Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ib_XQTdTt9N5NlLXb4Dur_7347w.roa
File: ib_XQTdTt9N5NlLXb4Dur_7347w.roa (raw, json)
Hash identifier: 6bCVB/3JBDwueBw4B6d4uZrPR2ro9DLm1SRXWLgMoHA=
Subject key identifier: 89:BF:D7:41:37:53:B7:D3:79:36:52:D7:6F:80:EE:AF:FE:F7:E3:BC
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01857D48D15F58320984A3C9E2442C6846B5
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ib_XQTdTt9N5NlLXb4Dur_7347w.roa
Signing time: Wed 04 Jan 2023 14:56:42 +0000
ROA not before: Wed 04 Jan 2023 14:56:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 45.144.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Aug 2023 03:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:48:d1:5f:58:32:09:84:a3:c9:e2:44:2c:68:46:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 4 14:56:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89bfd7413753b7d3793652d76f80eeaffef7e3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:d5:5c:c1:bc:9e:e0:89:25:c2:ef:d6:65:
5c:e5:75:95:7f:22:c5:75:b9:4e:fa:c6:0a:03:f5:
0f:9b:d7:7a:9a:25:08:9d:97:7b:d5:65:4c:e4:e0:
e8:db:e2:8d:58:30:a1:a4:76:db:32:01:8f:15:db:
4b:d0:5c:18:3c:fb:4b:34:10:9d:da:94:aa:62:97:
98:2d:8f:07:4a:b1:6b:36:9c:40:bc:f7:2e:d3:39:
1e:f3:e3:d6:73:4c:5f:83:48:23:af:f0:ba:4f:17:
f6:62:75:87:ba:26:57:cf:81:d2:c6:6d:dc:54:a9:
b9:51:f1:05:ae:ca:c2:79:cf:8b:34:86:0d:f5:28:
b8:f5:4c:b8:0a:fd:84:57:8a:04:88:ae:9a:7e:11:
32:35:81:d2:ca:ef:ad:db:63:ae:43:48:d0:f8:a4:
97:2b:12:68:54:ea:d9:d0:55:43:51:cf:d8:e7:42:
2f:2b:49:d7:7f:51:60:ae:5a:99:76:2b:f1:3a:3e:
ae:65:cb:10:ef:40:6f:3a:07:e4:54:b3:21:2f:cd:
29:4e:33:12:85:d3:98:48:c1:2a:2b:4b:f5:7c:a2:
cf:3e:9e:0d:88:a9:37:c3:d4:61:20:bc:8d:cb:88:
42:b8:25:ee:f1:d2:c9:56:70:c3:81:c8:5e:76:46:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BF:D7:41:37:53:B7:D3:79:36:52:D7:6F:80:EE:AF:FE:F7:E3:BC
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ib_XQTdTt9N5NlLXb4Dur_7347w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b8:be:dd:5b:f6:ff:1b:62:2f:06:49:54:6c:b9:30:b3:de:
7d:be:73:60:59:4a:2c:49:a7:fe:43:83:e3:2b:d0:e4:fa:73:
c5:5d:13:83:bc:24:9c:c4:16:f3:7d:5d:c1:d1:74:93:d1:a4:
7f:5b:fb:a7:93:ea:12:2d:77:6e:a1:65:61:01:a2:9f:25:75:
e8:12:c8:23:a9:5a:35:6e:34:84:af:45:ee:a5:8e:ca:72:57:
7c:80:4b:19:8c:9c:6d:d8:5d:f6:5d:47:d4:ac:2e:4d:12:29:
f1:aa:34:2a:60:d5:53:51:0d:58:1f:c9:a8:5e:70:0e:ea:8a:
08:37:b3:13:66:ef:e9:70:99:a4:cc:1d:9b:65:92:ea:69:b1:
ad:5d:64:0f:98:84:c9:e6:e3:be:92:df:5a:6e:cc:ab:23:9f:
79:52:2d:aa:29:8c:fb:e3:e6:10:b5:5d:f7:54:be:b4:6f:2b:
42:b0:6b:a5:46:8d:d4:61:b6:db:f9:35:02:18:40:8c:4e:95:
a2:ce:df:ce:9d:91:30:58:e6:f6:70:c0:6d:56:5f:be:45:95:
f1:ae:66:31:ed:79:94:ab:f0:97:e9:9f:9b:c7:74:8e:95:8e:
e8:c3:1c:f1:c9:f0:f1:24:f4:8b:ec:ee:ad:c5:2a:65:64:4b:
b0:ce:ae:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org