Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/3jZG5HgjVpHGNoUNzDgQcn0DHoY.roa
File: 3jZG5HgjVpHGNoUNzDgQcn0DHoY.roa (raw, json)
Hash identifier: +1fVTG1g1svlfAlVjaR49wqZ3g0FJ6kZ6hKLk7WLtiM=
Subject key identifier: DE:36:46:E4:78:23:56:91:C6:36:85:0D:CC:38:10:72:7D:03:1E:86
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018CC165B8B8986E8B85512D8D1BA6914DF6
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/3jZG5HgjVpHGNoUNzDgQcn0DHoY.roa
Signing time: Sun 31 Dec 2023 19:41:58 +0000
ROA not before: Sun 31 Dec 2023 19:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 273708
IP address blocks: 45.84.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c1:65:b8:b8:98:6e:8b:85:51:2d:8d:1b:a6:91:4d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Dec 31 19:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de3646e478235691c636850dcc3810727d031e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:54:5e:42:b3:77:b8:72:63:87:4a:dd:67:82:
6a:93:22:c8:94:7b:62:13:0f:14:66:a3:15:07:b5:
6d:f8:15:fa:f4:76:61:d0:66:61:bb:f8:14:91:3e:
98:23:36:6d:f4:03:86:2a:15:02:55:ff:34:ff:8b:
34:bd:1e:ed:70:49:27:1e:1f:ce:8c:a8:1f:76:56:
a3:d4:f6:1d:3e:b3:69:95:34:66:1e:ee:5c:a2:94:
1d:71:57:df:32:0a:cd:34:e1:61:3b:94:bd:08:4c:
a6:81:1b:02:ac:c4:47:a6:08:bc:85:c1:60:cb:0a:
e6:c7:9b:3c:d9:c1:28:aa:ba:23:02:41:02:3f:f9:
69:2a:df:e6:b5:63:1c:de:9c:c2:77:8b:3e:a0:12:
c9:16:0b:56:30:ae:08:88:3f:85:63:20:5a:4f:7c:
51:63:2c:b3:9b:69:4b:11:5f:6d:65:68:52:bf:c0:
a0:88:29:fd:f8:f8:b3:79:f9:60:12:19:df:20:d1:
80:60:2b:ea:e0:3d:c1:4e:6e:0a:89:21:d4:3e:a0:
b9:0b:71:44:42:6b:78:47:3f:6d:bf:22:c6:42:a6:
72:c3:d0:81:35:f8:89:ad:55:6a:9d:8f:d1:99:63:
21:9f:2d:2a:62:85:42:75:60:4f:cc:b7:d4:ba:fb:
4c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:36:46:E4:78:23:56:91:C6:36:85:0D:CC:38:10:72:7D:03:1E:86
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/3jZG5HgjVpHGNoUNzDgQcn0DHoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.243.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e8:df:d4:fc:cc:3e:36:3f:c7:f0:2c:f6:81:b4:7d:50:d4:
45:e0:4d:f4:3f:d1:e9:92:b7:45:8f:68:41:fb:bc:ba:1f:72:
63:14:13:46:66:92:0e:56:eb:5e:94:fd:92:cf:50:55:7d:4f:
fa:ee:75:01:03:73:27:24:bc:67:7e:39:a6:f1:00:6e:2d:97:
1e:03:1e:0f:0a:9c:95:4b:b1:2d:94:eb:3f:d9:21:e7:f1:0c:
7b:78:b8:f3:ed:d7:ea:cc:aa:4d:eb:53:e8:e0:50:0f:23:80:
82:8f:4a:84:1f:b9:e1:dd:82:2a:16:a8:51:a2:da:72:ea:48:
d6:4c:47:92:6f:8c:ba:0f:ab:de:c5:b2:60:4a:67:9e:97:52:
49:52:c1:3d:88:02:17:bd:79:1a:d7:06:86:75:ce:58:70:d1:
e2:f2:eb:0c:91:92:e1:45:c8:f0:74:c1:9f:14:1c:b8:a7:72:
82:ed:27:17:d5:c8:a1:12:aa:9a:34:97:c9:65:a8:96:8e:f3:
6d:e8:28:3f:c3:ea:c8:3c:28:45:3e:09:c9:b0:e8:13:cc:0f:
0b:83:83:9e:4d:d5:5e:22:13:1d:eb:b1:a9:1f:b8:80:be:31:
c1:71:a6:f0:4c:1d:3b:11:f3:36:a9:3e:0b:be:ee:66:98:4c:
e2:0d:a0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:36 2024 by rpki-client on console-ams.rpki-client.org