Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/wdtyuo7pjhHIEa2mliYox0EBdqA.roa
File: wdtyuo7pjhHIEa2mliYox0EBdqA.roa (raw, json)
Hash identifier: SJbxkr75djq20++AWN43vPcAgsBXjKVyUCG0Yj9mnjc=
Subject key identifier: C1:DB:72:BA:8E:E9:8E:11:C8:11:AD:A6:96:26:28:C7:41:01:76:A0
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018CC794F89E4F4F1D348BE55A836EB0507F
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/wdtyuo7pjhHIEa2mliYox0EBdqA.roa
Signing time: Tue 02 Jan 2024 00:31:18 +0000
ROA not before: Tue 02 Jan 2024 00:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 45.84.240.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 15:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:f8:9e:4f:4f:1d:34:8b:e5:5a:83:6e:b0:50:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 2 00:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1db72ba8ee98e11c811ada6962628c7410176a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:bc:e8:fb:79:a1:54:d8:ae:62:50:fe:ed:
9e:a2:37:da:db:79:33:a8:1b:92:f4:f3:34:25:63:
56:0a:53:8e:28:dd:08:6c:34:ce:39:03:fa:d5:d9:
59:96:84:78:c7:53:6c:13:f1:2c:87:2c:41:41:23:
d4:e8:73:a1:21:4b:18:9c:7d:57:3e:0b:92:f1:22:
7b:8b:5b:f9:1b:c9:79:5b:cc:83:68:34:7d:8f:d1:
e3:b2:e7:19:71:d8:6e:0c:7e:ed:40:7a:a9:69:31:
0c:a2:d8:6a:9b:cc:3d:39:3f:db:e4:ef:ed:11:67:
a1:cf:96:e3:91:c7:84:1e:38:0c:f2:cf:93:bc:85:
a8:4c:e3:af:4e:6f:68:af:99:35:e9:70:13:83:9d:
60:e8:ae:87:02:7b:0a:ae:1c:18:c0:56:ae:d4:e5:
31:f6:60:d7:e1:63:96:03:ec:2b:13:de:17:6f:8b:
6d:7d:3c:e1:ba:bc:8a:54:b5:17:8f:1b:3f:53:bc:
63:d4:f0:b5:cd:cd:eb:bc:63:e1:ae:aa:7c:09:2e:
ac:d3:3c:c6:ce:62:fe:99:59:64:5c:a1:ed:e8:78:
e7:cd:48:db:58:ce:bd:1f:4f:5d:b8:47:f9:12:1e:
ff:97:01:2b:b2:72:c4:06:a7:33:f6:0e:51:03:12:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DB:72:BA:8E:E9:8E:11:C8:11:AD:A6:96:26:28:C7:41:01:76:A0
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/wdtyuo7pjhHIEa2mliYox0EBdqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.240.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:18:0b:48:d5:37:d7:fb:3c:34:b6:5d:79:12:ce:5d:16:3d:
7e:c8:18:d5:aa:d3:03:49:30:f2:ac:84:c9:3b:70:d1:73:0b:
cf:9b:d4:07:11:07:21:ec:66:3f:f8:a6:c6:0e:13:3a:ae:e7:
25:95:29:ff:29:3b:3c:95:22:9e:67:93:df:c7:b4:05:9a:02:
fa:85:2c:ff:75:52:a6:16:d6:d5:49:2a:d9:bf:07:d0:1b:08:
58:be:ff:19:89:19:67:8b:b0:16:db:ba:e0:c2:40:07:ea:54:
35:e0:4e:bb:4b:9e:21:ae:d7:8d:25:d2:0f:73:da:54:66:0c:
2d:ca:ad:42:7d:29:f1:c5:3a:3f:29:4e:6b:1d:55:86:d3:e6:
b5:a4:22:33:f5:42:ad:9f:81:01:e9:e9:0e:e5:2e:30:e7:84:
2a:0f:f8:62:f4:c7:be:8e:4c:29:69:d7:ba:d1:bc:27:f8:73:
20:44:8a:0c:4d:28:46:c4:08:6d:a4:1e:81:69:ec:44:76:4b:
72:78:99:b7:9d:40:ef:9f:1a:eb:33:22:e4:70:1d:ab:a8:35:
2a:f8:68:8e:ce:5e:b9:a8:d5:59:f8:ad:5d:fd:ad:eb:2c:bd:
7a:b1:26:3f:38:da:92:9a:8a:8e:b2:04:ed:2b:25:77:07:d4:
ba:9d:88:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 24 19:37:28 2024 by rpki-client on console-ams.rpki-client.org