Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DLvxPciGOZjRLfJCAWsZ_yL6j8k.roa
File: DLvxPciGOZjRLfJCAWsZ_yL6j8k.roa (raw, json)
Hash identifier: 9U8xTJUVluSgxikbHvx424cPoJGpuKQdHynWdVpBnJ0=
Subject key identifier: 0C:BB:F1:3D:C8:86:39:98:D1:2D:F2:42:01:6B:19:FF:22:FA:8F:C9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019007A1FCE1E7289572016492A7054B4CA6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DLvxPciGOZjRLfJCAWsZ_yL6j8k.roa
Signing time: Tue 11 Jun 2024 14:09:34 +0000
ROA not before: Tue 11 Jun 2024 14:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 131926
IP address blocks: 45.141.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 08:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:a1:fc:e1:e7:28:95:72:01:64:92:a7:05:4b:4c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 11 14:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cbbf13dc8863998d12df242016b19ff22fa8fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:a1:e2:62:1e:4b:96:37:61:bc:1e:3d:ca:
a0:9b:c1:9d:9e:72:55:17:9f:7e:0f:56:2f:6c:0f:
b4:62:f8:be:81:3f:9c:23:d9:91:45:80:20:21:f7:
21:92:24:3e:cf:b9:50:ec:ca:cc:63:ec:d7:e1:51:
4d:9b:92:e9:2e:40:fe:63:47:ba:a0:37:f2:d8:c6:
eb:cc:bb:c3:4a:ac:ba:3a:dd:d9:5e:b8:36:97:87:
21:4b:fc:84:8b:92:14:31:a8:da:6f:d3:a3:4a:67:
7b:34:c4:5c:c5:74:f8:94:fe:85:86:23:fa:04:35:
7a:e9:67:46:ca:74:15:d9:d9:cb:82:f9:42:8e:c4:
19:13:eb:c4:65:20:80:dd:69:76:3e:eb:c3:84:39:
d3:d5:fe:29:74:d2:b4:9e:95:f4:94:73:f2:b6:c5:
1f:4f:0c:f7:1a:fd:fc:b2:8d:9b:7a:fb:ff:00:6c:
ea:5c:64:45:f9:d4:17:38:da:16:03:1e:7b:03:68:
92:00:72:31:11:5b:c1:67:47:e5:21:2b:ee:26:5a:
b8:0a:03:39:8c:ad:38:82:88:4a:75:52:c0:6c:80:
bf:f8:4e:3f:9f:c9:22:c2:92:33:46:31:14:7d:af:
bd:0a:a6:f1:2c:88:ce:f4:32:bb:95:ba:e4:a5:e8:
aa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BB:F1:3D:C8:86:39:98:D1:2D:F2:42:01:6B:19:FF:22:FA:8F:C9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DLvxPciGOZjRLfJCAWsZ_yL6j8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.158.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e5:cb:b6:68:29:72:0e:7c:2e:f6:7d:dc:4d:16:a1:cd:af:
7e:1b:10:76:58:2c:1a:bd:52:e5:28:a0:15:c4:b9:4d:9b:8a:
da:68:bf:31:a6:03:59:67:16:16:ba:f8:be:dd:94:1f:fb:42:
b2:0d:1f:00:6b:38:8f:af:16:12:b1:6f:cc:47:3f:cd:ad:53:
1b:51:7f:4a:6d:81:b3:c4:1c:27:77:1d:f6:47:12:ef:17:aa:
96:a1:5f:63:1c:53:70:f8:4a:eb:df:bd:ed:27:42:51:d9:04:
a0:61:b6:e7:a7:58:a2:79:0e:85:b4:6a:2b:08:b9:21:d4:d2:
4a:bf:2f:59:3f:6e:f5:39:e1:8a:40:f5:ca:5f:0a:83:a9:ec:
c3:9f:a4:ff:7f:90:cf:6b:c5:a1:6a:9d:0e:c4:b1:31:f2:09:
5a:59:a7:ce:40:af:f4:49:82:c9:99:93:ca:d5:03:4f:56:12:
1e:f4:39:e3:e0:39:8b:ed:55:b2:87:44:41:18:fa:51:f2:14:
8e:9d:7c:a7:4d:a3:c6:c5:b9:71:5c:87:71:01:a6:5e:7a:d1:
1b:6f:31:e4:9c:6a:c7:e0:ef:d1:34:ab:5b:c0:3f:53:58:45:
65:e0:eb:0a:8c:30:9c:d8:05:a2:10:be:26:8f:68:99:80:e5:
08:7a:9e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 10:59:27 2024 by rpki-client on console-ams.rpki-client.org