Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4X5M2kFXzs5KhOMaDdNo1Z4hdIk.roa
File: 4X5M2kFXzs5KhOMaDdNo1Z4hdIk.roa (raw, json)
Hash identifier: ykdYq84jtjE8VK9Ryt732B41gg+vF7JuILpwIc/pbBI=
Subject key identifier: E1:7E:4C:DA:41:57:CE:CE:4A:84:E3:1A:0D:D3:68:D5:9E:21:74:89
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BB9DD6A6DF9C47D67E7E5805CD1934439
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4X5M2kFXzs5KhOMaDdNo1Z4hdIk.roa
Signing time: Fri 10 Nov 2023 15:32:57 +0000
ROA not before: Fri 10 Nov 2023 15:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60446
IP address blocks: 45.14.164.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
2.59.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:dd:6a:6d:f9:c4:7d:67:e7:e5:80:5c:d1:93:44:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 10 15:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e17e4cda4157cece4a84e31a0dd368d59e217489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:95:2d:4f:89:4c:d7:a0:9f:7e:51:6b:3f:
5e:e5:36:ae:ff:e4:14:fa:71:d7:0d:57:16:5b:7b:
89:1e:24:70:8d:53:49:d2:e3:27:92:59:df:2d:89:
7f:cb:81:19:d9:68:2c:65:16:7f:79:9e:20:8e:a4:
1c:d3:0d:1b:4d:bc:aa:03:88:0b:8a:f4:3c:37:77:
c3:c4:a0:60:72:fc:6f:ee:3b:f0:a3:12:a1:98:50:
61:89:be:fb:6e:d0:c3:4d:a7:6c:23:21:40:06:52:
c3:ca:8c:a2:e3:d4:37:27:ac:4a:7c:e8:fd:e2:eb:
e3:79:02:4c:ea:d4:42:f3:89:2b:9a:63:f0:c5:37:
40:9e:fb:17:86:58:d8:4f:97:df:82:c6:fb:cd:89:
93:f4:cf:2e:68:0a:8d:62:8a:91:cf:b9:13:3b:6d:
9c:4f:cb:11:45:bc:ac:df:eb:7d:f5:b6:40:6b:29:
a9:24:d7:ab:36:f2:da:c4:a1:69:77:bf:30:1c:3f:
dd:41:91:04:e9:4e:0e:b7:ab:8b:0f:d1:cc:02:a8:
6e:86:32:fd:02:d7:d9:78:bc:f9:9c:01:9e:e2:45:
78:73:85:f8:02:57:a9:a3:14:14:67:cb:dc:60:a1:
35:00:a2:40:e0:48:f2:61:a8:eb:c5:81:47:14:e5:
1f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7E:4C:DA:41:57:CE:CE:4A:84:E3:1A:0D:D3:68:D5:9E:21:74:89
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4X5M2kFXzs5KhOMaDdNo1Z4hdIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.252.0/24
45.9.157.0/24
45.14.164.0/24
45.149.233.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:18:6e:91:9b:de:6c:f7:45:11:e7:4d:95:cd:1c:bc:1f:9e:
f6:7c:2a:da:44:b3:80:8c:76:88:c3:89:0d:f6:12:d6:b5:eb:
d1:0f:df:0a:51:d0:92:53:e7:6e:61:59:69:3b:20:fd:73:86:
98:49:48:53:56:3b:b9:29:32:4b:8b:30:a0:6e:2c:d8:8f:c0:
0d:6c:a5:56:6d:1e:0f:76:06:b7:07:6c:49:e6:87:f7:ed:ee:
a9:4f:73:72:35:e2:b8:ba:56:7b:2d:36:65:e4:1f:f8:45:45:
b6:ef:26:83:de:81:f4:10:4f:9f:77:63:f8:43:20:05:eb:8f:
20:a2:99:fd:e1:17:f1:86:a2:91:76:ae:29:18:98:33:5b:2d:
4b:a3:68:34:e0:94:50:f3:db:ff:36:6a:df:fe:30:c8:87:6b:
d4:c6:83:0a:95:36:42:d8:0c:9b:57:ee:75:34:fd:6d:5b:d7:
37:df:63:99:69:63:5e:08:fd:15:d4:80:b4:04:d7:60:4c:ca:
90:e8:98:55:51:67:b6:8c:1b:9f:4b:9d:a3:6d:69:96:49:ef:
bb:7c:a6:47:0a:fa:63:1f:c2:38:5f:b4:ef:a2:f4:04:b0:bf:
18:ef:1a:f0:cd:2a:f4:a6:43:78:24:b9:23:0d:f0:02:ef:01:
94:a1:85:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:09 2024 by rpki-client on console-ams.rpki-client.org