Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E-bzmFjnIgwOn_Ycc-Fsw3ZCK8E.roa
File: E-bzmFjnIgwOn_Ycc-Fsw3ZCK8E.roa (raw, json)
Hash identifier: xPLiz6pHXS7gBjsb7QRaRr694C5dRkpxpHonNIyz7sI=
Subject key identifier: 13:E6:F3:98:58:E7:22:0C:0E:9F:F6:1C:73:E1:6C:C3:76:42:2B:C1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EEC27AB66FFAD56C0DA60578CCE160CCF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E-bzmFjnIgwOn_Ycc-Fsw3ZCK8E.roa
Signing time: Wed 17 Apr 2024 13:03:26 +0000
ROA not before: Wed 17 Apr 2024 13:03:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203217
IP address blocks: 45.8.72.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Apr 2024 14:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ec:27:ab:66:ff:ad:56:c0:da:60:57:8c:ce:16:0c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 17 13:03:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13e6f39858e7220c0e9ff61c73e16cc376422bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:ce:eb:7b:99:82:81:85:80:b0:8f:c7:f4:
f6:56:2c:d4:92:5c:16:8d:f2:81:40:b2:a3:70:03:
83:57:c0:c0:21:dc:ea:0d:99:40:a2:31:e5:75:3f:
0e:7a:6c:0b:23:04:04:7e:1e:de:a5:2c:19:3b:3f:
7d:69:1e:11:24:94:e7:d0:43:00:06:b9:f4:86:aa:
33:14:4a:93:b2:2e:85:a0:08:b2:20:f1:c7:38:9e:
5c:1b:0f:ff:17:98:db:fb:52:97:d7:58:77:a0:25:
b3:5c:15:2b:60:7e:15:34:19:aa:f5:9b:72:cf:79:
f8:d8:77:23:b6:95:92:ec:c0:d0:9d:60:67:94:26:
4b:5f:f1:d3:4d:88:d4:f2:27:f5:01:14:97:98:24:
5b:7f:eb:9a:8f:57:d8:2f:1d:bf:25:51:b2:60:a9:
3d:cb:cd:84:16:de:0c:19:03:31:bf:92:bb:e0:4e:
d9:47:bd:2e:08:03:4f:a2:cd:fc:c1:c4:27:5f:bb:
c9:6e:be:78:a2:63:e2:fe:a2:c0:c0:f9:b4:fc:ee:
91:12:3f:5a:32:ad:b4:d2:15:8f:1e:b0:02:24:e6:
38:68:09:bd:72:ff:80:08:15:d8:68:ab:a0:83:bf:
c6:4b:17:bf:76:a2:90:15:aa:64:3b:56:a0:ed:1d:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E6:F3:98:58:E7:22:0C:0E:9F:F6:1C:73:E1:6C:C3:76:42:2B:C1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E-bzmFjnIgwOn_Ycc-Fsw3ZCK8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.72.0/23
Signature Algorithm: sha256WithRSAEncryption
74:1b:2f:4c:db:72:52:15:14:ce:91:fa:52:25:e6:46:01:f8:
d1:17:a2:c7:2c:8c:83:07:ac:8c:45:69:6b:87:ed:1e:a7:07:
6d:e1:07:e6:be:9b:17:ba:07:49:71:24:3a:c3:cd:26:a2:3c:
a4:ee:fb:8d:50:f4:8f:bb:01:09:e1:53:41:93:38:e3:e7:2d:
49:fe:bb:4e:34:c3:6c:ba:d5:85:36:21:f4:f0:71:db:4d:24:
e8:27:c8:bf:e6:b6:4c:61:a8:53:40:4f:dc:d8:e8:a3:c2:e6:
a6:01:c9:d8:f7:fa:b5:6c:9a:c4:c2:4f:3f:44:89:01:13:1e:
90:50:fb:88:bc:45:8b:59:e3:da:29:ff:40:73:c2:37:9e:28:
3d:8c:48:cb:92:8f:bd:13:f5:2c:4b:61:bd:10:b6:2b:c4:12:
f3:4a:69:3b:ec:ad:7b:e6:89:82:97:d7:fa:36:6f:ff:ef:45:
2a:e1:f6:c1:58:b0:33:96:bc:83:3c:31:da:c1:5a:af:52:9e:
c1:52:fe:77:ef:ea:fa:86:99:a0:43:81:b6:c0:d1:59:7e:e6:
63:83:5f:25:7a:c1:cf:45:e4:53:0d:b0:c5:27:7f:94:59:82:
39:47:3e:b0:60:49:fa:52:a7:e9:bf:b4:ea:49:20:99:f6:ad:
eb:96:5a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:27 2024 by rpki-client on console-ams.rpki-client.org