Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/wvckcRHcii7SgBpPNkkxOI9JwfU.roa
File: wvckcRHcii7SgBpPNkkxOI9JwfU.roa (raw, json)
Hash identifier: WXKepJ/L2XUsrsOHssLB+AfF5ww9P6R5SiV97IH0TRM=
Subject key identifier: C2:F7:24:71:11:DC:8A:2E:D2:80:1A:4F:36:49:31:38:8F:49:C1:F5
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0189EFFE75EE0EB7A4B20A219E271E4BD6EE
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/wvckcRHcii7SgBpPNkkxOI9JwfU.roa
Signing time: Sun 13 Aug 2023 17:42:58 +0000
ROA not before: Sun 13 Aug 2023 17:42:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.84.242.0/23 maxlen: 23
185.104.12.0/23 maxlen: 24
85.208.44.0/23 maxlen: 24
85.208.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ef:fe:75:ee:0e:b7:a4:b2:0a:21:9e:27:1e:4b:d6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Aug 13 17:42:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2f7247111dc8a2ed2801a4f364931388f49c1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8a:5c:fb:77:c0:dc:44:26:0f:54:ec:16:81:
2c:ee:ec:22:44:dd:60:46:d9:d6:db:08:33:5c:6d:
d2:57:9b:84:c5:bb:82:b7:30:5e:61:b6:e3:14:05:
fe:d7:56:57:c6:c1:52:9a:d4:05:4c:42:37:31:e6:
21:1e:bb:c2:c0:e3:8f:47:f4:7c:12:8a:b1:8d:2e:
c8:2a:f1:bd:c5:eb:28:7a:a6:a1:f1:59:4f:fd:84:
f6:3b:50:d4:40:89:ad:da:ed:46:98:40:dc:e0:ab:
95:36:39:64:8f:88:5b:f6:b2:79:f1:f4:d5:25:fa:
7e:f8:04:7b:bb:2d:8f:ef:95:7b:c1:07:82:8b:39:
06:e4:20:d6:f1:c1:02:20:49:73:92:f9:81:81:48:
25:e2:3f:29:79:ff:56:65:a8:49:79:54:f9:45:84:
27:aa:3b:e8:93:d5:7c:aa:ca:83:e5:2c:16:ae:03:
90:89:4a:cb:22:86:e1:7e:a6:f7:81:cd:4d:57:ae:
cb:a0:2d:b8:ad:2a:6a:b0:83:3d:9b:32:96:f1:a6:
ad:8b:84:12:6d:fc:6c:14:21:be:46:3e:44:53:ea:
b5:94:2f:cb:93:f0:08:dd:0b:6c:e5:6c:30:ec:c4:
1b:fa:88:c5:72:dd:11:57:78:3c:9d:fa:8c:d6:7d:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F7:24:71:11:DC:8A:2E:D2:80:1A:4F:36:49:31:38:8F:49:C1:F5
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/wvckcRHcii7SgBpPNkkxOI9JwfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.242.0/23
85.208.44.0-85.208.46.255
185.104.12.0/23
Signature Algorithm: sha256WithRSAEncryption
89:8d:c7:4a:c0:16:74:1d:b6:d6:3a:ae:ef:a2:c6:cf:f3:12:
5d:37:be:a7:29:0a:9a:7c:15:42:15:48:66:7e:7d:6e:61:d2:
2c:55:40:be:30:9d:70:fd:68:c5:82:f7:99:48:4b:a6:02:84:
dd:2e:86:e8:96:f8:91:19:0f:10:bb:2f:aa:d6:98:7f:86:8e:
89:3c:29:f1:a8:43:3d:c8:e0:fd:0c:8c:b8:b5:d4:40:1b:af:
e3:e2:75:74:b8:c0:43:66:ca:f8:f2:f4:d0:52:98:e1:58:01:
ff:a7:6a:9e:75:5e:20:98:39:1c:a3:45:53:89:56:12:3f:e6:
bc:db:39:bb:99:df:0f:14:9c:a6:ff:87:d5:bf:60:c6:4c:99:
df:5a:67:00:f2:42:2e:31:65:27:0c:e0:f3:79:33:49:74:8c:
26:22:d4:58:23:11:cd:3c:02:af:1a:aa:cd:d5:d2:33:ac:83:
ae:33:4b:30:61:c6:ef:a6:b5:00:e8:c2:55:e4:71:3c:31:8e:
da:50:bb:a9:d0:0b:10:e6:91:25:6f:de:1e:5e:ae:28:3c:fd:
d6:07:a6:21:ec:54:33:1a:8e:67:60:46:a2:24:1b:d3:87:ec:
ee:51:e5:b8:1b:34:d5:a2:00:c6:d9:0b:e4:74:2b:9d:3a:ed:
ef:b1:69:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 13 19:59:43 2023 by rpki-client on console-ams.rpki-client.org