Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/IhwFjpRftjxESLOU7Vm2dsvhfB4.roa
File: IhwFjpRftjxESLOU7Vm2dsvhfB4.roa (raw, json)
Hash identifier: yohCpomqb1rR8tp0dKEz8UgDqxiLn0SFR6HVkvZaJRk=
Subject key identifier: 22:1C:05:8E:94:5F:B6:3C:44:48:B3:94:ED:59:B6:76:CB:E1:7C:1E
Certificate issuer: /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial: 018F623C1A393FB84296FBC16ECD44AD6DBA
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/IhwFjpRftjxESLOU7Vm2dsvhfB4.roa
Signing time: Fri 10 May 2024 11:20:56 +0000
ROA not before: Fri 10 May 2024 11:20:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42032
IP address blocks: 45.14.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 17 May 2024 22:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:3c:1a:39:3f:b8:42:96:fb:c1:6e:cd:44:ad:6d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
Validity
Not Before: May 10 11:20:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=221c058e945fb63c4448b394ed59b676cbe17c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:00:f6:f4:a5:b2:63:03:b4:30:56:12:73:
57:55:a0:67:be:d1:08:32:40:5b:8d:95:8c:d0:7d:
df:77:9c:f6:19:f0:7e:00:12:f3:25:50:d1:bd:46:
4e:94:19:f2:c6:cb:81:9e:0e:90:4f:a6:ca:62:b7:
33:fb:79:d6:8f:38:64:aa:13:ab:d3:81:de:af:1d:
25:a5:67:89:16:a7:84:b3:91:8b:e5:ee:45:7d:80:
d5:99:42:76:d8:71:c1:e5:8d:c0:ab:f6:b6:2b:7b:
7b:f4:83:aa:5a:7b:89:a4:db:59:33:8f:bc:cf:52:
1d:d6:22:a0:61:07:98:da:94:0e:47:e9:e9:99:a1:
13:1d:f4:53:eb:9c:4c:ef:6f:72:9d:1a:37:c4:94:
b9:b5:25:cb:d9:bc:eb:ab:17:e4:09:23:da:b4:ff:
ac:f8:3e:7f:f9:41:2d:92:be:9e:3a:ca:79:0b:02:
74:ac:0c:cc:bc:17:c5:c1:56:dd:34:99:0f:2e:e6:
fb:2b:b1:e0:d6:ef:8c:ac:07:1b:3f:c6:9f:1c:3a:
61:df:70:07:61:92:8c:c2:53:5e:f6:0e:41:a5:6c:
8c:35:12:99:79:6e:cb:fd:1e:96:8c:09:40:73:b1:
8e:b8:c0:16:3c:4a:38:4b:fd:00:3d:40:14:d6:47:
03:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1C:05:8E:94:5F:B6:3C:44:48:B3:94:ED:59:B6:76:CB:E1:7C:1E
X509v3 Authority Key Identifier:
keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/IhwFjpRftjxESLOU7Vm2dsvhfB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.60.0/22
Signature Algorithm: sha256WithRSAEncryption
73:39:22:f7:8d:3a:32:50:21:e5:a9:fc:25:c6:ba:2c:18:e5:
be:45:0b:aa:2e:25:8d:ae:5e:59:65:6a:3d:3a:db:69:39:de:
a0:f6:88:16:d6:95:cd:76:cb:da:16:37:e8:a8:c6:2c:96:df:
9c:c1:81:21:fa:de:09:23:96:62:01:5f:94:40:5a:3f:fc:45:
4c:97:25:88:da:e1:63:bb:9d:29:67:23:41:a4:8f:70:d5:39:
5d:72:f5:e2:1a:34:ba:12:68:b1:77:8a:b0:b7:92:cd:76:bd:
86:0e:1b:05:dc:e3:2d:6a:47:a5:b5:ce:35:fe:99:83:b2:90:
51:b6:6e:33:3b:58:be:8b:9e:a9:88:ba:bb:7d:90:84:5e:32:
89:7d:4f:0a:03:5c:bc:dc:20:a5:71:7a:76:9d:ba:ca:30:b6:
e9:2e:c6:40:00:e4:b2:fb:bd:7f:9a:d2:73:4e:37:8c:0b:f1:
98:b1:db:6a:29:92:19:05:87:03:bf:c6:fc:94:97:76:0a:5a:
de:00:8a:80:c6:2c:d1:5f:b5:9f:e5:4f:a4:60:d8:a8:38:14:
fb:3f:3b:61:9d:ea:9a:e0:32:f4:cd:3e:6b:6d:51:a8:7f:d8:
3d:fb:b2:92:08:88:91:0d:8b:42:a7:62:69:28:d4:72:f1:60:
a8:9a:3a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:54 2024 by rpki-client on console-ams.rpki-client.org