Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/_aVO_JrX9yj3O1OAO97M2A4Sl94.roa
File: _aVO_JrX9yj3O1OAO97M2A4Sl94.roa (raw, json)
Hash identifier: Id0OyFl3MwLyvrPjblABsG/+wr09vxkdHR9xZwxT1o0=
Subject key identifier: FD:A5:4E:FC:9A:D7:F7:28:F7:3B:53:80:3B:DE:CC:D8:0E:12:97:DE
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01856CAF0A668C24D3FADAA0A67F204455B2
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/_aVO_JrX9yj3O1OAO97M2A4Sl94.roa
Signing time: Sun 01 Jan 2023 09:34:48 +0000
ROA not before: Sun 01 Jan 2023 09:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 45.84.240.0/23 maxlen: 24
45.84.242.0/23 maxlen: 24
185.104.12.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:0a:66:8c:24:d3:fa:da:a0:a6:7f:20:44:55:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 1 09:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fda54efc9ad7f728f73b53803bdeccd80e1297de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:90:86:0f:98:96:35:53:64:8e:4d:45:06:
d4:4e:96:55:b0:b9:46:d9:70:40:4f:ec:d3:50:2c:
5c:a8:ee:e1:cf:07:14:dd:61:5d:1c:41:73:26:49:
df:6f:15:4e:a9:01:1a:1a:63:4e:8b:39:94:5d:65:
ae:53:d8:6d:9e:5f:a0:42:ab:9d:95:b3:6e:1c:98:
5c:33:46:0a:04:48:b4:a9:c7:bc:01:48:44:24:c5:
72:57:e1:96:ec:a8:4c:88:56:04:92:8d:b0:b7:fc:
f6:cc:31:6b:4a:da:8d:3c:fa:51:88:00:9e:b3:f8:
7b:b9:1b:78:ee:e5:ab:2b:df:58:4d:00:80:a6:ba:
54:ae:a3:d1:7c:6a:e8:fa:b9:ad:5e:d8:9e:dc:7a:
5b:1a:e9:8a:4f:4b:22:81:53:6d:54:b8:32:ad:40:
81:93:40:85:1a:b3:21:e7:9c:dc:cc:0c:f5:74:a0:
17:17:b8:62:03:ee:61:f7:08:03:e4:13:e1:a8:8f:
24:ce:53:78:93:a4:2c:5f:b0:4a:8a:f0:5c:6f:e5:
45:61:dc:75:8c:2d:f8:46:14:34:98:db:78:d4:dd:
ec:54:b5:7e:4d:a8:5c:ac:c0:77:0c:fd:b1:5e:6b:
56:d0:15:e5:ec:1a:e1:c8:d3:03:27:a7:4b:8b:e1:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A5:4E:FC:9A:D7:F7:28:F7:3B:53:80:3B:DE:CC:D8:0E:12:97:DE
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/_aVO_JrX9yj3O1OAO97M2A4Sl94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.240.0/22
185.104.12.0/22
Signature Algorithm: sha256WithRSAEncryption
76:e7:ce:ea:a5:c0:c1:f4:3b:04:67:56:54:32:51:11:31:46:
f1:8a:dd:3a:58:3b:cb:1e:bd:c7:ff:d6:33:3e:24:5b:a3:d7:
81:1d:af:d9:be:23:76:c8:ef:92:c7:07:30:93:84:fe:b0:40:
de:cd:38:6b:fa:97:67:6e:5d:d9:cf:1b:f7:fe:ec:b3:22:bf:
d5:85:c2:53:8b:f5:c3:fc:80:4e:09:4b:ff:5e:69:58:ee:24:
0b:fc:67:32:b0:db:82:43:2c:39:04:36:e1:b9:1d:9a:2d:d3:
e5:c9:5b:61:48:af:a9:19:c8:39:fe:e0:e2:9e:3f:91:46:ab:
ea:0d:15:73:19:2a:c8:e8:63:1f:e9:a8:82:6b:7d:15:b9:e9:
e7:bd:87:66:8e:a5:78:71:03:90:e3:8f:b7:66:07:38:76:51:
25:99:51:46:91:5a:b7:73:0d:a2:10:66:8b:57:29:72:10:15:
fa:49:07:2c:6a:6b:b7:92:99:4b:09:85:7f:f7:ec:ac:a1:02:
06:4b:0c:82:6d:24:a7:95:ed:e4:b2:b4:f5:1b:26:99:4a:a9:
6b:3f:a3:48:fe:73:a9:76:a1:bf:3d:0d:a6:d5:86:ea:81:22:
d6:e6:8d:98:2a:63:5b:e0:28:1b:e4:90:97:a4:68:a2:ce:03:
b2:2b:3c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:51 2023 by rpki-client on console-ams.rpki-client.org