Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RkK70mzwylZ4IhsPl4IgrHV6WjM.roa
File: RkK70mzwylZ4IhsPl4IgrHV6WjM.roa (raw, json)
Hash identifier: yACVe8AuF5/C0tedV3fswejAbuXftxc9Kh510mxuKbk=
Subject key identifier: 46:42:BB:D2:6C:F0:CA:56:78:22:1B:0F:97:82:20:AC:75:7A:5A:33
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D645E95ECAFA84214DD146E60A517997B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RkK70mzwylZ4IhsPl4IgrHV6WjM.roa
Signing time: Thu 01 Feb 2024 11:12:16 +0000
ROA not before: Thu 01 Feb 2024 11:12:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 14:05:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:5e:95:ec:af:a8:42:14:dd:14:6e:60:a5:17:99:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 1 11:12:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4642bbd26cf0ca5678221b0f978220ac757a5a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:7e:61:4c:96:8c:e0:1d:79:85:1b:45:72:
4d:e6:01:60:1e:1c:51:1e:ff:d7:f4:9f:87:61:5e:
91:30:fc:dd:4a:b0:eb:b0:b4:ab:4a:bc:4c:b5:ca:
b4:dc:6d:0e:6b:7f:c8:95:ed:ae:bb:10:7c:f7:35:
82:e4:5e:45:3f:8d:96:05:30:e4:05:d1:97:ac:b8:
c7:f0:a5:15:71:38:3b:92:d2:12:c3:b2:8b:5a:03:
61:c0:93:a5:fd:64:24:ab:04:d7:c9:41:3f:db:85:
5f:b2:8c:8f:d9:a0:35:53:e1:26:61:d9:1b:c3:b0:
12:94:51:a3:f4:7c:50:64:d8:65:48:3e:8c:58:0b:
67:25:da:be:41:a2:ad:df:4d:46:bf:87:34:23:05:
47:e6:f7:0c:97:c9:16:f9:1b:82:95:22:14:91:c4:
2a:91:12:24:fb:61:62:0b:c0:4f:3e:86:00:9b:44:
4f:23:dd:9a:ec:f1:c2:62:e0:ab:e7:87:e1:2e:fb:
5f:04:68:aa:6f:93:5f:d4:ce:4d:16:f7:fe:b2:63:
70:58:66:8c:1e:cd:11:b7:d0:c0:8e:82:c7:0c:29:
a1:c1:31:2b:fb:52:9b:95:28:60:fb:f7:52:f5:fb:
d4:49:eb:32:c6:de:7a:c1:80:9d:44:6c:eb:e2:c2:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:42:BB:D2:6C:F0:CA:56:78:22:1B:0F:97:82:20:AC:75:7A:5A:33
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RkK70mzwylZ4IhsPl4IgrHV6WjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.90.0/23
Signature Algorithm: sha256WithRSAEncryption
79:d4:4b:f7:1e:97:98:e6:30:f3:c7:c7:15:b1:a0:2e:71:03:
c9:88:a2:bb:ca:60:f9:36:c8:26:78:e2:0d:87:cd:26:2b:fa:
7c:98:52:a2:77:d5:37:e2:bd:8b:00:4b:43:90:1d:d1:ca:f9:
1b:26:98:12:51:2b:d5:d5:fb:47:99:fb:b6:32:6c:cf:53:6d:
8c:5a:00:01:58:dd:67:60:4e:9a:53:da:d2:f3:b0:23:39:3b:
3e:98:18:53:40:5a:01:9f:ce:d9:f4:0f:ce:52:76:00:ee:2d:
a1:74:11:c0:23:9e:15:29:bf:1d:f6:b1:3e:e3:7b:cb:93:17:
18:29:77:1b:59:49:c5:ac:42:9c:50:08:a0:03:d4:58:b0:30:
3d:a7:08:04:5c:45:d3:9f:bc:11:ed:27:4b:8f:b6:de:09:fa:
e0:b5:f5:46:6c:f0:42:84:57:13:8a:99:3a:58:0e:14:14:d7:
51:15:e2:a1:7c:07:b0:bd:13:9a:59:de:b0:de:48:b6:29:c9:
d0:58:eb:44:47:e2:3b:38:7f:0a:78:9c:95:97:20:4e:f5:21:
f2:57:67:34:a7:52:9c:db:1d:4b:c4:f2:df:12:0d:60:2d:17:
58:fc:55:2d:87:4a:c4:83:6c:6f:f7:b6:62:71:33:60:3b:37:
4d:5f:0f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 19:24:27 2024 by rpki-client on console-fra.rpki-client.org