Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/kS7UbHD1SD9VKlvv1bMESAhI2pc.roa
File: kS7UbHD1SD9VKlvv1bMESAhI2pc.roa (raw, json)
Hash identifier: ZfeMm3rTHDSowQ6O2Ihxu49SFOam86xkAEpmE5ZHiFQ=
Subject key identifier: 91:2E:D4:6C:70:F5:48:3F:55:2A:5B:EF:D5:B3:04:48:08:48:DA:97
Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial: 018AA7419EB4744F7F44CA11D2C66B8701FB
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/kS7UbHD1SD9VKlvv1bMESAhI2pc.roa
Signing time: Mon 18 Sep 2023 07:46:50 +0000
ROA not before: Mon 18 Sep 2023 07:46:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58317
IP address blocks: 45.85.75.0/24 maxlen: 24
45.85.74.0/24 maxlen: 24
45.85.72.0/22 maxlen: 24
45.85.72.0/24 maxlen: 24
2a0e:bb82::/32 maxlen: 32
2a0e:bb80::/32 maxlen: 32
2a0e:bb83::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:41:9e:b4:74:4f:7f:44:ca:11:d2:c6:6b:87:01:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Validity
Not Before: Sep 18 07:46:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=912ed46c70f5483f552a5befd5b304480848da97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:1f:44:2e:d5:62:92:5c:1f:1d:73:ac:aa:
a0:e9:e4:b0:e5:60:6b:1c:e3:16:06:0c:df:fd:c8:
09:92:46:68:7e:04:2b:24:95:8c:f3:1b:b0:8c:a4:
05:00:c6:3c:35:95:82:16:c0:3c:1c:8d:e4:0a:2d:
34:67:14:12:fe:9d:16:2d:1e:f1:fd:bc:ba:34:4f:
4c:9f:e8:d4:2d:ea:a8:15:ea:e8:6b:b1:c6:d4:a6:
c9:3d:c5:af:75:22:12:16:5f:f8:03:3b:02:a2:cb:
2d:a2:33:74:43:15:6b:26:91:35:1f:d6:03:d1:f5:
87:a0:4b:5f:5e:fc:b9:ba:e1:29:83:ac:25:9f:9f:
4f:f9:22:3a:15:3d:b3:1c:71:ff:4c:6c:d0:52:c6:
62:eb:ec:d2:5d:c9:b2:81:db:a0:87:fc:51:41:c1:
b9:0e:24:d1:3f:8d:e4:8e:de:e4:53:59:3d:50:c6:
a1:da:37:f1:48:0a:c6:1e:02:b9:0b:72:df:9d:b4:
54:13:63:11:34:df:63:7a:a7:24:e5:4d:34:eb:c5:
d2:c7:3f:d2:59:38:9b:1e:19:ad:8f:c1:b4:1c:9a:
d6:53:66:b5:48:7e:3c:4f:1a:93:74:53:ff:7e:da:
dc:c8:7b:c3:38:bf:96:a6:4d:8c:b1:34:79:5b:81:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2E:D4:6C:70:F5:48:3F:55:2A:5B:EF:D5:B3:04:48:08:48:DA:97
X509v3 Authority Key Identifier:
keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/kS7UbHD1SD9VKlvv1bMESAhI2pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.72.0/22
IPv6:
2a0e:bb80::/32
2a0e:bb82::/31
Signature Algorithm: sha256WithRSAEncryption
45:fe:d6:83:0a:cf:78:f0:77:ea:10:3f:21:76:b1:59:c7:10:
65:59:25:3b:9e:4f:a6:4e:b9:95:c4:76:02:60:fe:cd:ed:0c:
ae:60:87:7f:64:fc:2d:f3:41:22:7b:53:27:98:08:5b:10:b2:
b7:71:ee:52:22:19:39:7e:cd:04:b0:d2:f4:6c:24:96:71:ed:
96:68:95:39:70:3b:e2:f9:16:1d:6b:d9:89:e4:da:34:c5:b9:
0b:cc:4e:64:bb:32:8e:a0:bb:a7:c7:3e:42:21:4e:28:39:d7:
46:bf:21:8f:f3:9c:a0:11:41:7c:e5:ef:db:b4:e9:f9:24:b6:
1c:9f:34:82:9e:78:d0:0d:06:8d:f1:54:c0:ec:60:80:38:81:
d6:b0:71:4c:0f:89:f4:0d:d8:b6:de:dc:2e:c1:a0:28:36:22:
8f:c8:a0:fb:06:9d:dc:1a:96:fb:b5:f9:c5:f9:4e:ab:53:69:
1b:02:6a:ce:ff:42:dd:e4:56:7f:32:73:33:da:6e:0d:4a:8b:
f6:b6:04:d4:8d:a4:a2:70:3c:d2:41:73:11:d3:ed:cf:34:29:
54:d2:b6:e2:87:f9:df:34:fe:75:72:9a:c3:11:d4:61:79:69:
16:09:6c:76:c3:d1:08:e8:51:2f:56:d5:d0:10:52:77:5a:12:
92:b8:21:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-fra.rpki-client.org