Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YJE8aZlAS-UJn5HWWeCoT7VlXZc.roa
File: YJE8aZlAS-UJn5HWWeCoT7VlXZc.roa (raw, json)
Hash identifier: 1mjfA0KKR6knsxhJSkQJ2SHsKS+cvz+4XD/C29T7QKw=
Subject key identifier: 60:91:3C:69:99:40:4B:E5:09:9F:91:D6:59:E0:A8:4F:B5:65:5D:97
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DF5675DB20B5CF376FBBDD5B81DF4093F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YJE8aZlAS-UJn5HWWeCoT7VlXZc.roa
Signing time: Thu 29 Feb 2024 15:06:48 +0000
ROA not before: Thu 29 Feb 2024 15:06:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61302
IP address blocks: 45.141.158.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 11:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:67:5d:b2:0b:5c:f3:76:fb:bd:d5:b8:1d:f4:09:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 29 15:06:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60913c6999404be5099f91d659e0a84fb5655d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:09:50:de:83:09:2b:8e:f6:c4:fc:86:8f:
d2:2a:04:96:25:b3:9e:af:d2:d7:5d:e6:9f:e4:15:
ce:70:69:c8:34:3c:00:02:d5:8b:d3:87:70:22:ca:
f0:42:1e:f6:ee:22:6d:18:b1:04:85:34:de:5a:53:
5d:c3:f2:17:ac:88:52:50:63:3e:fc:d5:e7:19:17:
7d:a7:cb:14:98:c8:60:a8:32:42:18:c6:6b:4f:ad:
3a:0e:f9:da:92:82:77:aa:43:59:e4:57:ca:7c:ce:
cf:e9:49:4e:57:7f:e1:db:80:fc:93:8e:12:56:b3:
7e:df:e7:40:27:9c:1e:56:46:84:6a:48:81:cb:9d:
a8:25:41:79:86:c2:85:2f:5c:b0:ab:c8:d9:af:69:
5e:0c:6d:0a:c9:6f:66:fb:43:a1:4e:ea:ed:97:e0:
ce:4d:b1:9e:67:51:ce:d3:3f:79:b1:ee:2a:19:df:
d3:b4:82:d6:25:da:8a:27:67:a2:29:ee:03:72:db:
5c:1f:64:6f:2f:f4:e7:83:76:6c:30:60:6b:33:79:
8c:52:d5:48:eb:38:29:53:68:74:a7:b4:e2:dc:33:
4e:3f:dc:b1:ec:d8:5d:14:2f:27:4c:c2:98:74:26:
e5:d3:cb:e0:8e:f0:3a:9a:94:40:52:69:51:c3:e7:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:91:3C:69:99:40:4B:E5:09:9F:91:D6:59:E0:A8:4F:B5:65:5D:97
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YJE8aZlAS-UJn5HWWeCoT7VlXZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.158.0/24
87.121.124.0/23
87.121.162.0/24
147.78.100.0/24
171.22.17.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:75:90:db:6e:e4:8b:2d:ef:ef:5f:85:bd:d5:a1:32:22:18:
1a:1a:6a:dc:03:08:8f:3c:cb:d9:b3:41:c9:f8:66:b2:ef:b3:
51:82:53:f4:d8:e8:cc:30:0e:dc:85:df:a0:d0:8b:b0:8e:bf:
4d:1d:4e:d4:67:cf:d0:e8:36:8b:43:23:38:1d:dc:24:13:42:
9d:63:d8:f6:b6:d1:54:77:71:0f:cb:f8:89:4f:23:ce:ae:f9:
f1:30:dd:db:6a:d9:f1:46:f4:44:fe:b2:bf:1a:65:10:3d:3b:
5c:87:6b:a9:9c:b8:cc:b7:f9:29:95:ea:d9:0e:d3:0a:f2:d7:
2a:54:e3:5e:1d:7c:d7:e1:3c:b3:71:2f:f5:1d:da:d1:f8:af:
be:ad:45:7b:51:e3:83:86:84:b5:32:8e:8f:1d:e2:a6:06:27:
be:62:d1:69:6b:7d:65:a1:8e:79:cd:d8:d7:80:8d:4a:70:d8:
d1:d7:9d:2a:82:f2:66:79:3c:78:d3:d9:d4:99:65:10:09:31:
48:7e:9c:7f:58:d3:72:76:0e:f9:7e:e4:2f:ce:8b:ed:4a:cd:
87:84:d8:a2:85:22:cb:76:ca:a9:97:d1:9b:f1:e5:b6:23:cd:
f0:18:de:1a:24:97:82:c0:62:78:23:7b:06:da:b1:31:db:fa:
cb:b3:32:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 15:15:23 2024 by rpki-client on console-ams.rpki-client.org