Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/O4TzIQUou4ZoRmiVjKKqIILwR2I.roa
File: O4TzIQUou4ZoRmiVjKKqIILwR2I.roa (raw, json)
Hash identifier: MkkkJ4gZi/d75KBZu3L0SZVExViQ7EruJiPx/1TLOjE=
Subject key identifier: 3B:84:F3:21:05:28:BB:86:68:46:68:95:8C:A2:AA:20:82:F0:47:62
Certificate issuer: /CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Certificate serial: 01856DDD630BE73B72DF9C9C561CFF25DEBC
Authority key identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/O4TzIQUou4ZoRmiVjKKqIILwR2I.roa
Signing time: Sun 01 Jan 2023 15:05:03 +0000
ROA not before: Sun 01 Jan 2023 15:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48437
IP address blocks: 45.14.28.0/22 maxlen: 22
195.22.140.0/23 maxlen: 23
185.175.244.0/22 maxlen: 22
91.200.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:63:0b:e7:3b:72:df:9c:9c:56:1c:ff:25:de:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Validity
Not Before: Jan 1 15:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b84f3210528bb86684668958ca2aa2082f04762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:c8:96:31:e1:20:66:16:7a:dd:76:2e:af:
30:30:54:7e:78:96:21:68:4f:05:83:66:7c:55:21:
3d:a8:8d:d0:05:05:82:e6:34:f0:74:72:60:bf:ec:
b6:d3:5d:71:a4:44:b5:d6:75:1f:9f:92:c5:2f:2b:
66:12:55:ed:e5:49:7d:70:5e:60:d7:6c:b7:96:35:
af:b4:f4:16:8a:d6:d8:41:73:7f:d1:e1:ea:4e:26:
93:6c:63:15:39:86:88:bc:f8:5d:21:36:df:7e:33:
d2:16:27:01:c6:32:c9:66:56:b0:96:39:d1:06:ce:
b1:84:dc:17:b8:39:eb:5a:86:ce:37:09:dd:37:9e:
84:10:bf:54:05:0e:a0:c2:63:66:7c:13:97:3c:fc:
e0:fa:d3:c9:80:c1:58:da:94:8d:3d:4e:a7:1a:05:
8b:dc:b7:f0:cb:b7:73:84:64:29:58:c8:0e:4f:92:
aa:0f:59:fb:7d:ad:2b:ed:a0:61:65:05:e3:9a:26:
57:d6:29:21:4d:2b:95:99:87:70:a2:45:a6:e7:d3:
40:6f:84:96:7d:d6:cc:08:ed:e2:8e:d8:38:25:35:
c5:e1:97:f8:b7:7f:ab:f5:89:f8:20:97:25:20:d9:
66:18:ef:be:1a:14:f9:e8:04:10:67:61:4d:52:27:
5b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:84:F3:21:05:28:BB:86:68:46:68:95:8C:A2:AA:20:82:F0:47:62
X509v3 Authority Key Identifier:
keyid:B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/O4TzIQUou4ZoRmiVjKKqIILwR2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.28.0/22
91.200.8.0/22
185.175.244.0/22
195.22.140.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:39:cc:3b:93:c5:e6:ee:24:5d:b8:7a:d6:9a:93:ea:0f:ef:
f2:56:06:a5:ae:3b:09:84:c6:04:25:45:92:ac:66:d8:3c:c9:
eb:ef:7a:f6:fc:a0:3b:7c:dc:9b:b9:b4:87:79:ae:27:f9:5f:
e8:75:09:fc:3c:24:6a:8f:16:91:ea:43:72:53:8b:e3:81:95:
0f:94:74:4f:ce:38:23:f9:b6:5f:cd:04:fb:84:0f:06:16:9c:
a5:b6:3a:fc:20:b5:f6:2a:1d:81:54:7a:6b:89:c0:24:93:09:
0e:13:6d:65:bc:96:eb:45:e1:41:94:88:85:28:51:75:b8:30:
62:aa:ff:90:34:58:50:ad:89:4e:44:40:c7:28:30:a2:5b:e2:
5a:2f:12:6a:ca:40:04:e3:61:4f:d3:a0:36:43:6f:c3:40:52:
cc:7d:f8:16:38:c8:41:90:22:1d:65:3a:6a:5c:4f:4c:b5:69:
af:47:91:7f:ef:80:d1:6e:8c:8b:89:f1:6c:39:15:5d:c0:49:
db:15:9e:0a:03:09:7a:63:da:b8:aa:55:6b:fa:3c:f4:a0:31:
d9:1d:3c:4b:c6:3e:cb:33:15:88:8c:12:9b:f0:4d:2c:4c:27:
f5:f1:06:6f:4d:1a:ca:70:dd:f2:07:89:63:00:ad:54:90:8f:
78:48:0a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:56 2024 by rpki-client on console-ams.rpki-client.org