Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/IzMNd2g5iz4FeosOK_2JvWZWo7k.roa
File: IzMNd2g5iz4FeosOK_2JvWZWo7k.roa (raw, json)
Hash identifier: hBP8kzezf0Lj0yJNljLTd675B7MRDyUuTJXDDNKx53k=
Subject key identifier: 23:33:0D:77:68:39:8B:3E:05:7A:8B:0E:2B:FD:89:BD:66:56:A3:B9
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 018571F10178719A028E04360D16FDDF596D
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/IzMNd2g5iz4FeosOK_2JvWZWo7k.roa
Signing time: Mon 02 Jan 2023 10:04:58 +0000
ROA not before: Mon 02 Jan 2023 10:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20454
IP address blocks: 45.134.92.0/22 maxlen: 22
45.90.48.0/22 maxlen: 22
45.131.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 15 Feb 2023 14:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:01:78:71:9a:02:8e:04:36:0d:16:fd:df:59:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Jan 2 10:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23330d7768398b3e057a8b0e2bfd89bd6656a3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:92:d9:97:c9:37:0e:37:1a:f4:98:80:8e:
26:3c:99:f5:00:c5:33:f6:1e:4e:24:ba:eb:a0:6a:
b8:83:2c:ef:17:9d:f9:01:d9:ec:36:b4:f5:f2:cd:
61:c1:4c:aa:7f:cb:21:78:2c:01:f1:df:94:bd:f5:
6d:13:0d:df:db:46:1f:ac:e6:fb:78:3a:1b:c6:58:
83:a3:e1:35:e8:0c:16:64:17:93:72:c3:38:93:f6:
14:5a:bd:6f:29:c9:a7:6d:a7:03:49:1b:fd:05:ca:
a0:5f:1b:56:a3:20:f4:91:14:62:23:6f:02:b3:a1:
3b:bc:8d:23:a0:70:51:41:12:46:c8:fb:7c:f4:9b:
11:6e:41:e7:3d:3a:7f:8a:30:ee:cd:04:05:fa:ef:
07:93:c8:11:ca:a1:44:5e:7f:b9:dc:87:17:32:61:
49:c5:1f:92:57:e1:6e:c8:ca:2e:ec:f6:b5:b5:e8:
05:48:75:8d:fa:03:49:fb:5d:30:d0:78:bc:19:6a:
97:35:eb:30:b8:51:40:75:98:cb:eb:52:0c:46:03:
2e:e8:9d:ee:55:a5:b2:a0:13:f4:53:b5:4b:cb:19:
9a:41:28:7c:0e:8c:d4:ae:5b:4c:be:2e:b8:87:09:
b0:a8:82:aa:f1:3a:a8:41:2f:8a:7b:24:14:4f:b9:
25:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:33:0D:77:68:39:8B:3E:05:7A:8B:0E:2B:FD:89:BD:66:56:A3:B9
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/IzMNd2g5iz4FeosOK_2JvWZWo7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.48.0/22
45.131.12.0/22
45.134.92.0/22
Signature Algorithm: sha256WithRSAEncryption
81:eb:d0:8f:c6:92:9c:d5:39:2b:9b:34:39:e5:d3:70:e8:2c:
4b:44:de:35:c2:48:d9:cb:58:f5:33:05:8a:a0:e6:9c:e7:5c:
a7:b4:ab:0b:0d:37:e5:ed:bb:0e:a6:4c:e3:cc:4c:f8:fe:48:
18:bf:3e:5e:23:34:dc:1c:10:df:d3:3a:1b:3e:92:12:1e:c1:
81:b0:c6:5c:a9:26:18:dc:85:21:f8:69:0e:9c:71:9c:77:f1:
cc:43:c6:85:dd:89:80:69:2f:f6:3f:a8:64:87:cb:81:bc:af:
b8:69:59:52:b5:12:dc:7d:71:23:e6:ba:bb:65:86:b9:11:4d:
07:50:60:95:9c:78:bf:34:50:fb:22:41:7d:3c:e3:3c:ff:17:
2f:cf:17:95:14:3f:c0:03:37:d6:84:9e:21:23:e9:b8:b5:8a:
a3:bc:c1:57:f2:12:32:ac:7f:54:c5:52:54:9a:6c:c0:de:9e:
62:7d:fa:33:5f:38:a3:e8:75:16:98:97:4c:ca:20:76:be:b1:
22:d4:09:7b:88:7b:9d:c0:68:4e:b7:4e:79:13:61:04:3d:29:
f9:68:f2:7a:0b:96:8c:d4:24:db:ff:1b:67:17:97:7f:3a:b0:
0f:7a:be:80:ad:62:02:1a:74:21:0b:30:88:c8:cd:6e:6d:82:
1e:ad:02:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:02 2024 by rpki-client on console-fra.rpki-client.org