Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/mV8JkYze_DngES-rszNJ7HL95UI.roa
File: mV8JkYze_DngES-rszNJ7HL95UI.roa (raw, json)
Hash identifier: eMvr5icabVPusnEI2D6nOlnDpt1aK8hAG/FkOL+Cvq0=
Subject key identifier: 99:5F:09:91:8C:DE:FC:39:E0:11:2F:AB:B3:33:49:EC:72:FD:E5:42
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 018571D7D8B3093035CCD3F3549D8C11DB1C
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/mV8JkYze_DngES-rszNJ7HL95UI.roa
Signing time: Mon 02 Jan 2023 09:37:29 +0000
ROA not before: Mon 02 Jan 2023 09:37:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 45.82.120.0/22 maxlen: 22
2a0e:6a80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:d8:b3:09:30:35:cc:d3:f3:54:9d:8c:11:db:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Jan 2 09:37:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=995f09918cdefc39e0112fabb33349ec72fde542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:45:50:20:5f:6e:b4:42:8b:80:1e:d6:12:cb:
5c:b1:d9:f4:3f:63:88:6f:b8:2d:ad:c3:11:a2:b4:
5b:f5:23:8f:de:de:b1:a6:43:68:ed:3e:6c:65:61:
42:79:67:1c:af:f6:52:42:1c:a8:8c:a2:10:cb:ef:
58:76:8f:8e:8a:a5:33:6b:27:cd:d1:98:fa:28:66:
47:a4:29:69:7b:5a:5e:eb:54:2a:8b:79:26:a2:7f:
01:ac:af:2b:d0:08:f9:77:1e:cc:fe:3e:ec:b8:79:
c1:73:dd:a6:85:64:c6:0e:56:2e:7b:c8:59:62:04:
da:2a:82:94:36:2d:08:9b:76:30:c8:f5:a8:0f:6a:
46:c6:ac:2d:73:ac:fa:46:1b:4a:18:ba:d0:16:2f:
b6:54:52:c0:8e:59:e4:ac:e8:23:56:30:30:d6:2b:
04:7c:1d:be:a5:8b:cf:6d:ae:ec:b9:9e:38:e3:6f:
33:a5:f5:4d:ad:f5:ab:1a:7c:6e:81:3a:68:68:9f:
7a:bd:2b:af:26:52:69:16:00:32:68:46:3a:a2:82:
46:74:73:85:42:a4:ca:dc:c9:76:41:c6:e0:7a:22:
b1:1c:63:31:7b:b8:d1:ef:59:27:74:47:cd:e8:89:
fe:ec:52:fa:ed:58:2e:54:80:5b:53:4a:a8:37:60:
6e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5F:09:91:8C:DE:FC:39:E0:11:2F:AB:B3:33:49:EC:72:FD:E5:42
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/mV8JkYze_DngES-rszNJ7HL95UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.120.0/22
IPv6:
2a0e:6a80::/29
Signature Algorithm: sha256WithRSAEncryption
35:54:5e:95:8f:c4:57:b7:f8:e2:14:af:9e:38:55:22:73:9b:
69:ff:da:dd:da:c1:e8:b4:35:dc:bc:5e:42:dd:96:7c:b5:e3:
b0:86:da:7f:60:27:ac:e1:f2:ef:e9:47:8a:36:7e:49:23:ce:
43:60:6d:ca:50:83:53:1f:67:89:89:59:b9:2e:6b:6c:51:7e:
5f:a8:1a:58:fa:2e:b4:3a:76:a4:dd:ec:a7:75:3b:a4:5f:38:
57:55:13:62:49:16:a2:5c:8a:ea:44:16:8b:26:4b:10:c7:87:
77:da:23:50:ce:5a:00:9a:34:c5:7a:74:8e:a6:5c:11:6b:be:
dc:ec:17:6e:de:5c:bc:a8:94:61:6e:b9:a1:01:1b:8e:a8:68:
62:4f:66:f5:9e:13:fe:61:b2:73:21:66:49:01:a2:48:b1:95:
7f:6f:10:69:88:d6:a5:dc:d7:83:85:a9:50:ee:97:40:68:63:
f4:0f:50:76:47:d3:88:a9:21:9b:c0:d4:b0:dd:38:40:7f:19:
83:a8:b2:0b:ab:6c:42:5e:ce:8d:eb:26:b1:e6:d7:62:a6:8b:
0a:96:ff:b1:f9:04:08:08:a7:dd:57:cc:82:b3:79:fe:5d:a1:
3f:49:3e:db:a6:38:30:25:7a:03:c9:93:50:6e:34:77:8e:c8:
78:cf:de:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:41 2024 by rpki-client on console-ams.rpki-client.org