Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/acJVXBg_JMsCFG3373MG-x4vEnk.roa
File: acJVXBg_JMsCFG3373MG-x4vEnk.roa (raw, json)
Hash identifier: 66k1pI3xLvUNGeprsVBOSpZi7vPBb5OOqJVYsqml0ws=
Subject key identifier: 69:C2:55:5C:18:3F:24:CB:02:14:6D:F7:EF:73:06:FB:1E:2F:12:79
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 018C6478C74E57668473275CFE55817E6714
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/acJVXBg_JMsCFG3373MG-x4vEnk.roa
Signing time: Wed 13 Dec 2023 18:38:06 +0000
ROA not before: Wed 13 Dec 2023 18:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5650
IP address blocks: 45.85.204.0/22 maxlen: 22
45.134.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:64:78:c7:4e:57:66:84:73:27:5c:fe:55:81:7e:67:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Dec 13 18:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69c2555c183f24cb02146df7ef7306fb1e2f1279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:5e:74:4d:e8:37:25:8b:5e:f4:12:c7:01:
72:2a:ad:f0:44:24:20:75:13:08:f6:84:d3:3a:72:
3a:61:b7:1d:8b:6b:62:c4:67:cd:64:22:be:52:fc:
89:f0:8d:a9:67:7c:dd:e5:90:e8:4a:52:b1:28:e4:
14:96:0b:c7:59:a0:78:5f:e6:1b:0d:eb:8d:52:4e:
05:43:32:63:d5:4b:2b:bb:5d:87:2e:5e:7d:63:fc:
37:54:aa:54:50:fe:0d:62:9d:3b:e6:21:ae:6b:8e:
09:9e:4d:f1:f7:e4:69:47:00:17:7c:52:ef:0b:03:
ac:67:7a:67:e8:47:e2:3c:95:5d:89:57:ab:c3:ea:
1b:75:bd:1f:6d:2a:c0:66:aa:90:1e:8b:7c:43:59:
49:b5:a0:00:b8:a0:69:66:8f:e9:1b:9c:03:37:cb:
e2:d7:12:e5:f2:37:f1:f8:a8:d6:f2:52:5e:c7:fb:
cf:7d:82:26:52:9a:aa:8b:55:ca:12:6b:15:8b:d4:
a4:af:84:c3:80:48:91:db:91:b3:4e:1e:bf:37:1b:
c7:52:29:5c:cc:65:01:1a:99:78:d0:67:22:a2:e1:
c4:c8:ed:65:4d:ba:75:42:ec:a9:26:a0:d5:ec:0a:
18:f6:f0:6f:f0:f4:79:86:fb:81:c5:1d:d6:e4:0c:
62:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C2:55:5C:18:3F:24:CB:02:14:6D:F7:EF:73:06:FB:1E:2F:12:79
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/acJVXBg_JMsCFG3373MG-x4vEnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.204.0/22
45.134.92.0/22
Signature Algorithm: sha256WithRSAEncryption
56:bf:ac:15:89:b8:ff:85:ca:7d:2d:c7:1a:fc:07:67:25:bd:
7e:bf:9b:cc:ba:05:a6:8b:b5:b9:6d:32:40:e9:ec:e0:a3:35:
f4:89:06:21:0c:2a:34:c7:91:27:ca:ae:b0:82:89:0c:0b:88:
d4:26:d2:68:45:1f:41:d0:44:20:a4:7d:32:3c:33:17:fc:59:
e9:5a:07:5a:64:4b:83:04:20:7d:83:74:7b:74:ab:63:c8:3c:
bf:53:2e:58:25:58:26:0d:f2:b2:e5:78:08:db:a4:5a:6a:55:
04:ff:98:b4:22:09:c4:c0:ae:5a:47:f6:07:d0:8b:31:9d:cd:
ce:a7:1b:1f:57:45:e3:54:ae:52:e1:d5:31:71:b2:8b:a8:e9:
de:66:b3:e9:2a:e5:ad:d3:8a:a4:a6:44:67:20:2d:a7:9b:93:
11:d9:e1:25:a0:7a:73:85:74:d5:c6:9c:e4:57:cb:c4:05:fb:
5c:11:79:0b:04:a4:af:5a:71:bd:8b:38:32:29:6c:6d:2f:21:
e1:9e:62:da:5a:b6:87:85:b0:c5:42:38:48:3c:ad:bd:15:28:
13:78:77:0b:82:b0:41:2f:07:9e:d8:f6:fa:1d:f3:eb:6a:44:
d1:0e:36:4c:39:e5:22:e9:30:68:99:e9:7a:0c:27:fa:cc:81:
c2:ec:a4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:02 2024 by rpki-client on console-fra.rpki-client.org