Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/IuV1Nn94bA9d-5VwIrC9e5ijffE.roa
File: IuV1Nn94bA9d-5VwIrC9e5ijffE.roa (raw, json)
Hash identifier: l3ByrloYAQqKOxXKsJ10rVZurTJfA88FNgD9phZhtUo=
Subject key identifier: 22:E5:75:36:7F:78:6C:0F:5D:FB:95:70:22:B0:BD:7B:98:A3:7D:F1
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01856E8B3FD559A101B31F8016179F0D4648
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/IuV1Nn94bA9d-5VwIrC9e5ijffE.roa
Signing time: Sun 01 Jan 2023 18:14:57 +0000
ROA not before: Sun 01 Jan 2023 18:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 45.128.56.0/24 maxlen: 24
45.128.74.0/24 maxlen: 24
45.92.165.0/24 maxlen: 24
45.92.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Sep 2023 06:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:3f:d5:59:a1:01:b3:1f:80:16:17:9f:0d:46:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 18:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22e575367f786c0f5dfb957022b0bd7b98a37df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:10:8a:22:3a:9f:be:97:28:a9:99:99:1c:e3:
89:68:d9:42:ea:ed:bc:b6:2e:1a:83:24:fd:15:19:
08:09:81:9b:3e:1e:7d:28:01:af:c4:81:d3:1d:09:
4e:6b:c9:02:cd:6b:03:27:18:b4:0a:39:1c:97:59:
5e:b1:3f:fe:f3:69:c7:42:9f:2b:d7:66:df:b5:25:
56:4e:76:ab:6d:39:7e:21:cb:97:69:68:9c:98:e6:
51:7c:ad:3e:c1:0e:ee:79:a8:ea:a5:97:07:e4:22:
da:e2:c5:c6:02:21:e9:d1:1c:ee:75:a0:8d:3c:12:
2d:d6:06:62:b3:2f:02:3b:2a:59:db:2e:b5:04:e9:
68:59:36:98:47:fa:40:71:97:04:0c:a2:c7:df:26:
54:d8:cb:9e:9c:a1:66:0b:f9:3f:28:62:d9:a2:81:
27:26:3b:5e:fe:2d:e9:1d:2d:3c:02:f5:2a:47:0a:
1b:20:01:9e:90:be:a1:7f:7d:38:12:a0:1d:08:5d:
66:7a:d6:b1:b4:49:95:02:30:46:4c:e7:0e:df:aa:
8c:29:2a:14:61:95:a6:8a:f4:c4:86:fe:4b:46:b0:
87:4e:46:6e:07:90:28:59:ae:55:b1:58:02:8e:13:
2e:2a:1b:7c:2c:1c:34:9c:0f:96:c0:41:d6:38:ef:
dc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E5:75:36:7F:78:6C:0F:5D:FB:95:70:22:B0:BD:7B:98:A3:7D:F1
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/IuV1Nn94bA9d-5VwIrC9e5ijffE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.164.0/23
45.128.56.0/24
45.128.74.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f7:ab:1f:4f:76:94:bf:d6:6c:5b:52:0c:a8:ca:30:1d:51:
d1:b0:3a:c1:4e:72:70:ec:91:18:20:06:51:06:60:29:36:2d:
cb:0a:6c:2e:6c:ee:9a:0b:7d:ca:bf:5e:26:8f:6a:d4:e9:a1:
27:a3:e6:a8:15:9e:f4:02:69:cb:57:3b:6b:71:a4:8e:c8:a3:
ac:fc:1a:46:16:f9:d9:7d:8d:c6:a2:52:0c:25:c9:3d:a4:e1:
67:12:72:5b:ea:fd:06:c5:f1:c6:bc:da:5e:a7:41:a1:fb:57:
a0:63:b7:7f:82:25:58:b5:6c:62:67:1f:19:62:75:d9:39:cf:
50:92:b1:22:eb:8a:c3:33:fc:13:a9:62:0d:70:69:64:cb:15:
28:03:bb:ad:d5:b5:db:cc:2b:72:73:fe:4c:fe:22:91:e9:59:
8d:9b:61:75:a8:8c:15:33:1b:ca:75:69:14:a9:fd:6a:b2:d2:
65:e2:06:d3:18:9e:22:ed:54:39:a2:0d:7a:03:cd:75:c6:14:
bf:9d:7d:36:6e:3c:f5:15:60:90:81:60:55:94:5d:02:b3:61:
5b:b8:f9:e5:5c:5b:33:76:e7:08:06:f3:0e:24:aa:cb:6c:51:
d7:7a:34:3a:b7:3e:4c:c9:4d:62:d0:ca:97:55:8b:92:2f:92:
08:9d:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:20 2024 by rpki-client on console-ams.rpki-client.org