Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1_5KIQejLLgqffyqi62W5nyqhmM.roa
File: 1_5KIQejLLgqffyqi62W5nyqhmM.roa (raw, json)
Hash identifier: AYxKLoigHACYPcF9hyL+/SFo8wEe8C9sxFnax4pcP1Y=
Subject key identifier: D7:FE:4A:21:07:A3:2C:B8:2A:7D:FC:AA:8B:AD:96:E6:7C:AA:86:63
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC493456903BAB7CE1D8F8539151B154D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1_5KIQejLLgqffyqi62W5nyqhmM.roa
Signing time: Mon 01 Jan 2024 10:30:34 +0000
ROA not before: Mon 01 Jan 2024 10:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400536
IP address blocks: 45.88.12.0/24 maxlen: 24
45.88.14.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 13:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:45:69:03:ba:b7:ce:1d:8f:85:39:15:1b:15:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7fe4a2107a32cb82a7dfcaa8bad96e67caa8663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:78:6f:04:5d:a4:bd:31:c3:f9:ed:b9:8f:d5:
fc:c8:a6:d3:27:b3:3f:03:e3:2e:36:be:a2:76:e4:
01:59:ce:b6:af:cf:4e:05:0c:0c:b7:d0:f3:bb:d8:
e9:8e:60:19:c9:e0:3c:71:bf:bd:98:66:89:dd:92:
ab:0e:09:6f:f1:a4:8d:51:2a:4b:ce:a1:3b:3f:5f:
b4:c4:6d:4e:97:95:d8:a1:1a:50:ba:8c:ba:7a:b4:
f2:f3:bd:ed:78:07:d4:25:2b:45:f6:f5:41:92:4d:
d1:c1:26:b1:6e:e9:da:bd:a8:10:55:de:4e:f3:45:
98:cb:b0:61:8f:71:b2:32:c5:89:ba:85:64:93:48:
60:3b:4b:57:7c:d4:4b:70:cb:80:16:74:8a:6c:db:
20:53:b6:fb:b5:37:01:85:8f:0d:64:ae:c5:ee:7b:
9b:a4:32:e2:c7:9b:29:ae:4d:ff:13:70:e3:ee:e2:
33:c9:f8:76:02:3e:d3:f8:db:8d:2a:d0:c7:d4:45:
0a:b3:a1:82:84:30:5f:10:ed:f1:ee:4b:e3:e3:a9:
94:37:d1:f3:b1:79:da:bf:f3:3c:d2:62:54:e1:50:
98:ca:f3:c1:2d:40:1c:11:da:21:96:b6:5d:e8:f8:
e0:61:4a:e3:37:36:d9:72:98:2e:89:55:61:cc:b5:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FE:4A:21:07:A3:2C:B8:2A:7D:FC:AA:8B:AD:96:E6:7C:AA:86:63
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1_5KIQejLLgqffyqi62W5nyqhmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.12.0/24
45.88.14.0/23
Signature Algorithm: sha256WithRSAEncryption
32:4a:59:ee:b5:59:fb:97:56:08:de:75:26:5a:98:fa:60:08:
88:24:55:7d:51:5b:a1:fd:8b:02:d8:a4:dc:d3:f7:90:1b:ce:
4b:dc:52:74:8f:ea:b6:8a:af:19:3b:2a:eb:7a:40:d5:20:94:
2e:fe:a3:54:76:93:82:8d:9e:27:3d:a1:b2:ae:27:e0:39:51:
24:ed:b6:79:fc:cf:f3:51:0d:35:70:4a:b8:14:76:3c:aa:0e:
17:6d:b2:62:ca:df:7a:fb:2e:f2:fd:4c:61:6a:5b:39:af:52:
59:49:cc:41:b5:18:f3:dc:fd:e3:d3:e3:bc:7c:81:a2:b4:35:
79:cc:cd:15:92:32:2f:97:45:a3:3d:ba:83:f6:a1:53:16:be:
3b:c6:55:8a:27:9a:02:75:ce:38:b0:6c:6f:5d:25:55:60:c1:
f9:d9:1c:25:5c:57:83:fb:41:94:b6:f2:6d:5b:65:55:89:de:
40:4c:b0:18:14:16:14:2b:7b:0b:ae:0b:00:52:cd:61:8c:ce:
f8:63:97:4a:14:cd:8f:42:7d:5f:4a:2c:da:4a:9d:fa:44:64:
07:01:16:18:dc:29:2b:2b:d2:1e:4f:46:4f:b4:71:bd:f9:84:
3a:f2:94:64:b7:6b:91:43:79:82:95:b0:cb:e2:7e:3c:37:2d:
e5:77:49:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org