Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/LcRq6w4fj26eEkqBGGoJnhG_Yfg.roa
File: LcRq6w4fj26eEkqBGGoJnhG_Yfg.roa (raw, json)
Hash identifier: O4BDdQzG+U2vSuaq9yf3QQgg1dA09Fq2KbwzCRICBaw=
Subject key identifier: 2D:C4:6A:EB:0E:1F:8F:6E:9E:12:4A:81:18:6A:09:9E:11:BF:61:F8
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0185BC505F72067464FB77625BA39924DB20
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/LcRq6w4fj26eEkqBGGoJnhG_Yfg.roa
Signing time: Mon 16 Jan 2023 20:41:01 +0000
ROA not before: Mon 16 Jan 2023 20:41:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 85.208.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Feb 2023 14:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bc:50:5f:72:06:74:64:fb:77:62:5b:a3:99:24:db:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 16 20:41:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dc46aeb0e1f8f6e9e124a81186a099e11bf61f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a8:59:9f:18:ac:d5:47:21:78:79:ca:39:ed:
11:4a:f1:b5:72:dd:8a:b7:5f:85:d3:fe:4e:92:0b:
cd:09:74:31:6b:14:c4:9a:c8:fd:01:a9:d1:8c:61:
ef:d0:e7:d6:c7:e1:3e:29:cd:ad:59:f3:50:c9:d6:
6e:7a:99:8b:7e:fa:0d:c3:10:1b:f7:ed:3b:74:2c:
4b:84:0f:fa:99:64:3e:b5:fa:71:ea:05:81:c7:33:
03:d9:74:f7:eb:90:e4:d4:c0:54:48:19:75:b7:21:
ec:a9:4b:48:12:73:20:58:b0:14:ac:50:b4:00:56:
d4:cc:32:7b:e3:53:e5:f9:ca:d3:7d:41:60:fa:a2:
57:7e:4d:e7:d3:c5:c8:57:81:ed:b4:3e:e0:96:0d:
e7:f0:d7:bc:2a:1c:c3:58:04:a3:de:67:33:6f:13:
7d:09:f0:75:04:6c:ed:a8:2d:e9:aa:66:e7:99:0f:
82:b0:ff:73:bd:ca:8b:7a:22:21:39:1e:5d:45:34:
4a:36:6a:23:d8:bb:93:88:08:77:c7:b0:a1:4d:4c:
82:8f:34:18:ad:33:c6:3b:c0:c6:97:86:cb:cb:da:
6c:29:49:77:ea:95:21:63:c8:55:38:d6:67:b6:4c:
ff:4b:33:04:c9:8a:82:6a:ab:37:ff:ff:fe:87:a9:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C4:6A:EB:0E:1F:8F:6E:9E:12:4A:81:18:6A:09:9E:11:BF:61:F8
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/LcRq6w4fj26eEkqBGGoJnhG_Yfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.44.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e3:b3:31:26:bc:1b:f8:d7:6b:8d:78:42:0d:86:14:8b:b7:
ec:6f:b6:9d:9f:7f:aa:d1:2d:17:88:83:93:42:26:5c:b4:7f:
56:68:cb:83:54:16:85:17:0b:de:e5:cb:2c:44:d3:f8:f6:7a:
a4:08:bd:8f:8d:40:1f:7a:61:25:94:38:96:2c:e6:8f:ca:0e:
3c:1a:76:5f:18:13:88:28:0b:37:14:7a:10:90:cf:4b:40:7b:
31:54:b2:51:cd:82:d2:b8:a9:c4:31:9c:23:b0:47:6c:9c:27:
b2:45:ba:e0:42:b6:1d:8c:e7:a1:d2:bf:0c:9c:da:4b:e6:4c:
24:97:61:af:5c:2d:a5:f7:1d:a7:ef:f5:d5:74:06:26:59:f8:
95:32:17:61:ee:06:a3:ef:42:82:9d:bb:45:9d:f8:8d:53:fc:
c5:2d:cc:f7:09:dd:24:98:1e:50:37:b8:2a:44:82:9d:b5:97:
ca:cd:98:3e:49:80:1e:45:38:e7:a2:07:83:04:5d:50:7e:50:
9a:8e:64:6c:6d:9d:1f:50:bc:d0:1f:95:ef:51:ba:57:53:f0:
b9:f7:a1:f1:70:8c:56:6c:da:e1:ee:1e:d1:a6:5e:df:d8:5e:
54:5b:94:6e:79:2f:5a:23:fa:0c:2f:91:86:df:1f:17:c4:3d:
17:d8:39:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:24 2024 by rpki-client on console-fra.rpki-client.org