:
60:84:ba:09:90:2b:41:11:a9:24:86:f4:37:ab:af:
15:b9:eb:04:a7:14:26:aa:68:15:72:4c:74:5b:97:
32:11:3f:50:2a:0b:d8:02:58:15:a0:b1:40:be:d1:
29:c8:17:8a:bd:19:df:16:97:18:8c:33:50:b3:58:
1e:20:74:d3:2e:d0:8b:c2:49:38:75:6d:2f:bb:8b:
72:f8:77:e5:f5:32:b6:5e:2a:c8:a9:96:79:94:e9:
17:4a:40:13:3b:a5:fb:3e:0b:93:b8:56:d1:a8:e1:
38:44:4d:c5:ce:40:5e:4b:ba:61:f1:ef:4c:6a:d9:
29:02:ae:0b:be:b6:49:7d:9e:4a:08:10:54:77:2e:
cf:98:0e:f5:ab:66:70:c8:1c:8a:00:31:1e:54:63:
ea:27:31:f1:99:31:f3:e0:03:ef:d2:dc:f8:d8:e6:
e5:1d:7e:50:9c:7e:dd:dd:08:1c:e8:a4:b0:c4:1d:
3c:13:f8:36:d4:d0:15:69:bf:89:48:06:69:f4:2f:
65:14:be:cc:6f:17:63:c1:b6:61:c3:61:c5:1b:74:
e5:00:67:90:12:38:c3:76:75:eb:18:9c:f5:47:36:
39:25:7c:c8:9b:ca:34:ee:2e:32:07:65:7b:c9:92:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DA:0F:8B:A1:BF:9D:36:3D:3F:42:56:D8:68:3F:52:98:20:D0:75
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/n9oPi6G_nTY9P0JW2Gg_Upgg0HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.107.0/24
IPv6:
2a13:cec0::/48
2a13:cec1::/48
Signature Algorithm: sha256WithRSAEncryption
be:dd:07:53:0b:70:d5:7b:42:5d:08:de:87:a2:e9:af:70:fa:
8d:92:9b:71:26:cc:23:ac:00:85:b6:40:8a:25:3b:04:f7:89:
9f:60:a5:ea:60:27:62:7c:4c:b6:a0:fb:a4:77:b9:67:9f:77:
ad:d8:20:63:df:5b:ab:d9:08:16:10:e1:89:5b:0d:d3:0f:f5:
c5:c0:06:50:5d:f3:71:ee:2c:c6:e5:bc:d2:82:b5:d0:60:9e:
84:78:b4:1f:59:eb:5c:e4:21:7b:2b:bb:0e:2d:cf:95:9a:2f:
d2:37:23:2d:79:6a:74:78:a3:70:fc:0e:d3:09:90:f5:90:04:
ac:a3:a1:61:e0:92:a9:a9:a7:a8:22:e1:f4:8d:53:ba:b1:54:
50:cd:f5:c8:29:08:b3:ff:2c:07:d5:02:dc:84:99:b2:53:44:
9c:71:2e:f9:9a:00:37:de:e7:28:46:61:23:0e:0a:81:fc:ca:
e6:99:b6:72:59:ee:28:f1:b9:40:2c:66:9b:47:d3:5a:a2:f9:
6a:f3:56:f0:2a:5b:60:25:32:7f:9e:60:df:46:da:63:84:4c:
3b:58:59:10:d4:91:3e:36:c9:c3:b0:2f:46:ec:3d:fc:b8:ea:
fb:fe:24:b1:ca:84:e6:cb:eb:e1:18:1f:0a:b1:b9:eb:8b:36:
4b:8a:a8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:05 2024 by rpki-client on console-fra.rpki-client.org