Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/g19uPUGQHTYCb17Jd8AHVhXFnqo.roa
File: g19uPUGQHTYCb17Jd8AHVhXFnqo.roa (raw, json)
Hash identifier: zjUbhG/SLx4rWcoAcVyUGd/pNSfv+24WuO/EwOsBg5o=
Subject key identifier: 83:5F:6E:3D:41:90:1D:36:02:6F:5E:C9:77:C0:07:56:15:C5:9E:AA
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01898EB6BA26318274FF58E25544F4ACBAF0
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/g19uPUGQHTYCb17Jd8AHVhXFnqo.roa
Signing time: Tue 25 Jul 2023 20:21:27 +0000
ROA not before: Tue 25 Jul 2023 20:21:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.84.242.0/23 maxlen: 23
185.104.12.0/23 maxlen: 24
85.208.44.0/24 maxlen: 24
85.208.45.0/24 maxlen: 24
85.208.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8e:b6:ba:26:31:82:74:ff:58:e2:55:44:f4:ac:ba:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jul 25 20:21:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=835f6e3d41901d36026f5ec977c0075615c59eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:76:de:bd:b0:5c:f4:29:1a:85:ab:35:09:
f4:dd:93:ce:c3:60:0b:cc:30:6c:3f:dc:be:fc:9b:
96:69:72:05:ec:7f:6a:da:32:3a:11:ea:02:5e:2a:
54:86:f7:60:73:c5:e7:98:b8:6d:3b:12:21:09:20:
d2:92:12:80:b3:a2:0b:f3:fe:a3:65:e0:6f:89:ad:
73:76:12:21:20:1d:00:5a:85:8e:8f:cc:5d:81:f7:
0b:74:28:6c:5d:63:65:6a:61:86:51:99:b5:53:62:
28:e9:73:06:25:f9:8c:f2:36:9b:e3:e6:6f:23:02:
27:3b:f4:0f:38:f0:17:04:aa:ae:c1:2b:f4:d1:11:
93:f6:cf:77:60:0b:19:90:eb:26:12:77:7b:06:d6:
4d:ec:c5:c6:10:1c:ac:0f:e4:c9:da:8c:25:b6:3b:
d2:40:36:d1:b5:b5:08:a3:56:3b:cd:7d:09:05:eb:
5e:52:52:ad:f4:92:cb:ce:1c:23:97:c4:58:1c:42:
f7:44:2b:86:89:fc:22:6d:14:37:9d:b3:3b:89:52:
94:01:1b:b0:79:73:77:7b:82:42:37:25:9a:40:92:
49:57:5a:7a:13:ec:8e:ea:69:e5:18:21:8a:9a:0e:
ce:16:2c:20:d8:fd:91:1c:13:63:7a:58:23:7f:9f:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5F:6E:3D:41:90:1D:36:02:6F:5E:C9:77:C0:07:56:15:C5:9E:AA
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/g19uPUGQHTYCb17Jd8AHVhXFnqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.242.0/23
85.208.44.0-85.208.46.255
185.104.12.0/23
Signature Algorithm: sha256WithRSAEncryption
88:85:6c:70:f7:34:2a:71:31:b2:07:94:da:fb:e3:ff:15:c4:
67:34:aa:44:6b:ca:30:34:18:ff:43:7f:9a:d4:09:46:fd:ea:
48:2c:96:56:ca:50:1f:52:a0:cf:32:d0:49:11:fb:a3:2f:73:
bf:19:4d:12:e9:e6:ac:b6:80:6a:65:f0:04:3e:27:72:dd:72:
35:63:33:bf:c3:6c:57:da:2f:56:fb:43:09:85:86:1a:d0:bf:
13:c5:b5:be:18:18:ae:0c:b8:4c:e0:17:d2:d8:4f:7b:5e:3c:
9c:fb:71:09:a4:ef:d4:a9:c4:c2:df:66:a1:0e:13:98:68:f8:
27:db:b9:70:20:d5:a4:64:69:32:eb:fc:c8:ae:45:ad:fa:b9:
68:87:b6:6f:06:32:11:b0:b6:fb:fe:a4:60:b9:13:3f:4f:a6:
96:15:3c:c8:4f:56:9e:a0:c1:29:e6:82:d9:c9:fa:48:c5:ee:
7f:f8:90:9d:74:0e:b9:b6:b0:31:ca:e4:f9:37:38:8d:a9:2f:
45:5a:6d:64:84:3c:17:7e:37:01:24:ac:56:af:50:f3:50:f9:
7e:5f:3c:2c:0c:a3:fe:10:67:16:0b:2c:d9:ce:ac:7a:3e:1f:
64:ca:8d:9c:67:2d:3d:8d:70:92:d6:8d:df:30:86:95:d0:f8:
03:3e:3b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 5 19:45:01 2023 by rpki-client on console-fra.rpki-client.org