Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/JlOlKTvcHs4S6jjcBiNgCb5a8eA.roa
File: JlOlKTvcHs4S6jjcBiNgCb5a8eA.roa (raw, json)
Hash identifier: 5BmrjkSN906/knkp585JqeppG7PS51cXGLMIU2BSckc=
Subject key identifier: 26:53:A5:29:3B:DC:1E:CE:12:EA:38:DC:06:23:60:09:BE:5A:F1:E0
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0189F05F850CDBDA14DEA4089D39BF43335B
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/JlOlKTvcHs4S6jjcBiNgCb5a8eA.roa
Signing time: Sun 13 Aug 2023 19:28:59 +0000
ROA not before: Sun 13 Aug 2023 19:28:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 273708
IP address blocks: 45.84.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f0:5f:85:0c:db:da:14:de:a4:08:9d:39:bf:43:33:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Aug 13 19:28:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2653a5293bdc1ece12ea38dc06236009be5af1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:88:cb:52:0e:c0:ff:e7:ef:ff:6f:11:4a:
0b:19:ee:76:fe:ba:86:df:c8:67:80:40:4e:40:b0:
88:65:41:0f:cf:df:f1:1c:ed:cb:87:85:32:64:fb:
cd:f6:ba:52:57:29:a6:ef:63:ca:b7:73:ee:9e:5d:
86:c6:10:7b:6f:4e:ce:b8:b4:2b:c0:16:97:ed:ed:
8c:ba:9d:8a:1c:77:0f:46:45:1f:62:47:a2:31:e3:
14:78:04:14:f3:b7:1a:64:ea:fd:a3:4d:e8:d9:5d:
e7:73:fb:e2:f6:a7:df:70:43:74:c9:08:93:1e:ff:
bf:3c:72:da:c2:a1:16:81:ba:37:e2:4d:83:53:e8:
ec:a6:f6:7a:b2:64:5d:11:d3:c9:8d:b4:46:27:a7:
3a:aa:82:83:c2:a8:6c:9b:49:b7:ea:b4:bc:95:18:
3e:61:c3:50:fd:aa:04:43:e5:0a:ee:df:d4:7f:96:
06:02:3c:1d:03:c1:54:cd:32:8b:1a:3c:f2:1e:d6:
3f:66:34:18:c3:53:ac:27:e8:4a:28:c4:76:da:0b:
19:44:62:d6:dd:ac:f5:1f:bc:8f:43:2e:b6:2f:29:
c9:dd:07:77:1f:42:ea:3e:66:3b:30:86:b5:80:67:
bd:95:1e:a6:78:0d:dc:91:79:df:82:f9:f0:26:48:
de:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:53:A5:29:3B:DC:1E:CE:12:EA:38:DC:06:23:60:09:BE:5A:F1:E0
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/JlOlKTvcHs4S6jjcBiNgCb5a8eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:92:25:f3:44:eb:0e:22:08:d6:77:fc:0a:fd:d5:06:3d:f8:
ed:d1:37:65:fa:6d:ea:bc:04:bf:16:51:6c:2e:6b:a3:d4:13:
1b:5f:96:8e:f4:65:d1:f2:80:34:e4:91:80:40:63:99:6d:f3:
77:60:36:21:3b:7e:cd:6a:ae:a8:79:7b:31:0a:c8:9d:ad:97:
f7:4e:5f:3c:9b:00:48:09:1b:89:2d:7a:90:d6:c4:20:2f:53:
9e:f3:f5:38:59:43:99:07:c3:a8:6d:ce:df:8a:78:d6:32:84:
50:2c:cc:88:6c:8a:f2:d2:42:6f:6b:c7:d0:63:06:98:d7:1f:
20:ad:78:bf:d8:7e:e7:8e:f2:fb:a5:45:4e:7d:d9:42:0c:a6:
7d:fd:c6:e3:44:8b:a6:a8:60:f1:02:e0:ce:ad:6e:d3:31:4a:
68:8a:b8:89:67:c8:dc:17:17:b8:9d:58:fa:1a:59:5b:43:f8:
42:b1:98:1d:4a:9b:7a:79:ad:cc:28:af:2d:89:dd:c6:78:86:
54:c0:aa:28:af:74:b9:62:91:ca:85:b2:e0:00:82:50:1a:4e:
6d:18:3c:bb:98:d5:28:5d:f1:88:c9:3d:bb:15:a8:be:b8:41:
b8:e0:6c:09:9f:05:6c:4d:e8:11:8f:30:e5:3e:4f:e4:74:d4:
07:fa:31:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 31 18:01:03 2023 by rpki-client on console-ams.rpki-client.org