Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/DVQYURpsKqQI1RXQHvJ0cTozwBo.roa
File: DVQYURpsKqQI1RXQHvJ0cTozwBo.roa (raw, json)
Hash identifier: vZxLX/BT0t7b8DvSVQvd/N/NOMdQRyNtAP7HAKXBuEQ=
Subject key identifier: 0D:54:18:51:1A:6C:2A:A4:08:D5:15:D0:1E:F2:74:71:3A:33:C0:1A
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018D8872688747DA4B8E718849E6DC7D9F15
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/DVQYURpsKqQI1RXQHvJ0cTozwBo.roa
Signing time: Thu 08 Feb 2024 11:20:15 +0000
ROA not before: Thu 08 Feb 2024 11:20:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57604
IP address blocks: 45.141.208.0/22 maxlen: 24
45.150.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 14:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:72:68:87:47:da:4b:8e:71:88:49:e6:dc:7d:9f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Feb 8 11:20:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d5418511a6c2aa408d515d01ef274713a33c01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:e9:38:7e:b2:47:82:c4:4a:d0:c7:5d:39:
a7:00:30:3b:1b:0c:54:c6:4c:61:03:a6:74:2a:40:
87:68:29:be:7b:8c:9d:52:84:06:c0:24:9d:2b:1a:
69:79:82:be:cb:c5:4b:0d:76:3f:08:40:0b:e6:eb:
dd:ee:bc:7d:d2:a1:2f:a9:08:ca:d4:f8:0e:d6:e3:
59:c6:b6:b5:95:85:9d:29:33:e0:dd:76:31:62:d9:
37:f3:a5:24:bf:29:ab:1d:47:94:f0:47:1a:de:d1:
92:80:0f:db:d4:2f:e1:28:25:28:94:2a:71:0a:28:
1c:3c:6f:4f:5b:84:56:bd:58:86:99:75:c9:ca:e6:
4d:87:8b:5a:8c:d0:70:60:c7:6b:d1:84:aa:17:b0:
38:8c:0b:67:a2:3d:fe:94:b1:1a:69:d3:c4:fd:3f:
6e:1f:60:c3:c6:20:70:ad:11:fc:94:fe:e4:75:da:
8d:60:fe:37:ce:da:77:6a:e8:1c:0a:72:d9:32:42:
7b:56:48:c5:32:e0:e4:59:34:ab:cf:29:c9:e0:75:
6f:8c:38:f0:f1:8c:50:0d:da:a1:55:37:de:51:45:
20:59:c9:41:8c:8a:c5:02:2f:e1:c7:87:45:1e:ae:
e6:10:68:7d:95:7e:7f:1a:d2:76:88:89:28:09:66:
25:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:54:18:51:1A:6C:2A:A4:08:D5:15:D0:1E:F2:74:71:3A:33:C0:1A
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/DVQYURpsKqQI1RXQHvJ0cTozwBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.208.0/22
45.150.8.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:51:dc:f2:e7:2e:1e:0f:c4:7f:70:cf:10:1b:c9:f4:8c:b5:
8a:59:19:04:e2:3d:95:d9:32:58:c3:bc:90:d1:62:92:bc:44:
24:98:a7:0e:5a:7a:fc:ca:bd:57:c7:88:84:6d:8d:dd:52:2c:
79:ae:48:85:75:8b:c0:5c:be:25:97:f2:9f:1f:0e:e2:68:53:
3f:22:bc:fa:24:e2:b1:45:9f:2b:34:96:15:1e:72:bb:1b:86:
86:d8:e0:30:53:ef:96:63:21:5e:93:38:26:08:1c:b5:c2:6b:
c9:57:ff:0e:45:47:c3:4c:df:13:d1:43:ad:cb:d6:a5:56:ef:
f3:58:5a:c9:b1:ce:8a:35:27:5b:da:7f:03:e2:af:ad:ef:d7:
12:fe:b6:25:d3:2f:51:54:d4:b0:70:a2:cf:ee:1b:9b:79:26:
e0:20:3e:6c:2b:bf:c9:56:39:ec:e6:74:2d:35:f6:c7:63:f8:
23:ec:35:6e:38:ca:f0:44:e6:c1:4e:11:92:c8:56:77:88:d0:
26:f0:71:57:01:5f:98:0b:fa:a2:9e:59:d4:63:07:23:4b:7f:
3b:61:65:0b:32:67:78:dd:43:80:80:ef:05:91:de:0a:eb:19:
5e:8a:27:52:eb:65:70:07:79:72:10:af:3f:8a:bc:f4:43:a9:
35:35:67:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 19:53:57 2024 by rpki-client on console-ams.rpki-client.org