Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/IvT-TVKGoiAqMDuezGjiXb7_ZvM.roa
File: IvT-TVKGoiAqMDuezGjiXb7_ZvM.roa (raw, json)
Hash identifier: WrQ/YaAHn6CW2h7lcTWkrgd/PrieRK2IFIUsTCp13Co=
Subject key identifier: 22:F4:FE:4D:52:86:A2:20:2A:30:3B:9E:CC:68:E2:5D:BE:FF:66:F3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018D0D303C31FAFF3B5BC6A30FBE14F0F4D5
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/IvT-TVKGoiAqMDuezGjiXb7_ZvM.roa
Signing time: Mon 15 Jan 2024 12:54:41 +0000
ROA not before: Mon 15 Jan 2024 12:54:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.157.211.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 15:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:30:3c:31:fa:ff:3b:5b:c6:a3:0f:be:14:f0:f4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 15 12:54:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22f4fe4d5286a2202a303b9ecc68e25dbeff66f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:cf:a9:92:e3:d7:4d:dd:75:ef:cb:f5:76:
73:fc:bd:cd:51:10:a0:f8:07:59:07:85:24:1d:31:
16:d8:77:68:0e:f6:eb:b9:92:b4:20:e7:ef:2e:cb:
2c:d9:c9:19:69:65:0d:fc:bc:d1:23:06:79:37:c8:
3d:f3:a0:d7:8c:02:50:f1:27:71:fd:88:92:10:07:
7e:f6:6d:7a:c8:5d:e8:c9:78:68:d8:f8:05:c0:4c:
2a:25:95:ff:3a:87:46:9a:ed:c1:67:21:d1:b8:ae:
8e:18:14:f3:08:e7:3d:8c:9b:4f:db:25:a6:0c:97:
b3:fa:b4:12:1a:09:22:a0:5b:3b:46:2f:0b:88:b8:
11:8c:a0:2f:78:72:db:1c:3b:11:47:e6:ab:81:c4:
74:2f:52:34:b4:f6:b8:ad:20:70:f7:44:10:77:ee:
6f:d6:f2:9a:37:84:47:2a:e3:1f:b2:44:b6:2f:b0:
21:79:3e:7a:fb:ab:81:b1:28:1c:1b:a7:8b:11:06:
3e:d4:21:93:9f:24:ec:ea:2a:6b:bc:ba:fc:d4:ea:
9e:b3:44:a5:41:0a:d2:27:49:ef:ed:d8:09:f8:de:
ca:61:c6:f8:34:50:ea:26:3d:57:c6:36:af:7a:c1:
8f:28:6c:c1:0a:68:45:9d:6a:4a:78:0a:cd:2e:35:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F4:FE:4D:52:86:A2:20:2A:30:3B:9E:CC:68:E2:5D:BE:FF:66:F3
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/IvT-TVKGoiAqMDuezGjiXb7_ZvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.211.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:2c:cc:b0:be:8e:c1:ab:37:99:30:ed:95:d0:af:15:7e:07:
64:ba:6e:7a:44:d1:62:62:43:42:44:ca:d5:d7:ab:46:78:14:
01:c7:9d:cf:bf:73:c3:73:77:73:dd:1f:ee:a1:d6:89:24:4b:
51:17:cb:85:1e:ef:e9:4b:a6:81:fd:82:3c:9e:bd:5d:90:ee:
61:4f:5c:09:ee:e9:04:85:49:80:3b:63:6a:14:1e:5c:27:8c:
d9:e1:ea:af:56:84:4b:73:41:d3:91:df:cb:55:e4:54:65:54:
43:ad:37:61:14:97:28:0c:ec:63:25:20:07:6e:39:00:a4:a3:
00:15:9a:23:19:54:d5:94:48:dd:84:fb:6e:ec:ad:6f:1c:cc:
e8:6a:06:c7:8d:34:cb:55:6f:27:46:31:6d:5b:bc:0d:49:5e:
83:a9:2f:64:61:e7:bc:d5:1f:10:1b:c2:56:aa:a5:2d:a2:4d:
2a:00:2b:bc:a6:f6:b3:84:c1:09:67:9e:90:3a:da:d2:a9:4d:
f0:9f:7f:61:ae:2b:89:e1:a8:42:fd:2a:67:5a:71:db:1c:06:
b7:33:ba:c2:cd:fa:11:4e:e2:60:12:54:24:a1:4f:ab:40:5b:
fb:7a:37:1b:c6:4a:10:53:8f:00:9a:ea:45:00:b7:12:df:4a:
63:49:39:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org