Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/pAv5Nm50TTQjWvMY51f9lpKAIm4.roa
File: pAv5Nm50TTQjWvMY51f9lpKAIm4.roa (raw, json)
Hash identifier: 5WjhvfY78x/qrx40p76eorfRUxERxmH+t/Zq+2/5JLc=
Subject key identifier: A4:0B:F9:36:6E:74:4D:34:23:5A:F3:18:E7:57:FD:96:92:80:22:6E
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01856CAF052A7182BED3C4960DD164275875
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/pAv5Nm50TTQjWvMY51f9lpKAIm4.roa
Signing time: Sun 01 Jan 2023 09:34:47 +0000
ROA not before: Sun 01 Jan 2023 09:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 45.84.242.0/23 maxlen: 24
185.104.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jul 2023 15:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:05:2a:71:82:be:d3:c4:96:0d:d1:64:27:58:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 1 09:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a40bf9366e744d34235af318e757fd969280226e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:2c:a2:a0:70:33:77:49:72:1e:57:a7:52:
2c:2f:c0:31:df:52:ca:d0:02:6f:bb:d4:ff:8d:bb:
5f:5c:56:8c:b5:f0:b3:1e:50:a5:6c:9f:46:ea:ef:
f0:08:b9:66:98:5b:dc:8d:96:92:4a:61:81:71:39:
69:a1:ec:1f:0a:1e:45:86:6e:aa:53:8c:d5:ff:f0:
da:34:fd:7d:7c:40:ea:1f:27:9d:ca:23:36:84:43:
ba:6e:cf:11:1b:2e:3b:e4:e1:22:e8:bd:f4:28:48:
f1:d1:a6:d8:61:0f:99:43:35:3e:7f:63:6a:c7:16:
77:5d:c0:80:58:7f:56:ad:ff:93:77:bf:1e:7f:30:
e2:94:92:00:a4:80:80:a2:ae:14:96:b7:d6:70:26:
35:08:f0:40:ab:8b:5f:ee:21:87:c5:64:b2:1a:20:
ee:76:eb:8f:9f:43:58:d5:65:45:c6:1b:00:e9:03:
54:78:da:b1:c0:1b:96:3d:15:03:7f:ee:70:43:39:
c2:e6:9d:61:69:52:ac:06:b8:90:b9:13:88:05:d6:
19:21:f5:3d:6a:e4:0d:3b:97:88:ca:02:ca:b1:0b:
c9:17:0e:77:70:43:62:69:f3:4a:38:bf:67:7a:e3:
41:48:d5:c3:bf:56:58:e7:a7:f9:58:f3:1d:5b:ac:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0B:F9:36:6E:74:4D:34:23:5A:F3:18:E7:57:FD:96:92:80:22:6E
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/pAv5Nm50TTQjWvMY51f9lpKAIm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.242.0/23
185.104.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:54:88:58:60:c2:2f:86:73:f7:ea:c5:80:3f:e0:b9:88:00:
7b:93:0b:a8:b4:46:f7:96:19:0e:14:8b:0b:d8:e1:d1:d3:1e:
ff:c8:30:b4:af:59:f6:64:f1:76:6f:0e:fa:c6:f9:6a:b9:de:
c6:77:08:39:eb:ef:d4:11:b6:9f:7d:3d:b6:bc:e5:70:69:a0:
eb:cd:a6:00:46:16:12:ef:ec:3f:7a:d3:8f:c9:05:9f:62:c1:
80:1d:06:ad:2e:15:65:d7:40:f2:34:c8:95:8b:a7:10:71:8d:
4a:72:5b:23:39:6c:31:9c:a1:8b:42:6e:5f:70:1d:01:06:25:
25:32:f8:7b:7a:bd:d8:f8:22:d6:12:3a:0f:2b:96:8a:de:e5:
9b:92:80:09:56:bf:9a:2b:4c:cb:17:e9:4d:0a:f1:ca:51:83:
79:9b:39:9d:a4:94:b5:a2:c9:d9:e1:f7:a6:52:e5:6f:fb:c7:
9d:a6:37:f8:5f:76:4d:d7:51:d5:7e:17:eb:d5:25:63:bd:aa:
aa:c5:e6:fe:51:6e:9f:d4:37:db:a8:6f:61:53:4e:6d:54:99:
8f:04:a3:e2:92:9f:02:75:fc:11:2f:f9:01:1c:df:40:20:ba:
34:a5:1f:61:4e:cf:07:eb:7f:e2:fa:65:d4:b3:a0:91:03:f8:
a1:75:81:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:23 2024 by rpki-client on console-ams.rpki-client.org