Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/ipti7660uiyqttYhX6BG6B2A3Rw.roa
File: ipti7660uiyqttYhX6BG6B2A3Rw.roa (raw, json)
Hash identifier: ygA+qc+Te4/G1T+bZZQfp/ebrW+UvMFXf4j/ZkADET0=
Subject key identifier: 8A:9B:62:EF:AE:B4:BA:2C:AA:B6:D6:21:5F:A0:46:E8:1D:80:DD:1C
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 018AFCF82EB0C33D49496517F86C894AD992
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/ipti7660uiyqttYhX6BG6B2A3Rw.roa
Signing time: Wed 04 Oct 2023 23:13:57 +0000
ROA not before: Wed 04 Oct 2023 23:13:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 45.145.96.0/22 maxlen: 22
185.21.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Nov 2023 09:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:f8:2e:b0:c3:3d:49:49:65:17:f8:6c:89:4a:d9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Oct 4 23:13:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a9b62efaeb4ba2caab6d6215fa046e81d80dd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:29:27:f1:fb:90:ba:9a:00:2f:da:c8:20:ce:
5d:af:c5:4e:bf:a2:25:58:22:d6:3d:35:a9:4c:ca:
3f:79:38:19:57:87:4f:e4:c0:20:9c:91:00:73:9d:
9e:fb:18:72:67:60:49:69:c7:09:56:06:d3:94:c3:
10:b0:3a:93:62:98:13:66:af:4e:15:29:44:c9:b6:
0f:04:e8:f9:0a:97:d6:66:f2:f9:cb:2a:08:11:d1:
a0:89:a3:02:17:3b:b1:b2:fa:aa:df:7a:ea:fc:f5:
4b:82:d8:a2:25:ab:40:7d:8e:69:1f:2c:a5:d8:6b:
e2:ed:47:8b:b9:77:c2:c1:75:96:bf:87:fa:c9:db:
3e:cf:7b:e8:dd:62:73:53:d3:38:c4:57:7e:7a:ec:
1f:de:33:e3:15:58:81:c0:a6:d8:e5:81:f7:b4:67:
0f:ab:1a:4e:0a:07:72:77:ac:41:08:0b:15:cd:d9:
9d:08:4e:5c:5f:e4:96:ad:e0:dc:7c:ad:fc:24:13:
c9:62:b8:43:58:93:f8:20:3e:80:b3:98:16:98:c0:
28:ed:79:58:14:21:90:29:f2:6b:0d:98:b8:0c:d9:
16:ba:47:20:83:0e:33:96:f8:3e:0d:6e:97:25:b0:
79:68:20:45:d1:5f:86:2a:85:19:ee:90:b1:50:f1:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9B:62:EF:AE:B4:BA:2C:AA:B6:D6:21:5F:A0:46:E8:1D:80:DD:1C
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/ipti7660uiyqttYhX6BG6B2A3Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.96.0/22
185.21.50.0/24
Signature Algorithm: sha256WithRSAEncryption
04:70:c1:7a:7b:50:e0:e8:8d:72:5e:9d:64:ce:69:f5:b2:c5:
73:cb:95:7e:cf:3b:cf:ca:16:31:f1:e4:bb:1f:f9:2b:91:8f:
de:eb:74:b9:ac:70:c1:57:c7:6c:98:8b:05:e5:58:08:bb:cb:
a7:d8:6f:85:d0:39:35:89:8e:da:43:59:8a:a4:fa:7c:92:af:
fa:ab:e6:74:81:2e:c7:b8:c1:6e:8f:23:c5:2d:6c:b7:6d:77:
b5:73:8c:ef:fd:d8:ac:d8:e9:fe:c0:b3:fb:ca:92:cd:8f:42:
00:78:07:dd:15:0f:74:cc:8f:f0:a7:98:6d:cd:53:34:c1:97:
c4:52:55:06:0b:33:1c:2c:20:df:4e:db:e4:e4:1e:c4:6f:10:
cd:c0:94:a8:24:bc:23:53:70:95:9d:da:2f:7c:7d:a1:40:8d:
cf:7f:f7:2c:10:cb:69:be:81:79:18:fb:c8:22:19:d4:6f:aa:
00:cb:14:04:76:b1:fa:94:f4:2d:43:da:71:e0:7c:71:bf:98:
a4:7e:ec:a7:f4:2b:76:aa:66:b3:15:f8:83:98:f0:60:ad:f9:
91:5f:cb:07:36:5f:d5:94:fe:e8:a2:87:cd:6c:24:71:a7:d7:
ce:97:f4:3c:55:ec:19:f2:77:bc:71:87:11:7d:b5:0b:a7:99:
3a:88:66:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org