Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_IQQ7kskmO2nziWoU2gimQL7XT0.roa
File: _IQQ7kskmO2nziWoU2gimQL7XT0.roa (raw, json)
Hash identifier: qXrlc1H54N4KmeceI1Novq1Tn0J531ksngp5tIEklsg=
Subject key identifier: FC:84:10:EE:4B:24:98:ED:A7:CE:25:A8:53:68:22:99:02:FB:5D:3D
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0185B2DD092D00A0BC5723EF8143B0187A9D
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_IQQ7kskmO2nziWoU2gimQL7XT0.roa
Signing time: Sun 15 Jan 2023 00:38:28 +0000
ROA not before: Sun 15 Jan 2023 00:38:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29066
IP address blocks: 185.233.19.0/24 maxlen: 24
45.155.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 15:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b2:dd:09:2d:00:a0:bc:57:23:ef:81:43:b0:18:7a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 15 00:38:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc8410ee4b2498eda7ce25a85368229902fb5d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:62:60:e4:75:7c:2c:f3:10:55:fc:86:ad:aa:
50:ff:5a:68:5b:6d:ac:8a:5c:01:f4:45:20:f5:5e:
e1:5f:ef:47:cc:1e:9d:e4:9d:ca:01:d2:0d:a0:19:
51:ab:75:2a:7b:68:54:10:a9:7a:18:25:af:f7:0b:
c4:0c:61:58:c0:5e:6e:9c:23:09:35:70:78:78:03:
89:d6:b8:2e:08:3f:e3:a6:b0:81:d7:8b:1f:8d:0e:
f9:f7:0e:8e:e6:98:02:fb:77:34:66:31:e2:51:5f:
55:90:7a:70:68:b7:12:38:53:bd:8c:5a:0d:ce:3e:
94:46:b3:eb:ad:3a:5f:c6:f1:03:a7:71:2a:70:d5:
27:92:a8:97:81:76:07:17:4a:af:7e:04:07:0a:53:
1b:53:30:d8:ad:f7:fa:0b:b4:22:c6:5c:05:24:2a:
32:08:ab:f1:c2:32:03:18:78:f0:a8:38:fd:aa:09:
81:8f:ac:74:56:4a:1c:3e:31:2a:2c:cb:9a:ea:64:
24:c1:31:c0:59:c5:c4:f3:02:47:d2:6f:ab:e2:43:
9d:be:81:93:b7:9b:0a:75:f2:98:e6:ba:e8:0d:ab:
20:0d:34:82:1e:7d:f5:d7:5c:9e:7d:ad:9e:c2:13:
3b:1c:66:03:5f:55:05:30:24:e3:b4:a6:a1:b8:11:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:84:10:EE:4B:24:98:ED:A7:CE:25:A8:53:68:22:99:02:FB:5D:3D
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_IQQ7kskmO2nziWoU2gimQL7XT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.88.0/24
185.233.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:cc:c4:23:f6:2c:50:b0:fe:4d:40:05:63:78:79:6b:e2:10:
f6:9c:25:5d:1e:06:61:38:39:bc:91:4c:56:19:d9:43:4f:bf:
c5:a5:cc:71:6f:46:b0:e8:70:62:1e:9b:0c:68:94:85:1d:01:
5a:27:fd:eb:6f:27:9b:65:69:95:16:97:8b:10:f2:3d:05:38:
85:5c:73:42:e3:ae:c8:ca:6a:8f:46:cb:86:9a:0d:0c:79:33:
41:ff:50:0c:32:40:ae:2e:6d:46:1e:8e:7b:f2:6d:42:5b:69:
82:df:19:95:e5:a1:bb:97:7d:83:fc:be:b8:41:6d:e7:66:16:
07:13:79:9f:07:db:f4:52:82:20:7a:32:43:69:58:d7:34:df:
da:06:a1:1c:e2:8e:e0:52:2e:44:59:29:7d:47:b8:6d:1c:c2:
b2:59:3e:00:e7:f6:dc:5b:08:2d:fc:b0:a0:5c:3f:88:34:39:
b3:d4:b5:c9:9b:20:24:37:10:76:95:89:fc:9d:0b:46:d8:d1:
f5:27:74:0e:49:fc:2c:a8:5f:b8:ba:1b:c6:e6:f9:68:22:e5:
c7:57:8d:f8:98:5a:fa:a5:52:89:e7:f4:d9:9e:43:cd:f3:d8:
43:a2:f7:6f:8c:eb:97:5d:c2:c1:5f:f5:44:87:1d:6d:dd:77:
05:7e:92:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org