Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/Y28XhYbOkAfFfGw3y8j_Gmt5K6Q.roa
File: Y28XhYbOkAfFfGw3y8j_Gmt5K6Q.roa (raw, json)
Hash identifier: PFAg14glSZucLXLoHKlhZqL75ug32j3Ea1qiNvTPyGk=
Subject key identifier: 63:6F:17:85:86:CE:90:07:C5:7C:6C:37:CB:C8:FF:1A:6B:79:2B:A4
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 0187462221D6577062BB052401FF82863E11
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/Y28XhYbOkAfFfGw3y8j_Gmt5K6Q.roa
Signing time: Mon 03 Apr 2023 08:00:54 +0000
ROA not before: Mon 03 Apr 2023 08:00:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139471
IP address blocks: 45.157.69.0/24 maxlen: 24
45.157.68.0/22 maxlen: 22
45.157.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 May 2023 09:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:22:21:d6:57:70:62:bb:05:24:01:ff:82:86:3e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Apr 3 08:00:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=636f178586ce9007c57c6c37cbc8ff1a6b792ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:95:5f:df:84:33:65:ca:0f:4f:35:a5:bd:
e5:1c:f2:0b:e1:6b:a3:b2:74:17:b8:78:7d:66:db:
17:05:d4:83:9b:02:1a:c2:43:5d:59:59:1b:6c:08:
fa:1d:4b:66:eb:d1:84:a8:7e:88:d1:60:7a:57:3d:
30:79:c0:21:ed:cc:2b:9f:c1:51:46:32:7d:3f:8a:
b6:f0:72:b3:06:56:18:c8:ca:0b:cf:e4:83:4b:6a:
63:f8:ac:c0:0b:d6:f8:89:d0:fc:62:34:69:c4:c7:
02:2c:c1:1d:4a:a6:09:ad:29:f7:0a:25:b4:61:82:
71:4d:10:7f:86:71:dc:3a:07:69:44:2f:05:74:43:
89:95:d4:db:f3:3b:b4:ff:f1:7d:0b:90:fa:81:37:
5a:b4:b1:fd:50:f7:25:8f:ce:55:fd:84:e1:db:7f:
12:62:37:eb:51:8c:99:fe:41:73:21:00:1c:22:fd:
74:8f:11:98:6f:47:ea:55:de:95:1e:27:c6:7b:bb:
69:4c:e0:47:a0:b9:26:58:fb:78:68:ec:e2:d0:c5:
3c:c9:1b:70:58:09:11:ac:72:d6:54:ec:93:24:90:
49:58:eb:2a:c2:08:1a:bd:9e:97:e3:2c:72:c4:fe:
d5:bb:fe:27:06:7e:b5:86:e6:a0:c8:01:0a:9c:2f:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6F:17:85:86:CE:90:07:C5:7C:6C:37:CB:C8:FF:1A:6B:79:2B:A4
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/Y28XhYbOkAfFfGw3y8j_Gmt5K6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.68.0/22
Signature Algorithm: sha256WithRSAEncryption
09:1e:bb:d6:53:a5:7e:86:de:40:38:fa:b5:80:4f:ce:18:2e:
29:43:08:73:53:a3:9c:c7:cf:0e:14:ae:fc:a0:61:f6:03:9c:
b6:dd:42:44:5a:7d:28:e8:94:ba:c5:35:91:d3:36:ad:b1:a6:
dd:57:46:1f:78:e2:a9:87:8a:09:69:fe:8e:2b:8d:10:f0:95:
5d:50:48:6d:60:9f:92:b0:49:46:3c:8c:3c:f1:a2:3d:2e:fd:
92:c5:82:36:be:fc:e8:b5:fc:d5:18:ab:6d:e9:51:14:03:2e:
99:02:25:80:c6:0d:98:23:0a:53:d6:12:33:5c:5b:80:b8:f6:
96:e3:ae:14:51:b0:a2:31:ca:da:ef:e6:b5:08:50:b1:b5:47:
60:72:7f:78:aa:2c:73:97:0c:ec:2f:6e:5a:45:16:a4:9c:b2:
42:3b:cb:9f:f5:58:af:dd:50:01:99:5a:1a:83:62:f2:df:82:
0a:28:58:9e:3d:34:a4:77:ac:62:41:73:d5:31:6c:9f:43:0a:
d0:f0:e6:71:e5:95:99:f6:16:d0:bd:9d:6f:1b:9f:0e:b5:05:
30:f2:69:5c:3b:de:c0:e4:4d:a5:65:31:68:93:79:26:53:e7:
71:79:3a:3e:45:44:0a:e0:c2:3b:43:c3:7c:95:97:47:ea:13:
3f:da:c6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:59 2024 by rpki-client on console-ams.rpki-client.org