Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/iyLmGxgYKhIM5T5NxJzWqSyRH2I.roa
File: iyLmGxgYKhIM5T5NxJzWqSyRH2I.roa (raw, json)
Hash identifier: uJtFbHbZbWUn54JrE1AQOauM3w6Q21fR+Mc4BWIzbCc=
Subject key identifier: 8B:22:E6:1B:18:18:2A:12:0C:E5:3E:4D:C4:9C:D6:A9:2C:91:1F:62
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 0189973C6D027E75E9D3208A37C7BA553A59
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/iyLmGxgYKhIM5T5NxJzWqSyRH2I.roa
Signing time: Thu 27 Jul 2023 12:04:26 +0000
ROA not before: Thu 27 Jul 2023 12:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 45.85.204.0/22 maxlen: 22
45.134.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:3c:6d:02:7e:75:e9:d3:20:8a:37:c7:ba:55:3a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Jul 27 12:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b22e61b18182a120ce53e4dc49cd6a92c911f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a2:1a:37:0a:29:c5:ab:45:22:8b:0a:92:da:
b5:fe:36:bc:84:f4:8a:6d:5b:8a:51:81:fb:0b:08:
8a:d6:24:60:59:da:a9:1c:3d:66:d9:f3:6f:06:7c:
8c:d3:2d:2c:15:4f:32:1b:76:94:f2:1b:92:55:a4:
71:a3:76:bd:4b:43:8f:b6:4e:d0:6b:60:68:8a:1a:
af:b6:f6:ff:f1:3e:74:51:b9:d8:5a:76:de:30:44:
e1:a3:5e:05:c8:bd:15:2d:e8:c6:f5:c0:8a:dd:9d:
2a:d6:94:e1:e7:4e:70:0a:62:4e:85:11:d3:9c:e0:
9d:b3:95:2b:8e:7f:4f:24:14:e8:50:02:c7:ae:92:
99:d0:09:fd:39:7f:42:d5:18:46:44:a4:9c:c8:dd:
26:1f:bf:72:91:55:f6:89:77:93:99:f8:53:57:f1:
f6:64:3e:13:a0:8f:1b:5b:d3:0d:16:e5:f9:b9:ea:
ed:10:fe:45:c2:1b:a3:7a:f1:c1:f4:36:7a:81:6d:
64:08:c2:b9:e2:0b:81:5b:57:c7:83:81:c1:5d:61:
78:0c:58:df:b2:fe:8c:a4:2b:d7:aa:3b:2e:0b:03:
0f:db:c6:0f:65:ee:03:e0:06:24:b5:32:1b:39:85:
97:8d:64:85:f8:8e:d7:48:2d:e2:6f:24:d8:68:ea:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:22:E6:1B:18:18:2A:12:0C:E5:3E:4D:C4:9C:D6:A9:2C:91:1F:62
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/iyLmGxgYKhIM5T5NxJzWqSyRH2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.204.0/22
45.134.92.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:4b:16:4d:35:00:30:c4:1f:1f:0b:67:1a:ed:59:87:22:5c:
7e:29:32:99:f2:5c:2c:00:30:ef:2a:5a:83:33:12:46:63:57:
b8:91:13:65:89:1d:96:6f:37:b2:f9:70:06:57:4a:2b:b8:84:
2a:2b:01:8e:ed:32:b9:76:c0:c9:dd:90:57:00:34:b8:33:51:
9a:82:e6:b0:0f:5e:08:a9:0d:84:3a:30:cd:4b:12:83:46:99:
80:e9:6d:80:c9:7c:9b:c0:f4:86:fd:7f:98:aa:d6:f8:5a:25:
58:03:38:e1:7b:6d:b5:7b:33:de:7a:90:d4:43:f6:d9:ce:68:
c5:3f:a0:cd:7c:4f:b0:7b:c1:5c:cc:69:53:eb:44:12:54:e9:
26:2d:12:06:60:9f:91:15:d0:f3:7b:f1:fa:fe:d2:14:70:30:
d5:af:df:d7:b1:55:aa:5c:6a:0b:05:03:f0:23:25:31:06:ff:
5a:e5:3d:df:60:af:11:c1:ea:2c:c4:c6:0e:45:50:50:f3:b3:
af:62:e2:11:f0:28:17:9f:0d:e5:e9:b3:bc:01:32:ae:d1:ac:
a1:75:b5:21:77:9f:55:11:2d:2c:9b:96:1d:dd:a0:f5:57:4a:
fc:4f:d0:52:ee:bc:da:a9:5f:28:1f:49:ac:20:07:e2:9b:89:
da:2d:f3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:00 2024 by rpki-client on console-ams.rpki-client.org