Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EZeNmCltpc3xtaRs-pcQv05ncus.roa
File: EZeNmCltpc3xtaRs-pcQv05ncus.roa (raw, json)
Hash identifier: Ruk5sI1kMNhnJIszTuxRi8gXaaIe334AhJCLTu1AxQY=
Subject key identifier: 11:97:8D:98:29:6D:A5:CD:F1:B5:A4:6C:FA:97:10:BF:4E:67:72:EB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F965EC8AD0DA5554A3E03A85AC294BC9D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EZeNmCltpc3xtaRs-pcQv05ncus.roa
Signing time: Mon 20 May 2024 14:19:05 +0000
ROA not before: Mon 20 May 2024 14:19:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215316
IP address blocks: 45.14.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 08:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:5e:c8:ad:0d:a5:55:4a:3e:03:a8:5a:c2:94:bc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 20 14:19:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11978d98296da5cdf1b5a46cfa9710bf4e6772eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:6b:a0:b2:04:c3:9c:85:7d:86:7f:6a:ad:
cb:a0:9b:bf:17:95:dd:d0:21:53:4e:39:09:6f:ed:
01:7b:73:e9:1d:a3:79:c6:50:76:c3:fc:f2:64:37:
2e:fe:ab:f2:11:e7:de:65:55:b3:5b:b4:0f:35:93:
54:e1:63:f9:55:4f:9b:94:c0:95:49:a6:b4:62:52:
fe:ee:1d:50:6e:25:e5:7d:63:8f:4c:be:a3:1a:73:
fd:8b:65:80:5a:1e:45:24:e5:0e:cb:f1:1a:e6:98:
d4:f9:e6:c3:ab:db:3c:34:5f:27:77:09:c1:0b:9a:
5d:7c:b8:20:fd:4e:e2:a7:2f:97:f5:93:5b:a3:69:
8a:db:68:fc:95:2b:a8:a8:fd:6c:eb:fe:c7:3d:28:
d5:bc:72:2c:58:a8:37:e2:35:51:8b:d7:f7:af:3f:
7c:05:c7:71:6c:2f:3d:64:2b:f2:c8:c5:0a:e7:1c:
5d:71:61:83:ab:c1:e3:bc:6f:90:1a:00:31:c6:44:
11:09:51:8b:a2:36:91:5f:cd:6b:c8:05:ce:4d:38:
6e:33:2c:54:47:da:7c:a4:c2:82:fc:76:4e:3c:c5:
71:f3:34:8d:13:9c:9b:46:e0:05:ba:8b:8e:d1:c7:
73:b6:5f:06:7e:0b:8c:19:66:fd:e7:20:64:13:d4:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:97:8D:98:29:6D:A5:CD:F1:B5:A4:6C:FA:97:10:BF:4E:67:72:EB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EZeNmCltpc3xtaRs-pcQv05ncus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.164.0/24
Signature Algorithm: sha256WithRSAEncryption
58:45:22:46:63:3a:ea:67:56:7f:9c:ea:8a:ba:89:b8:89:4b:
d5:c1:22:6b:03:74:bf:95:7e:d5:8a:63:77:3f:5c:89:0e:3d:
24:fe:32:20:cc:1d:cd:21:25:23:80:e5:34:da:ac:e6:ec:25:
e8:2c:7f:3a:18:f1:9a:54:f1:b5:5a:98:ed:ee:24:3b:cc:1e:
dc:4e:40:28:6a:cc:c1:7c:80:6d:60:97:5d:17:ad:eb:7e:15:
66:64:72:15:63:99:6d:91:47:f9:59:c1:ad:8c:d5:fe:dc:42:
1c:0b:70:50:71:98:46:5d:aa:14:78:8b:9e:cc:a1:2d:e9:03:
5e:66:00:94:ec:ed:2e:d3:db:7c:ac:da:79:24:54:6a:91:7f:
67:bb:8b:83:e7:f0:c2:ee:1b:30:fb:fa:7c:ca:85:b2:d6:48:
a9:15:e8:99:0e:2c:12:96:b4:03:0e:f5:9f:e2:46:1e:a3:48:
c5:bd:8c:f4:3f:b4:d3:47:7f:47:95:2b:5a:e4:ff:bc:32:eb:
22:09:63:53:9c:2e:92:22:74:bf:41:2a:c2:28:ba:db:86:6f:
a8:33:a7:31:e4:85:d8:73:1a:1e:7e:a4:ed:a6:05:2a:d3:7a:
19:21:df:c5:41:cb:5a:39:f0:56:64:1d:13:88:ae:ab:98:18:
71:a6:de:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 11:00:16 2024 by rpki-client on console-ams.rpki-client.org