Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/72v2UJU5XoHYUIU7g6IydBhGfrE.roa
File: 72v2UJU5XoHYUIU7g6IydBhGfrE.roa (raw, json)
Hash identifier: AjDbjWQNLuYZ4jf0F+swNa+8GRyYt69vUGJJYBA08L0=
Subject key identifier: EF:6B:F6:50:95:39:5E:81:D8:50:85:3B:83:A2:32:74:18:46:7E:B1
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0187A5D487A0CB8C9B93A766E1603C055A31
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/72v2UJU5XoHYUIU7g6IydBhGfrE.roa
Signing time: Fri 21 Apr 2023 21:59:41 +0000
ROA not before: Fri 21 Apr 2023 21:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.84.242.0/23 maxlen: 23
85.208.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a5:d4:87:a0:cb:8c:9b:93:a7:66:e1:60:3c:05:5a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Apr 21 21:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef6bf65095395e81d850853b83a2327418467eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:7b:0d:de:56:f7:48:7c:79:55:92:6a:af:
bd:95:74:e6:ef:70:b3:28:2a:52:fb:1f:21:fc:3e:
c4:37:62:11:eb:d6:8e:43:a9:50:bc:92:1b:0e:28:
f5:70:f2:11:c8:81:4c:43:65:ad:1b:96:63:c2:ea:
bd:02:b9:53:7d:08:92:8d:0a:56:f5:7f:86:74:76:
02:f4:26:09:1e:5e:f1:5f:79:cf:bb:71:8f:9d:2f:
1c:ee:75:50:45:2c:3a:90:40:9c:4b:b4:fa:59:1a:
30:a0:cd:ec:48:b2:cd:bb:c2:f1:7e:95:a5:8c:77:
70:a0:13:b3:c1:bf:3c:bc:66:a2:97:44:d9:4d:09:
b6:cb:ba:69:4a:00:c7:72:1d:12:a9:d9:68:b5:97:
1f:dc:06:c9:de:35:c8:7b:31:63:b9:a7:81:c9:de:
df:09:55:8b:5d:99:51:bb:01:5b:71:c0:5c:0d:65:
1f:fb:45:b7:79:60:c4:5c:7e:ab:5e:db:28:af:d4:
80:93:13:c7:9c:41:8b:9c:c6:a9:87:05:b0:37:cd:
d8:20:e3:73:be:e1:7e:c2:8f:45:06:87:5d:da:c9:
b3:a8:1e:09:fe:f9:a6:e6:2f:90:ab:c6:f3:3f:04:
d9:40:41:92:cd:38:ed:ca:aa:02:9c:95:4e:7a:34:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6B:F6:50:95:39:5E:81:D8:50:85:3B:83:A2:32:74:18:46:7E:B1
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/72v2UJU5XoHYUIU7g6IydBhGfrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.242.0/23
85.208.47.0/24
Signature Algorithm: sha256WithRSAEncryption
55:65:cf:41:db:6c:ce:a8:19:f3:b0:8f:b7:01:6d:76:26:54:
c3:9c:63:e0:ca:da:6c:a4:a7:ff:ea:d5:93:9c:af:85:43:17:
01:79:bb:81:ac:bc:76:01:6b:31:e6:85:e5:30:72:fc:70:a9:
ce:72:41:c9:eb:0d:ee:32:1a:11:3c:51:0e:80:80:0e:47:7e:
58:78:de:af:6c:15:67:82:dc:12:ca:3d:28:9b:4f:08:3c:6d:
09:8f:2f:9e:3f:b4:89:5a:00:a2:62:d8:3f:3e:6e:e1:a2:9d:
c0:73:96:5d:d1:30:d2:59:f0:e1:d1:ee:a2:38:45:1a:ea:19:
90:69:dc:84:5b:97:d0:10:eb:34:ac:c7:55:f9:85:2c:73:de:
d9:78:d4:2d:3b:6f:2f:aa:e5:38:12:f7:14:88:4e:dd:38:1e:
b6:1d:1c:b1:19:3a:14:2a:a5:27:b3:38:38:ee:cc:33:cd:f6:
92:2f:47:08:ad:a6:49:2e:9a:ef:f1:6c:02:28:b8:6b:16:fa:
d5:bb:ec:d2:4d:09:af:60:e7:2a:fb:7f:84:64:a9:97:33:0c:
ac:a5:b4:ba:7e:8c:a9:87:68:41:c1:a6:20:2d:17:15:78:67:
44:90:0b:28:dd:a5:fe:28:ec:94:25:81:47:5c:bb:38:86:a6:
41:2c:51:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:51 2023 by rpki-client on console-ams.rpki-client.org