Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/Iy88cPiIpNifq3x_mg92IZTS4NU.roa
File: Iy88cPiIpNifq3x_mg92IZTS4NU.roa (raw, json)
Hash identifier: JEQ6aVAYOWSeAE5SLpgWTeRDiGSu/O6b8E7Qa9bWqXA=
Subject key identifier: 23:2F:3C:70:F8:88:A4:D8:9F:AB:7C:7F:9A:0F:76:21:94:D2:E0:D5
Certificate issuer: /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial: 01856FD51F38FE4E557D52DA409C9624AEB9
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/Iy88cPiIpNifq3x_mg92IZTS4NU.roa
Signing time: Mon 02 Jan 2023 00:15:16 +0000
ROA not before: Mon 02 Jan 2023 00:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51198
IP address blocks: 45.132.9.0/24 maxlen: 24
45.132.11.0/24 maxlen: 24
45.132.10.0/24 maxlen: 24
2a0e:6540::/29 maxlen: 29
2a13:7d00::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 May 2023 18:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:1f:38:fe:4e:55:7d:52:da:40:9c:96:24:ae:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
Validity
Not Before: Jan 2 00:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=232f3c70f888a4d89fab7c7f9a0f762194d2e0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:d1:70:a6:f6:17:de:dd:7b:77:52:63:0b:
be:58:64:c1:3b:f9:e4:5c:a9:53:b1:a5:26:60:44:
cc:91:c0:00:fe:40:6e:0f:97:65:96:f1:d4:28:1f:
fe:4d:d5:b9:32:5a:da:cf:59:fe:ce:76:7d:4d:37:
7c:11:5f:e5:0b:dd:33:dc:06:25:74:58:c9:e4:d2:
df:1e:d7:83:58:10:88:30:07:76:b3:97:ca:bb:92:
e7:03:c0:71:a5:70:e2:a1:a9:60:80:db:04:aa:a9:
e1:0e:63:51:e6:d1:84:83:1b:58:2f:86:63:0a:64:
d6:31:b9:90:55:eb:a5:47:02:14:4e:ed:8e:0e:33:
79:f6:73:3c:cc:94:f6:a4:9a:a0:35:28:07:10:b1:
93:4a:7a:ee:a4:30:fc:2f:84:a9:9e:4a:f6:3d:33:
9e:ce:33:7c:ae:14:f2:cf:92:1a:52:a5:97:c7:82:
17:d9:0c:f7:f7:f6:91:a6:46:95:09:06:54:f3:19:
95:f3:e0:78:02:8e:d3:e4:3f:54:e4:eb:86:ba:c0:
72:7f:4f:1b:85:d6:c9:72:62:39:5b:e1:2b:61:07:
7f:25:38:3a:75:5c:d9:9a:6a:1d:5c:92:0b:12:65:
ec:38:7e:82:92:df:93:4e:8d:f9:8e:d7:6d:25:28:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2F:3C:70:F8:88:A4:D8:9F:AB:7C:7F:9A:0F:76:21:94:D2:E0:D5
X509v3 Authority Key Identifier:
keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/Iy88cPiIpNifq3x_mg92IZTS4NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.9.0-45.132.11.255
IPv6:
2a0e:6540::/29
2a13:7d00::/29
Signature Algorithm: sha256WithRSAEncryption
02:c0:2c:3c:c8:4a:02:74:64:17:d0:9d:35:c2:6d:59:80:4e:
7e:04:35:4a:99:24:83:ad:31:e6:94:50:04:e3:4f:8d:d4:fe:
86:7b:8f:f0:b4:72:0a:f5:4b:b7:84:b0:7d:86:35:7c:00:d7:
31:66:95:fc:cb:ca:2e:37:35:40:c3:75:fd:ba:6f:f9:48:ad:
88:49:f9:93:cc:95:70:ac:bb:c5:9a:90:92:9c:8a:8b:5c:b2:
df:82:5e:95:64:b1:c5:7b:ba:3e:ef:de:56:96:fc:20:4d:5f:
aa:5c:d6:84:45:c9:1a:1e:cf:cd:b2:d8:07:dc:50:34:0b:d8:
40:74:69:30:bc:05:7b:ae:51:6c:5c:18:8c:ea:d4:05:2e:c0:
ed:21:dd:78:05:08:d7:2c:cd:ff:ec:a3:ec:fb:7b:e9:15:d3:
64:f0:b7:55:9a:96:27:dc:2e:6f:94:f4:22:1e:83:50:d3:65:
d7:fc:e6:59:90:9e:17:5d:24:fb:89:7d:a4:84:d9:aa:8a:8e:
95:a4:34:32:8b:89:7f:58:1b:52:fe:62:d6:22:3e:a2:af:41:
28:00:bb:07:23:ef:26:7d:bf:f2:4a:32:fc:74:7c:4f:13:3f:
42:b0:2a:f8:fd:5b:3a:30:f4:32:2e:fe:28:a1:de:8a:e1:db:
5e:09:f3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:18 2024 by rpki-client on console-ams.rpki-client.org