Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iqiKsRPTXUwPj0_xV8tzeKrPy2s.roa
File: iqiKsRPTXUwPj0_xV8tzeKrPy2s.roa (raw, json)
Hash identifier: uAN1A4UGiPl7AcHAHkK/f84lsfSo+rFIk6ec7FZQKqs=
Subject key identifier: 8A:A8:8A:B1:13:D3:5D:4C:0F:8F:4F:F1:57:CB:73:78:AA:CF:CB:6B
Certificate issuer: /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial: 018D1CBB946EBC5DB39CE9EB00F3538079E5
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iqiKsRPTXUwPj0_xV8tzeKrPy2s.roa
Signing time: Thu 18 Jan 2024 13:21:11 +0000
ROA not before: Thu 18 Jan 2024 13:21:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204995
IP address blocks: 45.13.220.0/22 maxlen: 24
45.13.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 12:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:bb:94:6e:bc:5d:b3:9c:e9:eb:00:f3:53:80:79:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Validity
Not Before: Jan 18 13:21:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8aa88ab113d35d4c0f8f4ff157cb7378aacfcb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:ce:6f:0b:f2:5f:3e:d7:f0:87:e2:48:0e:
87:d6:71:e5:51:ff:91:01:dd:a0:6b:b1:f8:c0:f1:
4d:a0:91:17:3b:e4:6f:fe:8d:5a:b0:e0:59:c8:53:
e5:57:1a:82:f5:aa:a8:66:27:ee:71:e2:56:1f:eb:
ae:f4:54:a1:87:1d:50:6a:4c:94:29:06:bd:b4:98:
d6:f1:2b:5f:ea:c1:72:37:df:34:f6:68:e4:42:df:
b6:ba:a1:6d:b2:30:dc:72:c2:a0:d3:0a:64:4d:ef:
55:58:82:5e:35:2d:e9:5f:95:c3:46:82:b6:d2:31:
40:58:e5:75:10:6a:86:21:74:8b:10:fe:30:3c:db:
e4:da:e5:98:ec:7c:29:d0:1a:70:6a:f4:59:fb:15:
8e:b5:bb:de:b9:55:d8:59:04:80:17:97:6c:98:0a:
25:e4:fb:06:ca:e1:c4:73:e1:3c:e7:4a:b5:34:98:
d9:c2:f9:63:c5:80:5e:fc:95:04:06:f2:a6:60:b8:
ce:22:9d:2e:0f:7c:99:95:85:84:a2:e4:87:61:b8:
34:01:51:a6:8f:41:57:44:3d:34:15:b1:42:14:ac:
a3:f2:96:59:99:82:ab:b4:54:c4:c2:0b:24:b0:ce:
e7:3a:7e:fc:58:25:4f:2a:19:38:41:71:e4:81:66:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A8:8A:B1:13:D3:5D:4C:0F:8F:4F:F1:57:CB:73:78:AA:CF:CB:6B
X509v3 Authority Key Identifier:
keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iqiKsRPTXUwPj0_xV8tzeKrPy2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.220.0/22
Signature Algorithm: sha256WithRSAEncryption
92:c1:94:ca:98:ed:d4:54:96:a2:20:e6:f7:7d:b6:9c:62:35:
7a:b4:db:e3:ee:3c:cc:ea:4a:c6:41:34:60:1d:ea:16:03:26:
4b:23:5a:ff:93:cc:44:e5:91:ca:61:11:c1:be:08:84:62:9b:
88:b4:24:38:92:24:15:bc:9f:87:7f:85:74:f5:60:62:f9:fd:
1a:8e:ff:4f:73:a3:99:3e:24:a0:a2:02:3d:c8:a8:a4:89:17:
56:b2:28:87:1e:fd:a7:85:10:1b:63:80:38:52:40:8e:24:7f:
d0:b1:26:c2:fd:71:94:13:44:de:62:56:f4:e4:a4:04:47:29:
92:3c:d2:be:75:d5:d3:b4:6e:c9:26:f0:f7:46:ca:98:1b:15:
4d:be:38:be:af:78:d3:ad:90:bf:67:a0:f3:07:39:46:a5:c8:
60:a7:44:63:13:b6:ee:f8:23:11:9a:96:d8:d3:26:b9:87:14:
89:57:42:e6:84:30:a9:36:73:af:36:9f:7b:a0:d4:b5:82:88:
b9:ee:ce:df:10:af:4b:3b:89:ca:b1:ad:7d:9d:f0:8d:8f:8d:
a8:83:42:d8:5b:c8:11:f7:76:31:c6:4a:fc:88:35:20:15:28:
04:99:b3:95:7f:52:74:c0:6e:d1:ba:63:02:bc:3e:c1:90:d8:
f4:42:80:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:19:02 2025 by rpki-client