Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/YcTCVyF6eRZPe4gCFBD3LDRiVcs.roa
File: YcTCVyF6eRZPe4gCFBD3LDRiVcs.roa (raw, json)
Hash identifier: 7fO02238gJTiCSEtn9grc6PLp+fIXTR1KnsR0QHdkZ4=
Subject key identifier: 61:C4:C2:57:21:7A:79:16:4F:7B:88:02:14:10:F7:2C:34:62:55:CB
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 0188051431BE58BCE2E9DA71B2650E0D8C5F
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/YcTCVyF6eRZPe4gCFBD3LDRiVcs.roa
Signing time: Wed 10 May 2023 09:53:09 +0000
ROA not before: Wed 10 May 2023 09:53:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139471
IP address blocks: 45.157.68.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:14:31:be:58:bc:e2:e9:da:71:b2:65:0e:0d:8c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: May 10 09:53:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61c4c257217a79164f7b88021410f72c346255cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:61:cb:b3:f5:7c:3d:c2:4a:3c:4a:d6:43:6b:
2f:0b:bf:e0:1f:fb:6b:b2:9d:28:dc:5a:9c:d4:b8:
72:51:7f:7c:36:e5:89:1e:5a:54:43:cc:9f:19:35:
1a:24:a8:a4:96:72:ac:9a:d1:50:f5:30:fd:7f:02:
e0:ab:03:8e:ca:86:40:7f:ac:0b:61:c8:ca:18:b9:
bb:dd:22:de:85:50:e8:42:01:6a:3a:99:08:3b:b3:
23:1b:5a:8c:57:04:38:e4:74:8b:79:7c:2e:d0:08:
42:04:b5:e0:4d:5b:1c:2e:f9:6b:4d:ce:3b:57:4b:
6a:7f:ca:e5:b5:d9:1a:82:c8:1e:c9:e4:db:d1:95:
03:ec:3f:88:6d:43:de:32:c1:c1:ee:78:9a:5f:9e:
2f:bb:56:7d:eb:b2:76:8d:e6:da:37:a0:d9:d8:72:
ab:49:16:88:88:bd:2f:c4:cb:f5:45:15:61:01:13:
62:13:ab:ed:c3:71:52:d8:c0:08:43:36:df:00:70:
39:52:6c:f5:f7:02:c4:43:c1:5d:b0:7c:59:da:c1:
32:9f:d6:4e:e4:1f:f4:0e:7c:a5:21:e2:23:1f:41:
08:df:c0:69:56:61:b8:a6:bc:72:48:61:3e:7e:de:
a6:62:29:8a:13:b0:79:e3:74:2d:17:05:b8:88:c0:
5a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C4:C2:57:21:7A:79:16:4F:7B:88:02:14:10:F7:2C:34:62:55:CB
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/YcTCVyF6eRZPe4gCFBD3LDRiVcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.68.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:1c:80:a7:5c:64:d1:41:cc:89:73:f8:8b:bf:3f:f0:f6:fd:
c3:8d:7a:df:75:09:c1:85:ae:48:aa:9b:43:8a:b2:32:58:01:
31:67:78:88:a7:56:0a:c3:15:9a:84:c8:e9:20:80:1c:c6:6a:
f8:0f:2b:bf:e9:81:28:8f:ef:d0:75:1a:fe:08:4d:91:4b:9b:
3e:ed:b1:e6:02:ac:d2:b4:42:2c:13:6e:83:80:68:f6:08:39:
b5:b7:7e:3c:f2:85:10:4f:22:fb:fb:0e:c0:5a:21:6b:65:c3:
7c:1f:80:29:98:42:57:d4:5a:86:fb:ac:07:56:0e:91:97:15:
cf:42:4a:4e:20:39:60:1b:cc:8f:78:41:76:30:d1:0b:b2:01:
a0:d0:09:e0:e9:16:1e:c2:b3:67:01:df:96:06:56:db:68:06:
9c:4f:4b:9a:3c:d6:c0:2c:10:28:33:16:98:8d:22:fe:0b:cd:
93:bf:a8:b3:66:3e:25:fb:f1:88:88:ec:20:0d:67:8c:99:c2:
72:61:f5:3b:22:2a:40:42:16:06:ed:da:12:81:c7:ef:d5:02:
81:0c:7b:47:f4:04:59:30:b4:7c:5b:bc:88:92:8a:aa:55:42:
5c:c0:c3:84:13:14:d7:30:0d:3b:29:39:06:b6:c5:06:43:11:
da:2c:4b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:25 2024 by rpki-client on console-fra.rpki-client.org