Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/rb0VC5LFuv8SixPfaIGmRKFFgbU.roa
File: rb0VC5LFuv8SixPfaIGmRKFFgbU.roa (raw, json)
Hash identifier: /s4e+tOENqT7oIFpABNE5AtojM7MjfX9Mv1Dtz6sam0=
Subject key identifier: AD:BD:15:0B:92:C5:BA:FF:12:8B:13:DF:68:81:A6:44:A1:45:81:B5
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 01864A6B4CC8AA3AD8780E6D4B97A6D739E8
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/rb0VC5LFuv8SixPfaIGmRKFFgbU.roa
Signing time: Mon 13 Feb 2023 10:56:30 +0000
ROA not before: Mon 13 Feb 2023 10:56:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207348
IP address blocks: 85.222.164.0/22 maxlen: 24
45.142.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 08:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4a:6b:4c:c8:aa:3a:d8:78:0e:6d:4b:97:a6:d7:39:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Feb 13 10:56:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adbd150b92c5baff128b13df6881a644a14581b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1a:80:30:86:c4:ba:ff:5e:d6:96:7d:7d:7c:
44:22:1f:72:2e:a8:f7:11:77:fc:cc:08:b9:61:75:
97:47:5f:92:66:e4:ff:ef:18:e8:c5:66:ce:2b:29:
c6:9f:87:fc:90:69:a6:04:67:74:e6:20:1f:a7:45:
84:c0:04:4e:47:29:85:30:54:23:f7:07:d2:5d:60:
a1:7a:38:a1:65:de:bf:2b:f6:71:1e:68:f0:7b:a3:
b0:89:d8:ef:e6:3c:d1:57:a9:3a:9b:72:60:72:e6:
99:c5:2f:a8:f2:22:4f:84:fd:49:8e:04:b5:20:79:
39:b1:29:21:f4:77:6f:0e:ee:f7:5e:e4:87:be:46:
47:24:17:e7:9d:10:c1:cb:5a:00:12:8b:c0:5a:59:
f9:f0:15:34:f4:91:6c:90:5c:cb:c5:9c:41:63:ac:
36:a6:db:aa:ba:3f:4a:ed:68:4a:c8:e7:d5:e1:d3:
e8:40:af:e2:5d:92:08:5d:a5:fa:1f:f2:c4:1b:31:
37:9d:75:0b:d7:36:c1:af:fc:8c:a4:0a:c3:47:24:
22:03:41:bf:b1:10:8d:56:95:53:f0:43:fc:49:5e:
19:4b:8f:d0:9b:da:ad:a9:e5:51:cd:48:fa:c1:bd:
c6:3a:28:0b:13:2b:a7:e1:a0:bc:9e:e8:5d:2b:75:
e8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BD:15:0B:92:C5:BA:FF:12:8B:13:DF:68:81:A6:44:A1:45:81:B5
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/rb0VC5LFuv8SixPfaIGmRKFFgbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.8.0/22
85.222.164.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:17:e7:57:5d:0f:07:41:9b:fc:7a:a8:fd:c2:85:f8:9e:bd:
bd:c7:18:a5:a1:09:fc:e7:40:ad:63:bc:e8:60:6e:fc:7e:12:
02:fb:ec:71:ce:69:9e:c6:dc:5e:0b:b8:2c:85:61:ac:02:f5:
46:58:f9:67:de:ac:1c:6e:07:83:89:a5:c0:cf:08:d9:b4:dd:
20:18:32:22:f5:a1:e7:e5:18:34:ee:cd:18:35:af:f4:c6:ef:
f4:ea:c4:0c:99:07:9a:dc:e1:f2:19:7c:c8:ae:d9:a3:fb:b8:
b3:71:c1:32:ab:10:ba:41:49:e3:7e:6d:18:f5:8f:6b:d8:69:
d6:f8:88:e4:67:54:a1:96:c4:41:35:3d:45:9a:29:0a:33:d6:
39:f8:25:cf:7f:65:86:eb:72:39:88:52:13:d8:7f:73:7d:9d:
a7:e7:1e:b4:8e:9e:31:9d:ec:47:0e:bb:b9:6d:4d:8a:fe:10:
a7:8b:b9:3d:d4:8d:14:3d:fe:d6:b5:ad:95:95:61:c1:73:f2:
b2:6a:75:0f:8b:db:78:93:1f:c6:49:68:80:d4:f4:d2:e8:d3:
64:4d:d2:67:b4:37:7b:fc:fd:ea:6a:57:b6:8f:0e:73:9a:3c:
51:fc:68:f1:a9:00:09:78:66:46:0f:e8:24:10:65:fd:39:5f:
e8:62:5e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:33 2024 by rpki-client on console-ams.rpki-client.org