Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/f_GsQx0Y0tt39F8aZdg4_XaEoFU.roa
File: f_GsQx0Y0tt39F8aZdg4_XaEoFU.roa (raw, json)
Hash identifier: I67tdAvvmYAZnOWYP8/0THNZoPueqJJoNy61wI4z+n4=
Subject key identifier: 7F:F1:AC:43:1D:18:D2:DB:77:F4:5F:1A:65:D8:38:FD:76:84:A0:55
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018779A8DB150086602918A56B63B00EE8D3
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/f_GsQx0Y0tt39F8aZdg4_XaEoFU.roa
Signing time: Thu 13 Apr 2023 08:08:41 +0000
ROA not before: Thu 13 Apr 2023 08:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.84.242.0/23 maxlen: 23
85.208.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:a8:db:15:00:86:60:29:18:a5:6b:63:b0:0e:e8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Apr 13 08:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ff1ac431d18d2db77f45f1a65d838fd7684a055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:76:6d:9f:d5:71:97:7c:15:0e:f8:ef:52:e7:
68:4a:a3:83:f3:7f:91:7d:d3:f0:8e:b9:17:c3:8e:
ce:f5:59:ec:a5:e2:6d:41:1b:93:64:ef:85:5d:ab:
d8:f7:8d:93:13:82:95:82:24:97:21:51:cf:76:7f:
4d:ac:14:bc:69:8c:44:f0:ea:26:98:cd:aa:9b:b6:
19:89:0f:7f:8b:22:66:47:36:52:bd:b7:29:f1:dd:
a0:84:96:3a:16:d0:a4:46:59:82:d3:79:be:9d:77:
f2:bf:b1:5c:1a:a4:6e:1e:0f:d4:37:53:e6:70:00:
4e:f6:86:ab:c5:96:94:fd:88:ac:bd:d2:cd:06:37:
3b:80:4d:92:4b:da:17:da:5d:22:d6:fa:7f:e2:d6:
26:5a:76:f1:3d:87:fd:9d:16:58:8a:97:c1:67:22:
b0:e9:02:33:13:c9:54:99:af:92:f8:75:92:eb:d6:
4b:26:c2:83:d5:f4:05:eb:24:e4:43:c1:af:fa:d4:
1b:81:cc:d6:83:01:1a:1d:3d:11:41:76:3a:01:ab:
f1:73:4d:7d:7f:60:36:30:d9:4d:8b:c6:63:10:59:
9b:0c:cc:3c:ab:9d:1c:8d:ee:a8:5a:13:23:1b:2c:
10:f7:43:51:77:88:f7:11:f1:5c:ab:55:ad:93:c9:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F1:AC:43:1D:18:D2:DB:77:F4:5F:1A:65:D8:38:FD:76:84:A0:55
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/f_GsQx0Y0tt39F8aZdg4_XaEoFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.242.0/23
85.208.47.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:fd:22:0b:fe:28:63:4b:20:54:15:35:c6:15:56:40:de:07:
eb:1f:54:c2:3a:04:17:00:7c:4e:78:f5:35:73:86:e9:90:23:
68:e6:3b:11:cb:09:16:3a:c4:b9:8d:6f:24:9b:ac:7c:ee:bb:
e5:31:6e:07:8c:fa:13:06:88:76:ba:2a:b9:c0:50:64:a7:c0:
ec:c9:50:b2:5e:41:4d:a1:ab:70:12:65:46:86:98:64:78:d7:
fc:c1:ad:18:c5:54:88:a7:ff:f2:e7:47:77:bc:0f:51:7c:20:
ca:78:1f:00:cd:b5:0e:e3:63:7f:08:af:72:be:6e:60:e3:8a:
61:4e:0b:ae:8d:3f:dd:eb:89:3f:c8:36:6a:60:6b:ae:de:9c:
a7:3e:8f:cd:2e:eb:c7:e1:11:c6:d8:05:33:2c:87:96:05:46:
81:8e:15:1d:da:58:2c:62:00:a6:2f:0b:26:60:37:58:26:ee:
11:f4:c8:77:7a:bb:0a:84:88:4b:a9:3f:b1:18:a0:f7:88:78:
74:09:d4:39:20:c4:ec:07:3f:58:27:d9:c7:55:3b:06:93:b0:
6d:9f:47:62:02:5a:87:23:6b:11:6c:5d:db:32:0f:1e:72:2c:
24:eb:5b:8c:b7:cc:9d:ea:1d:69:73:e1:93:f6:bc:8e:2a:da:
d3:6f:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-fra.rpki-client.org