Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/Ksxeyp4fxfaKV7-rgvrjDCk5oWw.roa
File: Ksxeyp4fxfaKV7-rgvrjDCk5oWw.roa (raw, json)
Hash identifier: JjRh5gcEWzZnrRFdMKhTOPXRy8Q7wi5LeNoqEmDGlhA=
Subject key identifier: 2A:CC:5E:CA:9E:1F:C5:F6:8A:57:BF:AB:82:FA:E3:0C:29:39:A1:6C
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 0187462220D94B6FFC32068365EB586AE69D
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/Ksxeyp4fxfaKV7-rgvrjDCk5oWw.roa
Signing time: Mon 03 Apr 2023 08:00:54 +0000
ROA not before: Mon 03 Apr 2023 08:00:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32558
IP address blocks: 45.157.70.0/24 maxlen: 24
45.157.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:22:20:d9:4b:6f:fc:32:06:83:65:eb:58:6a:e6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Apr 3 08:00:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2acc5eca9e1fc5f68a57bfab82fae30c2939a16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4c:28:8b:48:20:8f:e3:29:ea:3c:1d:26:3b:
39:ab:15:7e:a6:b4:92:81:a8:25:46:87:a0:2a:85:
c9:2d:df:67:6d:26:44:6f:98:1d:b9:ce:35:66:2d:
d5:9c:f4:06:46:63:70:e8:a7:40:32:2a:78:7b:b2:
07:72:25:3d:09:fb:e5:43:03:54:c2:29:ab:6d:65:
3a:d8:73:2e:a1:f7:e8:bc:62:aa:d4:5c:af:46:33:
c0:29:03:31:2c:56:45:b0:ce:0a:13:64:eb:fc:69:
cf:25:9d:75:e1:d4:75:2b:30:f2:ca:ec:74:90:95:
c5:54:13:c8:5e:1e:0c:3d:c5:2d:62:b9:81:d3:cf:
5b:98:4d:20:e5:63:23:38:38:71:73:fc:d4:3e:5e:
f1:54:69:56:bc:64:60:73:42:e3:60:ff:53:a6:7b:
9c:72:75:c6:62:48:d3:8c:17:8b:c9:7a:da:c8:ab:
d1:69:23:35:9c:4e:e9:af:2f:4d:4b:00:3f:79:f5:
ed:22:82:8c:e6:76:29:e0:d2:08:86:54:5e:89:92:
e2:19:fb:64:c1:df:79:36:2c:79:47:b3:d1:d8:9a:
71:97:0b:2c:07:a5:f2:5c:72:04:66:af:c9:42:e1:
98:fd:3e:77:23:bd:d7:2e:a2:8e:97:18:ad:90:86:
c8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CC:5E:CA:9E:1F:C5:F6:8A:57:BF:AB:82:FA:E3:0C:29:39:A1:6C
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/Ksxeyp4fxfaKV7-rgvrjDCk5oWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.70.0/23
Signature Algorithm: sha256WithRSAEncryption
75:13:3c:84:c6:02:dd:86:a9:3b:a9:52:e2:4c:40:9a:64:72:
a0:e2:11:bd:1a:f8:0d:68:22:27:c0:ad:38:7f:43:15:fb:2b:
5b:7a:76:c6:a5:62:8f:79:03:42:bf:42:8e:f6:cd:81:20:6e:
75:10:10:a5:37:17:dd:5c:b6:99:20:30:62:9c:1b:f1:46:e2:
39:e0:17:24:25:22:0e:45:44:0b:f5:9d:b7:29:b6:b1:47:40:
22:c2:ed:4b:93:6c:8b:80:93:6e:67:2c:d8:bc:78:58:67:65:
e7:58:11:31:01:64:26:fa:85:44:0a:87:d1:60:4d:1e:a1:c3:
d6:8f:5e:7b:94:c8:a4:8c:df:98:9f:a7:34:c0:c2:56:e9:15:
70:d3:27:5c:08:9f:f6:15:02:bb:fb:67:57:77:7b:52:b8:11:
f0:18:60:6b:df:29:ef:ec:a2:70:db:2f:b8:7d:2f:17:15:a0:
09:a2:87:11:48:59:cd:35:c3:1e:84:bf:a0:fa:ff:e6:c8:f8:
6e:3a:49:41:65:7a:12:be:aa:b9:54:d1:72:98:54:cb:7a:4c:
75:2c:29:67:bf:e2:40:ad:ee:42:5d:cc:61:21:92:e6:8c:8d:
3f:c3:96:bb:5a:44:db:ff:94:58:1a:3d:4d:78:e3:90:39:cd:
45:72:a5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:59 2024 by rpki-client on console-ams.rpki-client.org