Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/trgLW6J43aD23augYwcdPp0OSgg.roa
File: trgLW6J43aD23augYwcdPp0OSgg.roa (raw, json)
Hash identifier: +Oq8uUCUogec7t600ZywsVLBHiuqmz6xlAdWzUzhHYM=
Subject key identifier: B6:B8:0B:5B:A2:78:DD:A0:F6:DD:AB:A0:63:07:1D:3E:9D:0E:4A:08
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F79847EDB2D3F406D0D8DBE04D8F73F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/trgLW6J43aD23augYwcdPp0OSgg.roa
Signing time: Sun 01 Jan 2023 22:35:12 +0000
ROA not before: Sun 01 Jan 2023 22:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51681
IP address blocks: 45.88.244.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:84:7e:db:2d:3f:40:6d:0d:8d:be:04:d8:f7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6b80b5ba278dda0f6ddaba063071d3e9d0e4a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:df:9d:eb:f1:bb:43:77:c5:8f:00:f5:dd:cf:
fc:63:e0:ec:f8:68:ab:8a:aa:f8:e0:c1:fa:b0:91:
fc:90:9b:e0:ee:5d:7c:56:fd:cf:39:c7:92:53:66:
df:0d:c3:d9:9b:44:2e:45:9e:4e:10:5c:00:e2:7c:
31:4f:0e:21:77:28:a7:64:f2:c7:47:0f:86:eb:2f:
18:08:a9:c0:9a:f2:10:dc:d7:ff:b8:d1:58:53:a4:
7f:f4:f6:a7:22:4a:9c:ed:27:57:b2:8d:38:72:76:
89:de:ce:87:02:a4:87:7a:b4:3c:6a:16:c6:b0:38:
54:5c:e3:59:2d:fc:68:d8:01:70:86:07:d7:da:b1:
3f:08:c6:55:82:a3:f8:cc:ed:96:8c:af:88:09:77:
63:0e:7a:5d:f5:d6:c3:d5:0d:92:87:ef:53:24:15:
9a:1e:d6:30:0f:35:0f:1f:80:1d:df:6f:50:e7:73:
85:42:33:91:78:53:ea:be:d5:2b:88:de:88:59:77:
a5:d8:54:d5:a4:1b:d2:35:92:8c:31:fd:0a:93:80:
34:fc:1b:62:82:5c:ca:04:67:04:1a:83:ad:d8:2d:
3d:d7:1a:76:8e:44:d9:97:12:48:12:af:3a:07:21:
29:0e:a7:d7:98:f5:d8:bf:24:ed:57:39:3b:32:e3:
a1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B8:0B:5B:A2:78:DD:A0:F6:DD:AB:A0:63:07:1D:3E:9D:0E:4A:08
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/trgLW6J43aD23augYwcdPp0OSgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.244.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:ea:74:a4:0c:b0:87:53:01:df:a7:5f:d4:1e:08:81:ec:ff:
35:7f:ff:45:a4:e2:14:e4:87:c7:0c:24:9d:1a:29:25:01:94:
61:e6:f9:0e:e5:48:f9:30:53:f4:86:3e:82:19:94:53:65:ad:
7e:1a:2e:1b:34:8c:c1:18:27:2b:b6:c4:34:45:0b:d7:60:d4:
a5:0f:67:d0:a0:4a:49:28:9a:c6:42:37:64:d3:eb:76:7f:dd:
f8:f4:49:82:16:72:d6:05:50:f4:82:e7:54:e1:cb:46:e2:fa:
14:09:66:c2:04:7c:64:9a:24:0b:54:2b:fa:cc:7e:9a:7a:fe:
7b:b5:f5:8e:bb:e2:01:e7:ca:85:0c:2c:14:3e:3e:8f:55:65:
34:62:23:08:9d:52:51:01:59:18:8a:f2:e1:c0:b0:62:e1:eb:
7b:12:94:2c:60:d9:3c:fd:41:a8:b6:56:36:5a:a4:88:06:8b:
10:b3:59:4b:8b:b8:d9:63:b1:b0:f7:67:7c:a8:74:38:b6:88:
93:31:c4:5f:85:8f:ba:cb:bc:df:d0:d9:e8:4f:ff:a7:aa:0b:
65:25:b7:ca:84:7d:d3:7f:5c:59:8e:4a:f9:1a:c3:36:73:57:
3f:38:30:9a:c0:72:41:4e:e7:0c:2d:97:84:6e:1d:6b:ed:42:
4e:09:14:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org