Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/dWFtE_z2CzhyuNuV_WqxuRQ5l6M.roa
File: dWFtE_z2CzhyuNuV_WqxuRQ5l6M.roa (raw, json)
Hash identifier: S20MmseyhFgUvjQWK3YGZ1eiFmhhByBGzQzAHcOlQuk=
Subject key identifier: 75:61:6D:13:FC:F6:0B:38:72:B8:DB:95:FD:6A:B1:B9:14:39:97:A3
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01894AB8306FCB0CA142DC74571354EDE220
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/dWFtE_z2CzhyuNuV_WqxuRQ5l6M.roa
Signing time: Wed 12 Jul 2023 15:28:52 +0000
ROA not before: Wed 12 Jul 2023 15:28:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 45.84.240.0/23 maxlen: 24
45.84.242.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:b8:30:6f:cb:0c:a1:42:dc:74:57:13:54:ed:e2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jul 12 15:28:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75616d13fcf60b3872b8db95fd6ab1b9143997a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b4:1b:5b:bd:66:de:04:38:5b:30:f7:d0:fb:
66:91:53:9b:15:a6:1a:e6:cb:95:e9:1f:71:d4:ef:
de:6f:5b:7f:8a:96:08:f4:9b:6d:ab:a4:8e:53:eb:
41:53:63:b5:43:ef:f0:6e:3b:c4:5a:14:ce:a7:73:
9d:fb:2c:61:b5:9c:4c:dd:d0:4e:df:25:f9:a2:ac:
60:cb:af:f6:2c:3f:67:5a:47:60:58:d3:83:e7:b7:
7a:44:c8:85:2b:da:44:43:2f:eb:29:64:53:32:6f:
b5:cd:0a:17:5a:8b:8d:03:06:95:27:b2:73:a9:46:
49:b0:ed:84:b4:7c:bc:25:d5:8a:db:12:59:4a:21:
55:49:1d:d8:fa:08:10:5e:1e:6a:cd:2e:bb:5d:f0:
ea:bf:4d:ef:91:9c:4f:41:2a:4a:37:9b:84:3c:36:
f8:45:34:26:73:4f:58:99:d9:3a:99:12:5c:1b:39:
15:3d:6e:1e:9b:27:62:5c:64:14:b1:6e:68:df:88:
be:51:92:14:23:5b:f0:73:b9:ee:3c:71:89:3a:27:
86:0a:c9:6b:c9:68:a5:70:78:2a:17:41:07:a6:e8:
75:c4:a2:88:09:d9:21:2f:52:c1:fa:dd:19:14:43:
63:c3:54:96:e7:0d:12:ad:a9:44:da:a4:f0:52:ef:
77:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:61:6D:13:FC:F6:0B:38:72:B8:DB:95:FD:6A:B1:B9:14:39:97:A3
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/dWFtE_z2CzhyuNuV_WqxuRQ5l6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.240.0/22
Signature Algorithm: sha256WithRSAEncryption
85:24:45:b8:95:58:76:2e:a6:bb:c3:cf:15:ae:69:ce:ba:b3:
eb:52:2f:49:36:72:5b:48:79:9a:2d:32:25:29:f0:1b:11:89:
4a:19:33:f7:55:9f:9f:1f:bf:7e:5d:e5:c5:c4:07:8c:07:28:
0d:c4:18:e3:b4:9a:2e:35:83:22:6b:a3:d6:bf:8c:13:88:27:
87:c5:aa:83:5f:68:1a:e3:6f:6b:96:da:23:9c:bf:90:63:c1:
68:4e:0d:0f:85:9f:31:60:16:5d:5a:7d:ff:fd:8b:3a:d7:1d:
31:2b:c6:de:f6:85:43:77:d8:8d:9b:cc:64:ea:d7:42:55:ba:
cf:ae:ce:06:f9:93:11:79:91:bb:92:b0:de:44:56:85:69:c6:
e0:a9:6c:d0:67:1d:11:78:51:81:60:f7:ee:65:c9:16:c0:16:
2b:79:6a:6c:46:30:aa:ae:ea:00:49:d8:12:0e:7a:c8:5d:54:
c9:13:09:32:38:48:0f:b2:c0:3f:5e:f2:50:2e:ae:e4:fa:d5:
9a:4a:e0:43:e7:28:7c:a6:f0:77:6f:de:da:ef:d7:eb:6e:0f:
77:e8:6e:b5:22:3a:0c:52:60:3c:cf:7b:2c:10:5d:0f:04:fc:
e4:05:26:81:25:3c:57:39:ea:7b:54:02:a4:56:92:cd:21:1e:
ed:71:eb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 13 19:49:55 2023 by rpki-client on console-fra.rpki-client.org