Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2jbZsUU4dryYmJSwqPwZdgl7q2E.roa
File: 2jbZsUU4dryYmJSwqPwZdgl7q2E.roa (raw, json)
Hash identifier: GonkYchn6LtHlVRDEqBP4fyDXHzVuzy+F/8VfKUCH5E=
Subject key identifier: DA:36:D9:B1:45:38:76:BC:98:98:94:B0:A8:FC:19:76:09:7B:AB:61
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DF56674298C51A5C8974379252010D59D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2jbZsUU4dryYmJSwqPwZdgl7q2E.roa
Signing time: Thu 29 Feb 2024 15:05:48 +0000
ROA not before: Thu 29 Feb 2024 15:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50738
IP address blocks: 45.141.158.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 11:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:66:74:29:8c:51:a5:c8:97:43:79:25:20:10:d5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 29 15:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da36d9b1453876bc989894b0a8fc1976097bab61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:45:bf:e2:a5:74:f1:36:56:7f:89:da:a8:
e2:75:ac:7b:54:50:f4:0c:b6:d8:44:3b:a5:10:fe:
25:e6:92:9a:a7:11:d5:07:2d:a9:35:de:83:ba:fa:
70:e9:7e:2b:c2:f0:0f:4f:95:f0:c9:a6:05:3c:91:
56:52:d1:86:4d:ea:d6:4c:5e:cc:d9:6d:5b:05:08:
1e:b2:fb:17:5b:61:ca:35:d8:8e:eb:7a:0a:8d:46:
73:d6:16:a5:a7:90:49:58:0d:2f:66:26:ab:15:a2:
59:5d:a5:96:50:e6:e6:4d:f4:68:3f:09:e5:53:62:
5a:66:2e:49:50:ec:9d:b0:be:b7:cf:61:1a:aa:62:
61:d6:58:7a:e8:63:a0:00:ce:60:5e:d6:0e:e8:a7:
4c:89:7f:74:7a:c5:39:46:4d:0f:cb:80:0f:f1:de:
63:1b:fb:73:3b:cf:de:50:54:42:12:2d:84:3a:3a:
d6:cf:f2:93:76:90:21:bf:a8:f2:a8:01:3c:50:63:
ad:b3:d5:58:c8:7d:d5:e6:f6:a3:16:0b:4d:b9:23:
6a:b4:70:7e:ba:7f:59:70:4a:ff:9a:16:a5:70:5f:
a4:f5:a3:11:7c:37:cf:4f:a9:34:4f:32:a6:0b:2a:
50:35:74:d5:da:74:9a:6f:84:32:4b:2c:6b:7a:80:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:36:D9:B1:45:38:76:BC:98:98:94:B0:A8:FC:19:76:09:7B:AB:61
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2jbZsUU4dryYmJSwqPwZdgl7q2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.158.0/24
87.121.124.0/23
87.121.162.0/24
171.22.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e4:b9:01:80:ca:f0:b1:f5:c0:4c:47:a5:27:1e:eb:9c:99:
99:43:c9:5e:a8:30:6f:af:5f:bb:ba:2a:22:25:f9:b8:cf:8f:
5f:be:25:56:01:2c:8e:63:0f:1e:d4:81:57:48:c9:48:c9:a3:
e4:b7:6b:9d:2d:68:04:94:43:e8:fb:29:0e:d3:d2:3d:08:c6:
2b:2a:f5:2f:51:bf:ea:1d:44:91:73:b5:3b:2a:2f:32:59:54:
cb:72:5b:23:d7:70:75:91:ad:7e:9c:6c:59:a2:33:b8:19:f8:
5f:54:e8:00:c9:30:22:b2:b3:73:47:3c:dc:b5:fa:01:d7:11:
10:83:b7:4a:6f:a1:1f:23:37:a6:2b:28:5f:af:f6:73:ac:66:
4c:15:6e:d9:15:c2:9c:7c:2d:2c:3b:33:1e:81:13:e9:65:93:
9e:1d:b8:9c:19:7c:6b:79:58:44:c6:0e:c0:dd:92:c3:76:31:
53:ac:19:2f:31:6b:a8:f2:05:ce:54:a3:ea:c2:b9:97:dd:04:
81:69:87:77:3e:8b:2f:d1:bf:1c:35:c3:81:a4:6c:35:54:7d:
b4:04:d0:50:05:14:94:f8:1d:df:ab:08:a4:58:1b:e6:ac:81:
45:ee:61:b5:61:34:a8:9c:cf:a9:6a:c0:a2:24:9f:7f:de:49:
96:10:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 15:15:23 2024 by rpki-client on console-ams.rpki-client.org