Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/492Ic4k4qqofwKPXBV67wXUy6Bo.roa
File: 492Ic4k4qqofwKPXBV67wXUy6Bo.roa (raw, json)
Hash identifier: Tpng/qOtlYnlnxzZgYbcW5s+GQ8BSl2HRTSfrQ/ihJs=
Subject key identifier: E3:DD:88:73:89:38:AA:AA:1F:C0:A3:D7:05:5E:BB:C1:75:32:E8:1A
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 0186559176D090EABE95CA1DE9D65D5D19D0
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/492Ic4k4qqofwKPXBV67wXUy6Bo.roa
Signing time: Wed 15 Feb 2023 14:54:01 +0000
ROA not before: Wed 15 Feb 2023 14:54:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 45.158.90.0/24 maxlen: 24
45.158.89.0/24 maxlen: 24
45.158.88.0/24 maxlen: 24
45.158.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:91:76:d0:90:ea:be:95:ca:1d:e9:d6:5d:5d:19:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Feb 15 14:54:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3dd88738938aaaa1fc0a3d7055ebbc17532e81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:38:81:36:9a:05:ba:f4:ed:f7:5f:04:a3:
d9:95:3c:41:66:6b:ac:9b:9a:94:9b:54:ab:d2:b5:
e7:f0:a8:13:4e:bd:a5:b0:1d:e2:29:25:32:63:89:
73:05:fe:b0:19:8c:cb:b2:52:8d:3b:87:37:2a:a9:
36:38:07:95:97:a7:a0:f2:28:c3:c0:af:b6:b9:d0:
51:f0:5a:de:42:00:9d:54:2e:b1:51:6b:9e:af:c9:
e5:4b:37:61:5d:46:0f:d0:bb:ba:a5:2a:ec:75:8f:
f3:32:39:08:64:bf:23:58:88:30:f2:6a:20:9c:20:
a3:78:a2:03:d9:bc:38:7d:0c:19:c7:56:6f:20:d6:
1b:b7:e6:1b:d3:f3:4a:88:fe:ee:b8:02:c9:d5:1f:
f6:2e:ec:c2:a9:da:da:fe:3c:96:63:a5:1c:da:98:
24:2a:e7:55:be:f7:61:62:5c:44:12:f3:04:5e:75:
1a:e9:1a:2e:b2:67:77:40:ba:8d:08:c7:73:da:c9:
96:e0:d6:dd:a9:9e:2f:82:bf:66:5f:18:39:04:88:
37:5a:2c:ce:2d:e2:e9:b7:12:94:25:12:f3:01:3d:
98:ad:75:86:26:b3:3b:61:5c:24:78:bb:98:9a:fc:
ea:d2:18:78:51:ff:0f:fc:03:89:5f:78:a8:79:7d:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DD:88:73:89:38:AA:AA:1F:C0:A3:D7:05:5E:BB:C1:75:32:E8:1A
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/492Ic4k4qqofwKPXBV67wXUy6Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.88.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:8b:7d:8e:12:62:99:4d:47:83:26:2b:cc:69:33:f0:07:63:
a9:4e:71:95:7a:79:2c:49:1d:b4:40:9a:21:d9:f2:76:a1:d0:
4c:1f:8a:52:2a:04:cc:a9:af:ef:54:01:18:f2:17:91:ac:62:
87:ec:a5:b1:7a:a3:fc:5c:49:45:78:d7:b6:f0:6c:f1:d2:49:
b7:9e:c7:bd:11:13:e7:4d:0d:6f:c7:d2:a6:35:d0:05:81:02:
6c:32:df:ef:f2:65:f6:ab:43:14:c2:fd:28:73:dd:f0:fd:f8:
62:3f:bb:da:4b:af:d3:41:33:04:30:77:3b:e2:cd:dc:fc:7f:
52:c4:48:e5:1a:fd:c1:35:4a:3e:5c:ad:b6:1c:a7:a7:58:ea:
b7:38:1b:cd:53:af:23:9e:9e:75:bf:7d:8c:2a:20:ce:f1:53:
b9:9b:42:e3:9b:f8:89:38:d7:aa:b2:6b:33:f6:bb:35:c8:7c:
a9:51:10:b6:bf:0f:69:c5:98:63:42:02:b9:d5:d0:43:3b:f3:
7f:df:54:1a:b4:5e:38:80:3e:7f:49:35:d2:77:76:74:34:01:
2d:7b:f7:29:f5:a0:17:c5:89:a6:34:8e:7b:42:5f:50:b6:a3:
1a:08:92:f5:1a:97:6a:3d:8a:9a:b8:ec:63:c4:a6:fc:2b:a6:
b4:c7:77:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:54 2023 by rpki-client on console-ams.rpki-client.org