Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Qijx8358O5FuO1iUiz0-rHTObDU.roa
File: Qijx8358O5FuO1iUiz0-rHTObDU.roa (raw, json)
Hash identifier: JJyeE4X2BoWtVeur2MZffSY8/VgSr69GiwCm0CSyn2Q=
Subject key identifier: 42:28:F1:F3:7E:7C:3B:91:6E:3B:58:94:8B:3D:3E:AC:74:CE:6C:35
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01884A4B8C74B61925D3EDD690D32E5B5788
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Qijx8358O5FuO1iUiz0-rHTObDU.roa
Signing time: Tue 23 May 2023 20:27:25 +0000
ROA not before: Tue 23 May 2023 20:27:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.84.242.0/23 maxlen: 23
85.208.44.0/24 maxlen: 24
85.208.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 May 2023 10:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4a:4b:8c:74:b6:19:25:d3:ed:d6:90:d3:2e:5b:57:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: May 23 20:27:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4228f1f37e7c3b916e3b58948b3d3eac74ce6c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:87:c2:0e:7b:c3:50:dc:98:5e:7b:ff:22:
0e:8e:88:7f:f4:6a:cf:71:28:a4:3a:d7:75:c8:33:
0c:74:e6:bf:46:91:10:c2:2e:0e:ee:41:de:42:ab:
2c:66:bf:06:53:89:d7:dd:06:ff:dc:3c:8b:1e:9d:
b2:c8:98:ee:95:f1:9b:c5:6d:c0:db:eb:14:9a:d5:
02:bf:1b:d1:c9:be:ea:ad:a5:b6:d8:a2:36:1a:c3:
c2:99:9e:e1:66:7e:27:b8:9a:90:23:e1:28:83:b2:
1e:6c:9b:00:db:41:f1:4a:22:51:50:b3:85:fe:5b:
e1:fd:cc:11:05:a5:54:5e:21:5a:16:4a:7d:bb:76:
3c:91:61:bd:76:f0:68:c3:6b:66:09:ce:e6:a4:9e:
0d:e6:7b:82:aa:c8:97:58:e1:d8:e5:3c:f0:8e:2b:
d4:8c:02:31:66:68:6e:81:a4:28:74:79:f8:0a:2f:
91:ec:8c:99:d8:35:31:f0:01:37:30:2e:10:c1:c9:
6f:50:b3:85:d8:f7:d4:51:75:97:69:85:cc:2a:4d:
e7:2b:71:f9:73:94:a4:ab:8f:ce:5b:35:91:6c:f2:
d7:b7:d6:99:27:52:67:50:f6:cf:4d:86:d1:a6:a6:
46:3c:ff:ea:63:58:87:60:57:4e:81:9c:2c:dd:d9:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:28:F1:F3:7E:7C:3B:91:6E:3B:58:94:8B:3D:3E:AC:74:CE:6C:35
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Qijx8358O5FuO1iUiz0-rHTObDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.242.0/23
85.208.44.0/24
85.208.46.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a3:cf:14:4e:9b:94:04:46:2b:dc:f1:25:e6:63:be:84:00:
94:53:c2:07:1e:b8:bb:44:c3:f3:d6:48:2d:23:7d:8b:f9:fa:
e5:f5:f2:1c:ea:f7:c4:6a:06:3c:a9:ac:79:5d:cd:87:2a:ed:
f9:31:d6:76:2b:12:fa:41:e5:15:47:47:7f:8e:01:b9:b1:87:
23:ea:75:6a:17:17:56:fc:03:a7:7d:52:09:ae:9b:cd:8c:35:
ed:d7:5e:18:8e:5f:e1:d6:61:16:ed:65:d4:40:5f:a4:22:be:
b6:de:17:43:2c:bf:86:7e:69:e2:cf:96:a6:87:f7:27:5e:c9:
69:cb:6e:8c:1f:43:79:70:44:b2:6c:ed:f1:84:b6:47:c0:04:
1d:20:dc:0b:7c:ae:8d:da:fc:8f:13:23:d5:1b:27:61:e3:c7:
1c:9e:37:fb:86:2a:e0:25:cc:e1:0b:99:4f:2f:ea:2c:34:fa:
b1:1c:62:30:06:78:2d:76:99:d6:2d:f9:c7:77:50:36:ea:76:
3a:6c:5e:ef:8b:94:f8:45:5b:c4:cc:81:39:70:0a:5b:b9:88:
75:49:22:9e:18:4e:c2:26:00:13:39:f5:69:b7:e9:47:8d:bd:
dc:b3:ef:7a:9e:35:b2:03:07:ae:b2:4d:ba:99:9d:c0:56:96:
c5:4a:07:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:24 2024 by rpki-client on console-fra.rpki-client.org