Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/1xSwHyQu_1Hj5f9AMADOEI5lB44.roa
File: 1xSwHyQu_1Hj5f9AMADOEI5lB44.roa (raw, json)
Hash identifier: fcQH83amIfy+p+3gacGw2piM1yXgepwP6SENB4fCD0g=
Subject key identifier: D7:14:B0:1F:24:2E:FF:51:E3:E5:FF:40:30:00:CE:10:8E:65:07:8E
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0189F0632C67B0F9BE06F1E70FCE05BEDE6F
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/1xSwHyQu_1Hj5f9AMADOEI5lB44.roa
Signing time: Sun 13 Aug 2023 19:32:58 +0000
ROA not before: Sun 13 Aug 2023 19:32:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.208.44.0/23 maxlen: 24
85.208.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f0:63:2c:67:b0:f9:be:06:f1:e7:0f:ce:05:be:de:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Aug 13 19:32:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d714b01f242eff51e3e5ff403000ce108e65078e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:f3:e2:d3:0c:0e:3e:dd:55:1b:54:80:02:
5a:38:9b:f5:1d:17:bb:31:f7:07:78:03:95:73:d7:
23:0c:bf:10:43:1a:d2:56:cb:bf:c8:99:25:a6:e4:
5d:8c:83:96:1e:50:2b:c5:bd:f6:97:3d:47:47:4a:
2c:8d:69:cc:c5:04:d1:55:22:35:18:4d:2a:2d:2a:
5b:c3:57:44:b9:4d:0a:91:ea:85:c4:a3:50:24:6a:
fd:7b:74:c5:20:59:c7:3b:2e:41:82:3d:80:61:5c:
03:c6:7e:97:c3:56:74:a5:6f:26:8d:17:2b:a4:04:
40:cf:79:a8:c7:d9:a9:99:d0:3f:b5:29:13:b8:b2:
b1:e3:7c:4d:19:aa:46:6a:a9:c9:a9:0c:62:d6:6d:
c9:ab:98:95:cf:a8:0a:7c:6f:a6:e2:f1:de:63:76:
08:88:f5:47:4c:c5:67:ce:71:65:5c:36:f7:02:23:
41:a1:5f:93:78:6e:b7:03:98:f3:0f:9c:0c:ea:e6:
c0:ee:bf:a1:cb:e2:59:95:a7:ea:d7:79:92:5f:bc:
20:bf:d3:e7:08:e7:e7:78:44:22:dc:0a:b0:ad:bf:
c7:60:43:b0:2c:4c:0a:d1:0c:a0:3d:c5:02:66:34:
10:5d:88:bd:0a:d8:b6:bb:ac:86:73:45:d0:7f:fe:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:14:B0:1F:24:2E:FF:51:E3:E5:FF:40:30:00:CE:10:8E:65:07:8E
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/1xSwHyQu_1Hj5f9AMADOEI5lB44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.44.0-85.208.46.255
Signature Algorithm: sha256WithRSAEncryption
a1:dc:64:ec:cc:a9:48:41:ff:df:ac:f3:39:aa:d2:c6:d2:9a:
eb:aa:2a:32:a8:ae:92:c3:d2:ee:ee:b6:b1:1d:10:31:32:54:
02:80:bc:d8:52:5b:70:63:76:05:47:f8:aa:bc:d6:1d:f0:51:
32:0f:80:0e:05:31:d9:01:c4:98:3b:2c:59:2d:94:f3:d6:74:
a7:0f:e9:8b:21:7b:ad:a9:34:8f:b3:b6:c9:2c:f4:52:3c:82:
65:fe:b0:9b:53:a0:08:85:d0:a5:b8:b7:64:d0:55:6f:63:fe:
06:15:f4:ee:81:4f:2f:d1:0b:7b:0b:a3:49:b3:c2:44:4c:93:
8f:e5:a1:81:3e:1e:d6:63:d7:5b:a1:65:fc:8b:00:c6:9f:9e:
fb:f5:91:fe:1f:1f:9a:8b:3c:da:8b:9c:8d:2b:68:f8:98:c5:
13:57:6f:9e:6e:76:f6:dd:96:6d:de:a5:c7:ce:66:0b:be:8d:
b8:38:d2:39:33:4d:78:c7:d6:bb:79:1b:76:ad:fa:83:c7:26:
a6:94:7d:c4:0e:6a:8c:d4:d4:15:20:42:a6:bf:c3:20:2e:b8:
dc:3f:d9:c8:3b:97:b7:c6:be:78:81:9d:ec:6e:62:f7:56:65:
51:cd:d7:74:ed:1d:95:93:ec:1a:f4:ba:09:70:6f:a3:a6:05:
2b:28:30:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 19:38:35 2023 by rpki-client on console-ams.rpki-client.org