Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/JXqfR-Nk6uPExeUsZEQSmUEvJ8Q.roa
File: JXqfR-Nk6uPExeUsZEQSmUEvJ8Q.roa (raw, json)
Hash identifier: 5xc9J58dinurkPnmgmVSm67gsGqvtdRxIEqjMdjv9/g=
Subject key identifier: 25:7A:9F:47:E3:64:EA:E3:C4:C5:E5:2C:64:44:12:99:41:2F:27:C4
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01865578EAC303B48025BBFDF5D60D2796F6
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/JXqfR-Nk6uPExeUsZEQSmUEvJ8Q.roa
Signing time: Wed 15 Feb 2023 14:27:13 +0000
ROA not before: Wed 15 Feb 2023 14:27:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 85.208.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:78:ea:c3:03:b4:80:25:bb:fd:f5:d6:0d:27:96:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Feb 15 14:27:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=257a9f47e364eae3c4c5e52c64441299412f27c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:32:a0:1f:3c:cd:9b:ad:6b:64:9a:02:99:
99:5f:7d:86:c6:11:9a:e1:c0:03:86:30:dc:fb:fb:
b7:f1:87:e1:ae:60:5f:19:8c:6c:7b:e3:a5:56:ce:
cd:07:43:c8:bd:b1:a0:d8:5d:11:d8:6e:f8:47:68:
05:59:f9:31:00:63:fe:e1:bd:60:c6:f1:9b:d5:be:
a6:1a:94:0c:64:78:b5:77:5d:11:8b:5e:58:2e:d8:
29:a7:3a:33:1f:17:44:d7:e9:16:22:79:b3:aa:b7:
ee:96:c9:ae:42:7c:b5:b9:ec:4c:74:69:2a:1e:87:
6e:b6:44:eb:86:02:86:89:b7:22:56:ab:44:b3:fb:
4c:44:47:ce:70:76:dc:ab:df:b9:c5:90:49:98:1d:
af:75:81:90:f0:c9:bc:5b:67:bf:bc:ac:d6:16:54:
6f:2d:02:f8:19:41:7e:0f:fe:1a:6e:26:4a:c7:09:
0b:27:11:b6:5c:12:4e:6c:d9:68:ad:a1:12:7c:4c:
d7:47:5f:a7:56:c0:91:3f:12:7f:e8:c2:73:77:d1:
92:6d:7f:45:70:2e:8f:4d:a7:5d:a7:d1:66:b0:42:
0f:ce:86:40:0d:8c:f3:f2:60:d9:5e:d1:b4:96:e6:
f0:16:7e:ca:9f:dd:db:c3:d3:f3:4b:d0:e4:09:c9:
a3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7A:9F:47:E3:64:EA:E3:C4:C5:E5:2C:64:44:12:99:41:2F:27:C4
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/JXqfR-Nk6uPExeUsZEQSmUEvJ8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.44.0/24
Signature Algorithm: sha256WithRSAEncryption
52:43:59:08:10:ea:5e:da:9f:22:31:e9:f9:83:c2:50:68:0c:
13:17:c0:39:da:32:ec:50:1b:98:b8:2d:1e:61:f2:89:68:08:
94:aa:ae:3a:71:55:b9:99:9c:84:04:58:3b:04:17:6f:43:09:
b4:56:fb:02:f1:9d:ec:00:07:2d:83:6d:6f:88:bc:cb:94:48:
b9:f4:62:09:22:a2:bc:6c:cb:15:61:ce:e0:38:f9:fe:3b:4a:
b1:2d:b0:f1:d0:2e:20:a4:0a:4f:7a:36:81:fe:d4:c2:f4:d6:
47:b0:7b:36:30:9e:31:05:8a:80:6f:10:aa:be:f8:fd:f5:27:
cf:38:43:81:40:4b:01:53:82:04:63:e9:57:e6:c4:fb:80:48:
3b:3c:31:04:d6:f0:13:d0:d9:7a:ce:08:7b:29:f3:49:f5:77:
8d:f8:a8:8f:b6:d9:a5:0f:9f:3c:f8:a1:ad:01:7e:d7:6d:f3:
39:3f:9d:a8:4f:0e:eb:cb:89:05:af:cb:3b:c2:42:57:f0:67:
74:b2:5b:6d:35:f7:9a:fd:ca:2e:34:01:25:79:a6:aa:7b:14:
7f:52:ac:4b:d8:5f:c2:7f:c2:af:dc:d0:c7:80:e7:9a:c0:3e:
ac:0b:6c:4f:57:96:9a:30:d3:0e:47:23:e7:f5:b2:87:b5:4c:
ce:8d:70:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:51 2023 by rpki-client on console-ams.rpki-client.org