Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jClFIzZydiEF-gD2nRgzjDJaoik.roa
File: jClFIzZydiEF-gD2nRgzjDJaoik.roa (raw, json)
Hash identifier: w+oKu6WmMeIy6MSl/YiDShDjT/G8sLuhKzUQrbewF3w=
Subject key identifier: 8C:29:45:23:36:72:76:21:05:FA:00:F6:9D:18:33:8C:32:5A:A2:29
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01856CAF07CEF7430E28185C8F08DFD8A352
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jClFIzZydiEF-gD2nRgzjDJaoik.roa
Signing time: Sun 01 Jan 2023 09:34:48 +0000
ROA not before: Sun 01 Jan 2023 09:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135392
IP address blocks: 45.84.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:07:ce:f7:43:0e:28:18:5c:8f:08:df:d8:a3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 1 09:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c2945233672762105fa00f69d18338c325aa229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c0:48:d7:ee:5e:72:d7:09:b4:69:67:68:5d:
aa:ed:23:49:97:09:ab:be:61:9a:af:ab:0e:5c:9a:
a4:3b:cc:6e:18:06:b4:20:1f:18:08:0f:1c:74:68:
5a:e0:12:fb:c6:40:c9:49:6e:1c:c5:ad:b2:b5:19:
9c:4f:7c:9e:04:21:0b:70:24:87:16:4a:66:d9:3c:
93:96:37:40:c6:a7:4f:be:8a:f3:48:9d:ed:b7:f3:
89:23:31:36:9b:60:b7:29:4c:b5:69:a2:db:b0:1f:
9a:b1:f4:81:e6:c6:5c:12:19:e9:a7:b6:23:d0:98:
15:7d:9c:77:a3:3c:18:1c:e5:ac:74:d2:38:85:d7:
8f:56:2f:4d:51:b8:7d:4f:82:5c:6c:e2:97:b0:30:
0d:86:6a:2f:a1:37:d8:2d:e0:98:c2:be:50:c7:87:
2c:dd:c9:ec:c6:ad:7f:41:35:55:24:e4:68:83:e0:
f6:09:f2:09:1b:c7:66:a4:55:5c:02:8a:0a:ea:8d:
26:71:81:03:ef:91:54:13:d9:f3:b1:99:fd:a7:e8:
9b:83:ba:73:d7:e5:59:d2:64:e2:ce:23:e5:09:f8:
71:d1:dc:a2:34:23:d0:c8:d1:40:92:5d:10:68:ac:
1b:0a:77:ac:27:62:94:17:27:20:de:13:c9:9c:23:
49:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:29:45:23:36:72:76:21:05:FA:00:F6:9D:18:33:8C:32:5A:A2:29
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jClFIzZydiEF-gD2nRgzjDJaoik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.242.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6a:a2:62:c4:f4:54:4a:5d:40:ad:a9:8a:b9:f2:e0:96:57:
9f:34:9c:40:6a:0d:95:14:d2:6f:05:60:b8:18:7a:bc:e5:0e:
f4:c1:79:26:a5:1e:76:05:b4:5d:e3:d4:44:5e:7b:c4:e3:23:
19:d1:e5:3d:93:7d:61:d8:bb:a9:df:7c:af:d8:8d:ac:76:6d:
81:7a:b5:4d:4e:97:e2:94:6a:b4:7a:dd:2d:1f:9f:60:f4:01:
7d:64:26:95:fd:86:f9:32:12:7f:3d:e8:b4:19:71:f3:35:90:
45:93:28:17:4d:68:20:58:68:84:48:b3:92:3b:50:3d:51:83:
53:db:28:85:29:b5:f6:cb:06:f9:f7:e6:44:d9:4b:0e:b3:e7:
65:c9:63:8f:b1:eb:47:0f:be:0c:0b:bc:fa:9b:18:e1:91:45:
50:a7:52:39:87:67:02:dd:84:63:29:fe:87:e9:70:53:50:c1:
d8:51:32:dc:86:60:1f:a5:fb:8e:f4:4b:72:9c:66:da:a0:fa:
07:ad:19:0f:6a:22:5a:4d:6f:62:26:37:e2:2e:eb:9a:bd:ad:
e4:e6:3a:52:38:c1:56:03:2d:30:0a:30:59:a7:38:db:24:f1:
bc:8d:ca:63:35:2d:f3:5a:08:4a:e4:d4:8b:01:8b:d5:00:e8:
5a:26:b7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:36 2024 by rpki-client on console-ams.rpki-client.org