Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ndMECQPDvtE7ZtVfrziQ9imwKpw.roa
File: ndMECQPDvtE7ZtVfrziQ9imwKpw.roa (raw, json)
Hash identifier: 4ZnLt7s6n7uSmzOlfweLNcFLzlwWWOOX/Bgrlxc8sbs=
Subject key identifier: 9D:D3:04:09:03:C3:BE:D1:3B:66:D5:5F:AF:38:90:F6:29:B0:2A:9C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190C0F009E926B8213240615C66D253DB75
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ndMECQPDvtE7ZtVfrziQ9imwKpw.roa
Signing time: Wed 17 Jul 2024 13:44:34 +0000
ROA not before: Wed 17 Jul 2024 13:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9028
IP address blocks: 45.144.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 16:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:f0:09:e9:26:b8:21:32:40:61:5c:66:d2:53:db:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 17 13:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dd3040903c3bed13b66d55faf3890f629b02a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:4c:83:8f:39:ff:ba:db:3e:e2:e7:e2:28:
42:1f:ee:14:e0:54:d5:8e:36:61:8b:0b:32:3f:0e:
47:41:2f:69:5e:a7:aa:ec:f8:ef:e3:4f:30:36:cc:
78:94:84:19:63:09:5b:81:60:3c:f0:10:f8:3e:a8:
a3:43:a2:65:c9:2e:0f:bf:c7:48:fc:5f:8b:46:0c:
50:45:13:01:88:1e:6e:c3:4c:85:91:db:2d:a9:d8:
ea:e3:f0:48:8b:d4:f3:e5:f9:9f:ec:a7:ee:a3:a3:
e6:c4:e5:9c:ea:4a:3e:d5:7c:e4:3b:a7:6b:43:45:
9d:3a:4b:68:1e:e3:e8:59:c7:db:19:74:53:83:87:
bf:02:fd:4f:0b:a7:20:b6:4c:6e:ab:86:cc:c2:75:
a4:ff:45:fa:62:0e:c5:c9:ca:47:3a:f1:49:2f:10:
cb:91:a1:b7:97:80:d1:99:0d:ac:d3:f7:f3:d5:05:
52:f3:6c:f5:3d:8e:71:d2:3f:ea:be:49:0a:d0:0e:
ab:f2:37:37:f0:15:02:07:13:bd:9a:32:a0:60:34:
be:61:2d:e8:49:1b:a4:26:8d:af:c4:60:4b:46:86:
f6:ee:2a:2c:1d:1a:4a:37:a4:a6:73:9c:86:bf:6a:
3f:0e:9e:53:1c:cc:71:a1:7a:98:4f:9c:dc:a9:17:
ea:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D3:04:09:03:C3:BE:D1:3B:66:D5:5F:AF:38:90:F6:29:B0:2A:9C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ndMECQPDvtE7ZtVfrziQ9imwKpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.155.0/24
Signature Algorithm: sha256WithRSAEncryption
68:72:75:17:24:f4:e7:7e:e7:76:2c:e5:13:ae:d2:05:6b:35:
50:60:98:8f:ea:85:33:ad:06:68:c2:3c:a1:06:da:c0:59:66:
f4:1b:ac:b1:72:5e:37:cb:e6:b2:57:14:15:f2:37:a2:f8:de:
17:c7:db:17:5f:9a:77:2e:6a:2d:ec:7f:7b:5a:e7:59:b8:a5:
1c:16:17:eb:57:73:bb:8c:01:6d:88:7a:4e:db:57:16:ec:bd:
fe:7a:d9:48:a7:d6:ad:ea:93:0c:21:d3:8a:08:f1:51:fe:2c:
e4:28:41:c6:b3:dc:42:f6:2d:6a:61:4d:98:de:d5:da:12:fd:
ac:4d:45:8e:f6:3b:e3:23:ad:83:c9:f8:be:19:a4:b4:3f:27:
4c:fc:99:e1:43:87:f4:b9:9b:99:60:df:09:ea:08:3d:3b:c4:
4f:c0:f2:82:c6:60:73:a1:7f:87:22:82:ba:c9:c9:9e:79:43:
0b:de:37:7c:94:26:23:58:2e:7f:ef:93:50:54:2c:a1:dc:ed:
65:f6:90:ef:39:3f:b1:6c:b7:33:f9:bf:8d:ce:bb:d5:87:38:
50:2f:f6:91:01:d3:0f:c9:fc:f3:3a:2e:3b:17:95:89:fc:dc:
23:d0:a3:6d:5e:ae:f7:17:41:0c:17:2e:82:a7:ab:8d:1e:47:
5f:52:b4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 20:18:46 2024 by rpki-client on console-ams.rpki-client.org