Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/2IBMI1hhB1eCRezNXwBGrldZX4Q.roa
File: 2IBMI1hhB1eCRezNXwBGrldZX4Q.roa (raw, json)
Hash identifier: Yz/5+6nznGXEdUUHs+AYQbMc6Oq425COhbZ4t9Vbrok=
Subject key identifier: D8:80:4C:23:58:61:07:57:82:45:EC:CD:5F:00:46:AE:57:59:5F:84
Certificate issuer: /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Certificate serial: 01926CE444ACA419DF00D435BCDB2CCDB452
Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/2IBMI1hhB1eCRezNXwBGrldZX4Q.roa
Signing time: Tue 08 Oct 2024 16:09:11 +0000
ROA not before: Tue 08 Oct 2024 16:09:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214277
IP address blocks: 45.156.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 10 Dec 2024 15:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:e4:44:ac:a4:19:df:00:d4:35:bc:db:2c:cd:b4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Validity
Not Before: Oct 8 16:09:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8804c23586107578245eccd5f0046ae57595f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2e:53:b1:a8:97:fd:eb:33:12:20:ff:ec:4f:
87:9d:07:d5:c9:8b:c3:9d:4a:eb:07:47:b1:1c:39:
c3:1e:d0:d8:3f:02:44:8d:55:a8:83:20:b3:19:21:
47:90:b4:3e:27:08:f0:9b:a8:ea:b6:f0:bc:41:b7:
c8:5c:32:fa:45:13:46:da:4d:1b:f0:a8:f0:1a:bf:
96:86:aa:89:81:9e:0a:23:0e:c6:70:47:f3:d1:55:
c9:10:10:80:6b:d5:71:14:53:73:b7:6a:94:22:7f:
9a:4a:6e:6c:c1:72:51:17:44:96:6c:9d:1f:c4:92:
b6:94:c8:a4:04:44:d9:e0:8e:21:c3:22:c5:2f:59:
c8:dc:5d:43:43:f7:79:f6:c1:55:96:82:a4:c6:c7:
c2:d3:09:04:87:9a:98:62:72:23:93:20:ea:6a:fb:
2d:b7:6f:2c:78:97:81:fd:56:28:00:02:87:87:76:
9f:b7:b1:58:e0:25:b7:4b:dc:9e:4e:8b:a8:63:22:
a9:ea:93:28:d0:c2:f0:0d:4b:98:30:1f:9d:c9:d9:
be:55:bf:42:2e:e1:d8:c3:16:80:83:2f:25:f7:7e:
60:10:f3:1b:ab:dd:c3:f1:02:61:3a:7d:f4:80:21:
49:69:b0:8a:8a:10:22:15:e8:90:db:34:71:64:d3:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:80:4C:23:58:61:07:57:82:45:EC:CD:5F:00:46:AE:57:59:5F:84
X509v3 Authority Key Identifier:
keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/2IBMI1hhB1eCRezNXwBGrldZX4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.200.0/22
Signature Algorithm: sha256WithRSAEncryption
65:16:fb:1f:a6:c9:5f:97:32:27:83:f1:4c:51:80:e2:41:ad:
56:46:d0:98:0c:18:d2:b7:58:33:32:57:a9:03:4d:f9:36:de:
04:1d:46:77:bb:fa:8b:f0:67:55:c0:12:80:da:30:7e:61:7a:
1c:b0:3e:c8:27:92:92:3e:3c:3b:7b:ab:57:4e:58:2e:63:76:
97:dd:9a:9a:6b:2b:f5:2b:a0:c5:21:a6:27:30:32:b7:b8:4c:
79:2a:f5:0c:88:71:97:41:2c:34:cb:b4:a7:e5:64:48:63:da:
bf:95:95:2f:7d:79:48:e0:ad:03:2d:d9:2d:b0:71:86:15:2a:
14:79:a1:78:3e:d0:6a:cd:3d:8e:82:bb:61:5a:a9:c6:2a:5e:
49:53:0e:10:fb:35:55:d9:65:96:af:c2:3a:29:0e:c4:f1:32:
70:a7:b9:95:91:f9:f0:7c:c5:47:fc:24:0a:51:46:fa:74:ec:
59:50:8e:58:da:a6:ff:93:32:6f:33:65:45:56:b7:5a:3a:31:
9b:7d:57:6c:ce:02:5d:e5:69:f5:d6:90:2a:fe:48:4f:1d:80:
b7:9f:d1:18:d4:c8:bf:17:72:ee:05:c4:11:9f:0c:43:c0:ec:
53:be:8d:db:36:3e:c8:d2:9c:e2:23:dd:db:04:8b:99:38:46:
bc:00:ce:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:06 2025 by rpki-client