Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ikfWEherW3pvH5T0DMIkwfAi4ik.roa
File: ikfWEherW3pvH5T0DMIkwfAi4ik.roa (raw, json)
Hash identifier: 4D8bcUR4fjz7d6C2csf/zhQbXNYX/k/YEF61iI+GtIY=
Subject key identifier: 8A:47:D6:12:17:AB:5B:7A:6F:1F:94:F4:0C:C2:24:C1:F0:22:E2:29
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 018DE61C91179E0F0DBAFF7E10E43CA05E3B
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ikfWEherW3pvH5T0DMIkwfAi4ik.roa
Signing time: Mon 26 Feb 2024 15:50:48 +0000
ROA not before: Mon 26 Feb 2024 15:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210531
IP address blocks: 45.8.178.0/24 maxlen: 24
45.8.179.0/24 maxlen: 24
45.148.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 14:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:1c:91:17:9e:0f:0d:ba:ff:7e:10:e4:3c:a0:5e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Feb 26 15:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a47d61217ab5b7a6f1f94f40cc224c1f022e229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:11:4c:c9:23:58:5e:36:3e:08:94:58:a2:
eb:35:5d:77:f0:ec:d8:5d:8e:51:5e:dd:ff:19:a6:
81:c8:f5:e3:86:5f:92:49:65:7f:be:e5:68:80:29:
b1:ba:54:2a:fa:12:ff:5a:31:c2:4c:c6:45:34:2f:
c3:ed:8f:ae:8c:fb:25:44:99:4f:7e:ed:b3:a8:bc:
d5:66:b2:a7:ce:0d:26:b7:e1:bc:6b:0a:7b:bd:3b:
41:c0:05:3b:f4:d6:3b:9a:1e:be:26:62:ad:d3:fe:
3b:cd:df:89:50:8d:08:1d:cb:5b:5f:30:db:32:69:
45:8d:c4:92:61:b4:78:03:a7:7a:ad:9f:aa:1f:48:
9a:a2:79:f5:77:3a:20:6e:1f:57:77:5a:f6:c8:d3:
6b:bb:e6:fb:92:93:2f:f5:dd:1b:13:04:07:08:51:
49:e8:ce:a0:cd:49:47:0c:48:a7:37:c2:ec:59:73:
fb:37:1d:92:6a:2d:31:bf:30:e7:22:d2:5b:42:9d:
c6:84:97:bd:c1:43:bd:ee:0b:d9:6a:77:14:a8:31:
ad:dd:1d:50:1b:68:3d:cf:31:c0:ce:8d:8b:03:9d:
3d:5f:a9:4f:74:32:f6:0a:78:12:b6:7e:82:18:1f:
df:28:c5:67:e8:c6:fb:cb:db:35:9f:1e:e2:b9:6b:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:47:D6:12:17:AB:5B:7A:6F:1F:94:F4:0C:C2:24:C1:F0:22:E2:29
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ikfWEherW3pvH5T0DMIkwfAi4ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.178.0/23
45.148.147.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e6:1d:2a:06:09:a3:22:29:4e:a7:d0:a5:0f:37:34:56:bf:
45:19:3f:4a:52:48:dc:62:50:4b:73:15:c8:35:da:e3:07:ae:
29:9f:08:26:9c:64:fc:d6:04:a9:a2:78:7f:c4:14:65:24:fd:
97:44:e5:83:13:d4:23:b2:30:fb:05:df:df:8b:1d:fa:e5:3a:
a0:39:55:46:22:6d:da:7b:82:a7:72:03:5b:7b:a0:33:82:f2:
f1:c2:a5:6c:1e:27:6b:0d:e1:a7:2e:18:dd:aa:3c:d8:13:2f:
a7:d7:d0:e8:fe:c4:f4:ee:c3:da:49:1a:72:e6:8f:eb:67:56:
6a:8a:e7:f2:13:91:7e:c2:4b:e1:e0:7e:21:85:52:0d:ec:c7:
27:d6:65:db:ff:fe:17:47:13:ec:c4:ac:a8:af:81:63:b3:a7:
43:4f:77:c6:8b:d6:67:39:d6:e6:69:5a:8d:e4:46:b4:10:db:
5f:88:d5:09:75:35:f3:bf:ef:04:67:7a:a5:cf:f0:db:23:a7:
ee:57:cb:3f:15:36:e5:36:91:a0:b0:eb:3f:63:b8:ef:c9:4e:
53:6d:0c:a9:77:f0:77:87:fa:61:23:91:fa:e4:ee:e0:3d:c9:
cc:5d:37:31:be:30:53:83:a7:52:59:02:78:2d:ff:f0:48:6b:
03:48:2d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:23 2025 by rpki-client