Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pLIja1ZCoQpvX8YpglJRp31XnbI.roa
File: pLIja1ZCoQpvX8YpglJRp31XnbI.roa (raw, json)
Hash identifier: ivwUqlAu0+RMMg2qSAdm/Xf2fXyrMKdmTq9ZeJy+rU8=
Subject key identifier: A4:B2:23:6B:56:42:A1:0A:6F:5F:C6:29:82:52:51:A7:7D:57:9D:B2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FA5AFA5852424238F6238590B7D65BD6B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pLIja1ZCoQpvX8YpglJRp31XnbI.roa
Signing time: Thu 23 May 2024 13:41:42 +0000
ROA not before: Thu 23 May 2024 13:41:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.144.154.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.253.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 09:47:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a5:af:a5:85:24:24:23:8f:62:38:59:0b:7d:65:bd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 23 13:41:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4b2236b5642a10a6f5fc629825251a77d579db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:42:31:06:ea:da:c8:c1:6c:90:c0:97:b6:50:
2a:4a:a0:1c:43:5a:f4:a7:23:10:1a:61:0f:0c:50:
56:c6:d9:00:b7:05:41:86:d5:09:4a:06:54:55:c4:
10:6e:ae:06:8e:41:d1:b5:d9:ef:0f:ea:ef:e4:22:
b0:8a:17:67:02:12:3e:57:27:51:05:56:d5:9f:ad:
a7:51:e1:f4:da:e5:23:3a:1a:6e:91:77:cd:ea:ef:
db:c0:ab:ce:fc:0e:fe:d9:9a:90:2d:f8:57:d3:88:
e6:4b:a8:a8:43:15:a2:df:dd:a0:02:ce:c7:fb:9a:
8f:ef:98:2a:c5:4c:73:27:7c:6a:6a:4f:ef:e6:12:
b8:83:60:51:61:80:0c:04:57:09:3e:8b:de:88:1d:
04:65:b9:1a:39:4f:7f:1a:1d:13:74:c4:80:94:35:
89:54:d3:0d:7c:3a:43:79:0b:be:87:a2:08:76:b4:
84:73:2e:0b:05:cf:c9:74:d7:5a:eb:e3:73:1e:ed:
f4:b7:09:e4:71:07:6b:27:47:49:2a:10:bd:48:e1:
a6:b6:08:4f:5a:3f:9f:94:78:5b:cb:8c:2f:3c:22:
b3:1d:2d:07:8c:c6:9e:6c:68:0d:e6:16:ea:2e:28:
0b:bf:74:0e:06:7a:f6:25:cb:25:68:93:01:2b:44:
07:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B2:23:6B:56:42:A1:0A:6F:5F:C6:29:82:52:51:A7:7D:57:9D:B2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pLIja1ZCoQpvX8YpglJRp31XnbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.154.0/24
94.156.11.0/24
94.156.253.0/24
141.98.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:85:99:5a:30:aa:fe:8d:f9:1d:7d:23:18:7a:fb:23:ed:92:
9c:a5:ba:94:c8:d0:59:2d:fe:b3:37:a6:cd:cf:de:52:0f:a6:
09:53:cb:40:95:1b:7c:85:f6:9d:0b:49:89:0d:33:a7:80:1c:
42:c5:0b:ec:09:49:ad:45:09:26:6d:40:30:05:f5:85:bf:ee:
cf:40:99:ce:70:89:34:98:d4:37:a6:42:d2:b5:46:db:e7:c9:
5b:53:85:1a:06:6e:6e:c6:38:88:02:44:00:c7:b5:45:c6:20:
3d:90:ae:9d:f7:d0:a0:b5:eb:8b:24:56:b0:45:83:35:78:a0:
1a:73:b3:88:a1:cd:f8:f7:63:83:d8:f3:c0:8b:e6:ff:f1:e6:
d2:bf:1c:a5:af:f1:24:29:96:9f:c9:31:fe:35:02:ac:06:9e:
bd:ed:af:cf:d3:bd:32:62:06:50:0a:4e:4d:1a:03:32:3b:3b:
15:07:7d:8b:11:e1:2e:57:7e:44:d6:50:a6:62:89:67:4e:ac:
52:29:8c:a2:29:1b:86:39:7a:6f:6c:10:3a:66:3e:37:83:b5:
96:12:15:61:37:57:d7:37:e0:44:d4:ba:30:9f:d4:1f:45:c7:
71:ac:4d:36:2c:0d:4c:eb:01:85:fd:78:0e:58:c1:56:94:6a:
4d:3f:e4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 13:14:58 2024 by rpki-client on console-ams.rpki-client.org