Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/z3jPNPRa79eSOH2XKNA1kjWtMho.roa
File: z3jPNPRa79eSOH2XKNA1kjWtMho.roa (raw, json)
Hash identifier: 0Zg27H16inKovr5AukhO9e0slsa6qyr0ANr8/YxHDQo=
Subject key identifier: CF:78:CF:34:F4:5A:EF:D7:92:38:7D:97:28:D0:35:92:35:AD:32:1A
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0187A5D4880DB44D28B742C9095BB9A34B16
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/z3jPNPRa79eSOH2XKNA1kjWtMho.roa
Signing time: Fri 21 Apr 2023 21:59:41 +0000
ROA not before: Fri 21 Apr 2023 21:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.208.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a5:d4:88:0d:b4:4d:28:b7:42:c9:09:5b:b9:a3:4b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Apr 21 21:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf78cf34f45aefd792387d9728d0359235ad321a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:93:43:99:de:6e:0a:b7:64:b3:1e:fc:ca:e3:
fc:09:4d:db:03:e9:30:08:bb:85:b1:d3:b4:15:25:
14:23:2c:85:a5:34:5d:f7:0f:c2:5e:39:cd:1f:81:
72:85:a5:ab:04:2e:aa:88:04:54:d6:cd:ac:91:10:
94:b6:73:e2:42:bd:f5:76:c1:ec:33:09:bf:75:a5:
d9:db:3e:ba:d8:2c:33:52:84:48:99:8c:1d:50:1c:
57:38:47:8b:8c:7f:ad:47:76:1f:38:9a:c1:91:a2:
04:98:5a:ae:14:a2:96:f2:68:63:f0:3f:48:39:ed:
04:09:3d:85:69:b8:96:5c:89:23:46:2d:82:61:11:
87:c3:cd:f1:a5:e4:d9:17:76:e4:08:be:98:d6:e7:
1d:b4:22:bb:66:be:2c:69:77:c4:a0:be:49:f2:0c:
a1:ef:14:c1:5d:52:df:02:a5:0c:4a:8b:87:0d:09:
16:d5:65:6c:d0:c6:80:4c:57:43:9e:6e:99:43:2d:
30:d5:86:a4:ab:04:2f:d3:5f:22:83:27:55:97:7b:
9e:2f:2b:f5:de:97:a7:e3:c0:60:ec:05:d0:43:99:
48:7f:5b:64:d8:a8:30:8f:08:e8:c0:20:9b:37:4e:
dc:c7:68:f4:01:c0:5a:01:9b:05:b9:ae:06:ab:a6:
60:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:78:CF:34:F4:5A:EF:D7:92:38:7D:97:28:D0:35:92:35:AD:32:1A
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/z3jPNPRa79eSOH2XKNA1kjWtMho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.45.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:9f:5f:f1:1e:c5:bd:74:45:b4:f9:33:53:c6:80:1a:df:f6:
2c:bf:97:50:59:7f:5a:33:f6:f0:6c:e8:f0:75:ae:52:86:aa:
ce:af:ed:cf:9d:b6:7b:2e:b9:81:c4:7b:ce:79:a3:47:2f:24:
45:a3:0e:62:9d:59:66:1d:d9:f7:11:85:6e:8e:6b:8d:5b:68:
95:8c:0c:b6:ff:42:4c:1b:ed:05:cf:3e:9a:7d:84:77:99:60:
15:2d:20:32:8a:1d:ab:70:34:7f:1d:1e:5a:24:d2:cf:b3:c2:
d7:6e:cf:a3:04:31:fe:24:62:28:17:39:a7:8a:0e:ef:31:1a:
6d:52:74:7b:f3:bf:0c:1b:ab:d0:04:48:d8:c2:e0:49:a2:44:
5d:63:12:59:fa:8c:b8:03:7c:cf:b5:42:f5:2f:ca:83:fc:71:
18:df:18:dc:0d:97:11:a2:bf:79:d7:d6:cb:51:10:e1:59:ce:
d0:34:d3:55:0c:a6:46:2d:4a:11:c4:aa:dd:cc:6a:e3:cc:bb:
20:8b:e6:78:51:32:86:a9:b4:f3:c7:66:35:67:45:25:8c:04:
4d:9a:3b:fe:1c:85:ab:2b:32:c6:98:28:db:59:80:42:e5:1e:
4e:83:c6:1a:f5:31:06:17:83:7d:03:1a:01:01:fc:50:3a:ea:
64:9c:4d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-fra.rpki-client.org