Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/S-2xE8f-vA8NdmbXlIsYfOzS93E.roa
File: S-2xE8f-vA8NdmbXlIsYfOzS93E.roa (raw, json)
Hash identifier: KXikazOMSYQAbKwpnYTW3S4QzYvp2IAtb7fZn/wC2ok=
Subject key identifier: 4B:ED:B1:13:C7:FE:BC:0F:0D:76:66:D7:94:8B:18:7C:EC:D2:F7:71
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01874C69CB35C96BE400CE168E4E15C7EEC5
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/S-2xE8f-vA8NdmbXlIsYfOzS93E.roa
Signing time: Tue 04 Apr 2023 13:16:54 +0000
ROA not before: Tue 04 Apr 2023 13:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 273708
IP address blocks: 45.84.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:69:cb:35:c9:6b:e4:00:ce:16:8e:4e:15:c7:ee:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Apr 4 13:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bedb113c7febc0f0d7666d7948b187cecd2f771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:70:02:6b:2f:81:0a:6f:48:0d:a2:32:4a:
47:c8:32:65:b8:40:89:49:36:12:3e:0a:7c:04:e5:
0d:f8:d1:b4:a4:e8:72:14:50:1a:ad:82:f2:16:20:
7c:62:9a:19:5c:5c:6d:3c:67:59:09:03:75:ef:a7:
66:8b:7c:97:22:ab:c5:0f:b6:09:8e:9b:7a:83:3d:
4d:99:24:d9:89:75:a5:1b:14:3e:9c:64:67:ee:3c:
dc:65:b1:57:2c:12:6e:ba:14:f2:2e:c4:3a:5a:0a:
36:12:de:e0:94:0c:ec:f3:83:42:6d:29:f2:d2:d7:
02:1b:44:d0:1b:92:b1:aa:17:97:5a:ee:7e:9a:e9:
fd:e2:04:db:5c:c2:64:55:d5:de:30:9b:ce:a8:9e:
2a:68:14:7f:ec:7f:9e:ec:a1:af:79:39:07:97:d2:
5f:f6:f0:f3:ac:c4:3f:2f:9d:6f:1f:41:0f:9a:1f:
70:c4:fd:08:49:61:d6:da:49:26:c9:e8:35:c8:3a:
51:92:e7:ba:a7:3c:7d:94:0c:de:2a:d2:3b:63:40:
9f:5a:a1:cd:84:1a:1c:c6:27:b9:88:fe:94:9f:48:
10:b5:f0:7b:c7:bd:57:f2:ab:7b:86:09:3c:e9:87:
47:e1:21:2d:1f:c0:46:07:ee:e2:d4:27:31:4b:e6:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:ED:B1:13:C7:FE:BC:0F:0D:76:66:D7:94:8B:18:7C:EC:D2:F7:71
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/S-2xE8f-vA8NdmbXlIsYfOzS93E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.243.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:be:cd:5a:a7:bc:3a:70:0c:74:60:bc:ce:a2:45:0e:9f:e7:
1c:67:51:71:d4:d9:a7:a8:28:d3:15:07:39:87:8d:43:8c:18:
92:af:27:59:b6:d1:9c:39:e6:a8:1b:9f:51:8c:c2:d7:ba:69:
86:0e:e5:a6:35:e1:b9:d7:5b:c2:fc:db:0e:12:a2:9a:a8:ce:
09:b9:ad:6f:27:14:73:a7:35:a7:88:a7:55:85:14:c3:94:1d:
69:2c:8a:d1:f5:56:a1:b3:d9:34:6a:2a:0a:b8:38:dd:9d:51:
7d:b6:51:b9:8f:40:9f:c2:df:32:c0:5c:10:65:14:02:5c:84:
9f:7b:5b:00:1c:c0:64:3a:35:76:33:6f:79:92:1a:ee:2b:a8:
78:54:fa:6c:3c:1f:10:3c:a3:d1:f3:b8:b0:9f:56:bf:19:8e:
f4:a4:41:74:42:f2:97:24:6b:92:f4:ba:ba:28:6e:ab:fd:bb:
bc:e0:9a:21:68:b0:18:7b:db:3e:ed:78:86:06:28:1e:39:48:
ec:f1:8e:56:68:d6:74:35:42:21:ff:79:7e:81:33:d4:69:65:
74:67:ba:84:e0:36:8f:6b:d9:c4:38:4e:2b:10:85:0c:b7:04:
bf:b0:0c:ee:02:a2:92:25:d2:79:90:63:84:82:89:9e:49:79:
d1:ba:32:16
-----BEGIN CERTIFICATE-----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Generated at Sun Aug 13 18:12:57 2023 by rpki-client on console-ams.rpki-client.org