Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/w0gkW7GR4IBNfEeA1hLzonMkijY.roa
File: w0gkW7GR4IBNfEeA1hLzonMkijY.roa (raw, json)
Hash identifier: n+Jt5y3qAPUr67KkXEkBdO/fy9DKx8TdCGze/R/Zn78=
Subject key identifier: C3:48:24:5B:B1:91:E0:80:4D:7C:47:80:D6:12:F3:A2:73:24:8A:36
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01894AB82F100221178544DECEC5C720EEB6
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/w0gkW7GR4IBNfEeA1hLzonMkijY.roa
Signing time: Wed 12 Jul 2023 15:28:51 +0000
ROA not before: Wed 12 Jul 2023 15:28:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.84.242.0/23 maxlen: 23
185.104.12.0/23 maxlen: 24
85.208.44.0/24 maxlen: 24
85.208.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jul 2023 20:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:b8:2f:10:02:21:17:85:44:de:ce:c5:c7:20:ee:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jul 12 15:28:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c348245bb191e0804d7c4780d612f3a273248a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:ce:76:a9:e1:01:3d:35:83:ef:5b:69:17:
08:d3:be:50:a7:19:21:42:1f:ff:3d:6f:30:9a:da:
ae:b3:fb:5e:83:62:4c:9b:fe:d3:8d:fc:2b:3b:9e:
da:21:c5:99:75:7b:9e:76:6b:3a:e6:1a:25:8f:d8:
f3:bf:a4:d1:9e:e2:bd:0f:36:1d:6d:93:c9:14:62:
a3:e9:6e:25:85:82:0e:d3:6a:98:ee:5d:1d:25:82:
08:76:12:be:eb:8d:f2:19:74:b6:65:7e:af:ae:a7:
10:b8:a8:5c:fd:e0:17:5b:4d:35:62:03:88:92:e2:
aa:14:6e:01:0f:db:32:5b:9a:46:da:6d:8d:a5:59:
83:e2:28:97:23:2b:da:f9:97:e7:3c:57:64:5a:3f:
ff:4f:5f:2e:85:d3:48:f3:03:a7:60:f2:11:8e:33:
71:d7:72:93:89:06:3c:07:73:e2:11:a9:5e:4e:9b:
ee:76:6f:e7:0a:b0:65:48:53:c8:cb:d2:2e:40:9c:
39:0b:6d:10:b2:19:6f:89:b7:0d:fe:d8:17:ef:de:
62:b7:08:9f:3e:ab:26:d1:25:b4:89:d3:c1:70:87:
94:dc:02:83:73:6f:92:6d:3b:0a:68:f2:c8:41:e2:
52:02:12:67:72:c6:2f:df:d0:b2:d7:3b:47:33:eb:
8b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:48:24:5B:B1:91:E0:80:4D:7C:47:80:D6:12:F3:A2:73:24:8A:36
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/w0gkW7GR4IBNfEeA1hLzonMkijY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.242.0/23
85.208.44.0/23
185.104.12.0/23
Signature Algorithm: sha256WithRSAEncryption
94:d6:09:c9:f0:2a:18:44:67:e5:1f:d1:0b:39:b3:09:57:b6:
5e:69:b1:32:3c:74:54:7d:aa:0f:24:7b:18:66:7a:62:a5:15:
d4:88:f8:2f:e8:5f:2e:80:d8:6e:6d:a8:40:a8:f6:9d:05:5a:
12:99:af:07:a9:28:26:9b:d1:63:de:a9:b3:25:b1:83:75:e5:
47:c8:14:e5:56:da:ec:f3:b9:26:43:4b:53:fb:e4:81:9e:94:
de:1a:6d:42:37:28:cc:ba:09:11:05:03:bc:52:73:44:a2:ad:
b6:64:27:41:f7:ef:7f:d7:af:cf:2e:ec:9b:ce:8d:05:06:cc:
07:9f:f1:f5:23:32:70:8d:25:8d:ed:95:45:a9:41:c1:90:95:
25:fd:3b:d4:5b:ba:38:0e:e5:55:e7:7a:ef:42:fe:3b:5c:41:
e9:51:c8:ee:e5:70:e7:0c:b6:c4:f7:6b:99:b4:94:93:b7:90:
4f:10:3f:0f:be:16:4c:f4:9c:77:a0:42:00:d3:7c:9c:b6:1a:
2e:47:d4:13:6d:d8:6e:a6:73:e8:3d:7b:cf:35:a6:56:1e:a4:
f4:7a:06:db:65:f6:05:db:6f:03:0d:15:64:89:aa:86:07:0f:
f4:c7:5e:0d:4e:82:48:3b:08:a6:28:8b:9b:a6:56:1e:a8:59:
6f:10:a7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:23 2024 by rpki-client on console-ams.rpki-client.org