Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Iq648DJYm-THMgfdi2FT_B4e9Jc.roa
File: Iq648DJYm-THMgfdi2FT_B4e9Jc.roa (raw, json)
Hash identifier: WgEmPQowJGzFEk/3b2+rP1Dffro4uoDt2y+Vml+88Zg=
Subject key identifier: 22:AE:B8:F0:32:58:9B:E4:C7:32:07:DD:8B:61:53:FC:1E:1E:F4:97
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0185D14C53C62380077916687B35C30C0295
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Iq648DJYm-THMgfdi2FT_B4e9Jc.roa
Signing time: Fri 20 Jan 2023 22:28:38 +0000
ROA not before: Fri 20 Jan 2023 22:28:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 45.151.2.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Apr 2023 10:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d1:4c:53:c6:23:80:07:79:16:68:7b:35:c3:0c:02:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 20 22:28:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22aeb8f032589be4c73207dd8b6153fc1e1ef497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:ea:ea:ee:ea:7a:26:3e:ed:9f:23:74:3b:
5a:84:54:0d:9f:13:45:70:21:e6:b3:e0:52:18:dc:
52:b0:ac:23:f4:6d:21:b0:6a:53:5c:e9:cd:22:13:
b1:d0:5b:23:8e:b7:ea:bc:a0:7d:19:53:92:59:ea:
e0:98:03:22:4a:cc:2d:4a:63:90:bc:aa:28:26:a5:
1f:4b:35:c0:86:ea:42:cc:d4:6e:49:84:3b:d9:95:
a5:7d:6a:91:c2:4d:2c:8f:aa:72:25:08:3c:b7:f2:
e8:b1:13:06:ce:e8:d8:be:95:95:03:b0:48:78:63:
d8:f7:ee:53:cc:17:35:38:21:c6:c3:ec:1d:a4:64:
49:1b:e5:57:fa:06:93:53:51:92:a9:38:b0:80:45:
8b:3e:f9:39:b7:db:eb:16:e9:8b:88:f5:33:0b:f5:
43:57:31:40:6e:f5:ba:1a:1a:10:7e:1e:15:57:86:
af:90:88:c3:9d:62:4d:77:58:08:a4:ef:01:b6:9e:
62:45:6e:1b:36:32:bb:68:82:32:52:a1:06:5b:36:
b7:d9:66:47:92:5b:5d:b0:4c:f3:77:f1:55:b8:cb:
a8:44:cc:35:e0:07:d4:87:d0:d5:ac:27:9e:f1:b6:
71:f9:0c:44:fc:89:42:1f:65:45:30:e3:fd:52:79:
a5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AE:B8:F0:32:58:9B:E4:C7:32:07:DD:8B:61:53:FC:1E:1E:F4:97
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Iq648DJYm-THMgfdi2FT_B4e9Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.214.0/24
45.151.2.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b7:1f:ab:70:20:7f:7d:94:b9:6a:6c:da:04:29:75:81:40:
77:b9:07:68:ce:7c:9b:99:36:50:b4:6a:11:78:be:02:18:cb:
35:63:47:6e:4e:6c:58:88:cd:e8:6e:ee:45:d7:64:eb:49:b3:
76:3a:16:7f:5b:00:37:89:b1:08:d1:58:fd:6d:57:43:b6:9a:
3d:73:13:98:85:b1:57:f3:08:32:b0:28:10:1a:d2:3d:78:13:
f3:36:c8:66:5a:84:62:df:29:3d:43:12:6c:57:f9:7f:12:69:
e1:94:f3:23:45:dd:47:8b:b1:16:21:97:aa:b2:0d:10:ab:32:
0b:75:60:d4:4c:02:c1:a4:5d:f4:b2:f7:01:60:68:de:ef:a3:
31:ad:e7:7f:69:af:f5:62:24:c0:04:80:b7:58:df:ab:ec:2d:
13:ca:88:4e:59:04:99:ab:14:48:4c:42:bf:4b:fc:bd:02:c7:
3a:c9:66:75:f4:82:d6:b5:1d:63:d2:e1:aa:b4:2f:c4:b4:6a:
3d:ca:f8:62:2f:11:b2:f4:ce:01:b9:9e:3f:ef:35:71:c1:7e:
7f:3d:21:cd:e6:87:15:96:da:cd:2b:d1:d7:eb:c5:5a:bc:30:
9d:77:3f:d3:2a:e8:6d:7a:66:7b:7b:48:42:48:98:20:de:e8:
d9:2b:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org