Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/i5NFv0c-2Ccfu951-bGua6EiNRI.roa
File: i5NFv0c-2Ccfu951-bGua6EiNRI.roa (raw, json)
Hash identifier: A5jjLV5uDHunf53CkatiyQ2JFiYeVg/QSHN21I5gQrw=
Subject key identifier: 8B:93:45:BF:47:3E:D8:27:1F:BB:DE:75:F9:B1:AE:6B:A1:22:35:12
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 0185737A913EE394A2BFE7125D99D2584030
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/i5NFv0c-2Ccfu951-bGua6EiNRI.roa
Signing time: Mon 02 Jan 2023 17:14:50 +0000
ROA not before: Mon 02 Jan 2023 17:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208802
IP address blocks: 45.84.200.0/23 maxlen: 23
45.84.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:91:3e:e3:94:a2:bf:e7:12:5d:99:d2:58:40:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Jan 2 17:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b9345bf473ed8271fbbde75f9b1ae6ba1223512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:e8:bb:3a:5a:64:79:44:59:8f:90:14:16:
2e:3c:19:b9:ba:27:22:a0:96:cc:28:76:0e:a8:f7:
6e:9a:34:dc:1f:1b:f6:53:20:a2:2d:20:1d:a1:ab:
61:99:09:63:0c:86:ee:13:5b:94:f1:ea:ea:91:30:
43:16:72:f5:d8:70:00:f4:46:d1:51:01:20:95:56:
06:9b:50:80:72:71:b6:96:85:f5:7d:9c:0d:27:9e:
39:2e:d3:6c:ff:d8:dc:1e:a6:78:97:c1:6c:16:e3:
96:ed:66:fe:0f:ca:3f:3c:6b:51:88:c2:53:b1:6b:
92:44:82:94:87:a8:9e:ba:54:27:a8:4b:83:ef:c2:
97:70:bf:36:c9:8b:b2:b3:da:a7:a7:3b:dd:a2:17:
a3:da:ad:9f:95:91:82:ae:66:d8:02:ad:b0:4d:ca:
2e:a0:5f:66:30:70:fd:4a:55:5f:b4:22:9d:16:7f:
26:5c:48:09:86:54:d8:5c:cc:87:9f:fe:67:de:e7:
eb:95:56:48:67:dd:28:45:35:02:4b:d0:4a:2c:0d:
ab:d8:c2:68:b0:48:b6:7a:6b:16:f1:cf:87:e3:ad:
7b:44:d8:f7:c7:c1:da:e0:d7:d5:ac:ce:c7:36:6b:
b2:99:3d:a1:85:82:4d:f1:69:fb:c7:99:6b:56:fa:
8c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:93:45:BF:47:3E:D8:27:1F:BB:DE:75:F9:B1:AE:6B:A1:22:35:12
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/i5NFv0c-2Ccfu951-bGua6EiNRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.200.0/22
Signature Algorithm: sha256WithRSAEncryption
26:de:71:f4:2f:0b:fd:a2:56:98:79:0c:f4:1a:7a:a1:d5:d2:
96:e4:df:3a:81:c1:37:28:89:11:dc:eb:a1:85:e2:a5:81:7d:
f7:f5:98:82:94:8e:d4:d5:79:99:f4:6d:b1:7d:dd:47:1c:ce:
d7:0e:31:b0:82:84:bc:bb:4f:9e:ee:95:79:c5:5a:50:0f:01:
bc:ca:4d:9b:38:78:4d:21:e6:82:da:37:bd:19:66:4a:b8:61:
20:b9:5a:d4:eb:0e:f0:09:d9:8a:b4:72:07:58:6a:79:18:c8:
b1:84:58:ec:e7:f9:39:b8:6b:ee:a3:2e:83:47:f9:6d:53:99:
ef:a4:54:1e:91:66:78:85:db:97:f9:ee:d9:20:56:91:02:1b:
e6:d0:b0:44:55:2c:22:6b:55:5c:83:86:c4:e6:84:c6:f8:b8:
94:2c:0c:08:0b:d2:a5:7d:d9:62:21:00:59:db:93:94:67:65:
ed:7e:d7:15:15:1f:f1:5a:c2:2a:80:90:74:f7:27:8f:9d:11:
02:e9:24:ad:2b:d5:40:d1:19:f4:5d:a7:58:49:84:8a:44:55:
77:dc:51:1d:36:4b:d6:d5:04:5d:d4:ad:e5:53:b3:eb:63:1f:
e8:aa:6a:a8:df:e2:2d:ea:1f:3a:c2:58:4b:ee:f3:b2:ce:9e:
95:3e:c3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:56 2024 by rpki-client on console-fra.rpki-client.org