Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hcRwKbU8dfPgthvqohIcqEIgg3s.roa
File: hcRwKbU8dfPgthvqohIcqEIgg3s.roa (raw, json)
Hash identifier: 2GiEgmM4INtgNVntSq3oexPgkveZU/eI5oiyh7vf/jQ=
Subject key identifier: 85:C4:70:29:B5:3C:75:F3:E0:B6:1B:EA:A2:12:1C:A8:42:20:83:7B
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018CC5014FF563EAD0A726D72C679B8470D0
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hcRwKbU8dfPgthvqohIcqEIgg3s.roa
Signing time: Mon 01 Jan 2024 12:30:46 +0000
ROA not before: Mon 01 Jan 2024 12:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44094
IP address blocks: 45.150.64.0/24 maxlen: 32
45.144.31.0/24 maxlen: 32
45.144.30.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 03 May 2024 13:57:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4f:f5:63:ea:d0:a7:26:d7:2c:67:9b:84:70:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 12:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85c47029b53c75f3e0b61beaa2121ca84220837b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:50:20:c8:18:77:e6:32:3e:c7:ec:f9:57:
df:51:7b:53:7f:71:b4:21:7e:c9:b5:a7:a4:51:f3:
20:c9:23:16:c8:cb:82:d6:0d:ed:58:9a:41:51:40:
4b:16:70:bc:6c:7a:9c:a4:a8:91:5f:9e:c7:f6:1e:
aa:87:25:6c:2f:4e:9f:3f:00:a6:eb:28:ab:b9:d1:
db:70:83:df:50:86:5b:63:4e:bc:a9:72:10:ba:1c:
21:10:d1:2f:69:67:5e:3e:23:79:df:91:99:e1:c2:
97:9d:17:2f:34:f6:4e:33:4f:8f:fb:9d:c5:af:52:
56:03:87:91:22:ec:81:a2:fa:72:ab:c0:c1:2c:25:
2c:08:97:fd:2c:f0:77:c6:71:32:89:df:92:a8:9f:
f3:08:59:5f:88:94:16:f2:21:e9:87:3f:69:d1:97:
b1:37:b2:b6:f2:a9:3f:34:ab:29:2c:22:58:d6:4d:
f5:60:8f:e9:e5:6e:f2:8e:4f:19:81:c4:7f:bf:c1:
c2:1a:65:98:7e:d5:69:d1:98:f1:8e:31:d8:00:dc:
59:a7:28:09:c4:cd:10:00:d7:de:9a:45:e9:8d:bd:
71:e9:4a:bb:75:71:a1:e3:53:f2:7e:d8:f4:30:95:
ff:02:db:b2:4f:b2:11:51:68:8e:fe:82:82:08:d8:
2f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C4:70:29:B5:3C:75:F3:E0:B6:1B:EA:A2:12:1C:A8:42:20:83:7B
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hcRwKbU8dfPgthvqohIcqEIgg3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.30.0/23
45.150.64.0/24
Signature Algorithm: sha256WithRSAEncryption
95:7f:fa:b1:25:b1:5a:28:02:22:01:98:0c:08:a7:da:35:c5:
73:b2:17:34:c1:8e:6a:ac:49:a0:49:9a:7b:77:be:19:6c:a9:
d3:77:8c:f9:95:46:9d:41:72:bd:7f:5a:ec:31:aa:01:b1:e2:
bc:27:3f:e3:6c:41:70:81:74:9d:1d:ac:8a:02:ba:2a:1d:5e:
66:3c:04:09:e2:3d:d2:32:57:a3:94:b7:ee:35:47:43:18:58:
54:c9:ef:cc:63:19:c3:f8:61:60:23:61:14:00:41:21:00:e1:
2e:bd:8f:b0:3a:0a:32:f7:5e:34:74:49:55:9d:9c:80:f6:cb:
d1:83:0c:20:e9:8e:3c:90:9d:f3:69:46:da:0c:cb:eb:e4:15:
1f:e9:84:c8:2f:6c:6b:be:d4:ac:c9:4a:05:4a:0a:f5:6f:55:
32:4f:71:c8:be:52:fc:ce:f8:61:ce:e3:c6:51:e1:0f:7f:f8:
39:77:05:21:b1:b7:a2:3a:b0:b0:fb:d3:39:7c:51:6a:38:83:
e8:1e:5c:cd:3c:ba:f7:e9:b7:b8:34:86:05:b0:f6:3d:5f:de:
13:d2:fc:3b:cc:04:1c:c4:be:c8:c5:98:6f:9a:61:42:61:50:
bd:a1:68:b5:90:ea:24:e2:59:be:91:39:56:c0:ec:4a:3b:c9:
77:60:b8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 16:58:14 2024 by rpki-client on console-ams.rpki-client.org