Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/o2V8ZJMvN_NH0X7yB2E_ZCbLofE.roa
File: o2V8ZJMvN_NH0X7yB2E_ZCbLofE.roa (raw, json)
Hash identifier: cTiFFAOBebbCYf7MjwEsWAWuw2wsap7D571a6B+1gdA=
Subject key identifier: A3:65:7C:64:93:2F:37:F3:47:D1:7E:F2:07:61:3F:64:26:CB:A1:F1
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0189229A14933232A5EC3073DA9E2D05CF3D
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/o2V8ZJMvN_NH0X7yB2E_ZCbLofE.roa
Signing time: Tue 04 Jul 2023 20:31:10 +0000
ROA not before: Tue 04 Jul 2023 20:31:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.84.242.0/23 maxlen: 23
85.208.44.0/24 maxlen: 24
85.208.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:22:9a:14:93:32:32:a5:ec:30:73:da:9e:2d:05:cf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jul 4 20:31:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3657c64932f37f347d17ef207613f6426cba1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e6:1e:5c:f8:01:a7:45:96:74:23:1b:2d:59:
da:cf:2c:34:05:0a:da:a1:29:93:61:3e:8f:91:9b:
40:3e:b1:f4:bc:a0:16:ba:61:ec:09:7b:0f:b3:2c:
c3:be:0a:9f:55:2f:1b:19:bc:cb:28:43:46:a2:bc:
94:de:49:e6:f1:22:a6:b4:20:a9:db:2f:27:bc:96:
a6:b9:40:86:6f:45:7d:f2:ce:e7:ff:33:2e:d1:bb:
e3:53:13:19:65:77:e6:55:30:f7:36:92:7c:b3:df:
9f:b7:9d:1a:46:bb:c0:ec:13:79:bc:e3:d4:79:69:
97:b2:f0:35:91:c9:5d:42:ab:8e:1e:5a:6c:55:c5:
88:c3:c1:b4:3b:8b:d4:2c:4e:65:57:2c:ec:e6:60:
07:fa:e4:ee:09:ca:d2:1e:86:79:da:22:c1:9a:f9:
3a:30:c6:32:29:1c:a9:b8:ed:2f:cd:0e:91:08:b8:
aa:fb:3f:a6:73:44:4e:ae:07:1d:4d:6c:8f:93:66:
0f:5c:14:0b:39:26:f6:62:7c:e9:76:1b:92:28:86:
3e:ab:a7:ff:59:dc:12:a9:ee:55:d7:58:d1:dc:31:
bd:7b:83:c3:66:1a:db:56:5c:f1:2f:52:ee:2b:55:
c6:62:34:51:23:a8:cf:42:88:5a:47:64:c4:c7:6e:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:65:7C:64:93:2F:37:F3:47:D1:7E:F2:07:61:3F:64:26:CB:A1:F1
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/o2V8ZJMvN_NH0X7yB2E_ZCbLofE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.242.0/23
85.208.44.0/23
Signature Algorithm: sha256WithRSAEncryption
23:ef:45:8b:ba:af:76:fa:79:82:9a:8f:9c:03:cb:34:9c:77:
07:c8:b3:d3:14:0e:5f:d7:ae:be:f9:72:8b:9b:76:6d:ed:b1:
b6:f7:df:03:4e:ae:d4:e0:a3:cf:e4:b9:e1:31:2e:48:8b:31:
58:ba:03:ef:24:a2:28:e3:e1:68:dc:e7:90:7f:ad:3b:6e:f3:
aa:d0:c1:6e:b1:63:45:68:e2:14:aa:6e:c7:fd:d1:88:ed:5f:
c8:36:3a:7c:0b:85:2a:1a:e2:ef:40:67:75:2f:ed:a8:16:f2:
d3:ee:7e:85:88:c2:75:1f:a2:b2:c2:17:26:b5:ae:ee:f4:e4:
96:5f:e2:c2:ae:d7:3b:07:0f:d7:e4:fe:c2:2a:2a:ea:fc:d5:
48:b8:1a:58:cb:44:df:3d:80:1a:f4:6b:f6:38:fe:6d:9f:78:
1a:8e:0a:a0:10:d9:73:57:d6:45:c2:59:e3:c0:da:0b:21:51:
69:e3:f7:56:58:df:10:3d:9a:1f:c3:f5:e7:e7:93:bc:b6:2f:
ea:be:38:d4:35:ec:4c:74:2f:d2:14:ab:e9:3f:0a:e8:eb:0d:
30:e4:97:4d:1d:3b:cd:ae:3a:3e:03:27:7f:63:6c:d4:dd:99:
00:ae:bb:5f:6f:f0:81:d9:a2:21:4e:f9:59:1f:39:41:db:1e:
ae:a9:34:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-fra.rpki-client.org