Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/c_60c8BSlwZinOowEj2c10CEd10.roa
File: c_60c8BSlwZinOowEj2c10CEd10.roa (raw, json)
Hash identifier: FGI1PrqpOAYFml6VzzMDKuuaewPeLsgQnt5Ja5AUCEA=
Subject key identifier: 73:FE:B4:73:C0:52:97:06:62:9C:EA:30:12:3D:9C:D7:40:84:77:5D
Certificate issuer: /CN=0265ad94e797135906b3e11a847c8eafd094e745
Certificate serial: 018570399E3ACC2A10B14C1F20EC1E11CA3C
Authority key identifier: 02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/c_60c8BSlwZinOowEj2c10CEd10.roa
Signing time: Mon 02 Jan 2023 02:05:02 +0000
ROA not before: Mon 02 Jan 2023 02:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51985
IP address blocks: 185.45.172.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:9e:3a:cc:2a:10:b1:4c:1f:20:ec:1e:11:ca:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0265ad94e797135906b3e11a847c8eafd094e745
Validity
Not Before: Jan 2 02:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73feb473c0529706629cea30123d9cd74084775d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:28:a5:07:a4:83:56:b9:8a:fc:13:72:95:
e7:2d:5f:f4:c4:18:05:11:0e:e3:38:81:24:09:ec:
6c:03:c3:12:32:73:bd:ec:c0:ca:8e:bf:4f:e7:44:
35:d9:2e:53:70:38:8b:c5:0b:dc:8f:61:9f:7b:a3:
91:6c:a6:31:d9:93:5d:62:7d:5e:fc:bd:0b:ad:32:
ad:bf:09:4f:85:ba:8f:e9:ca:8a:d6:8e:f0:d9:30:
eb:85:b4:d8:2e:5f:f1:65:11:99:b7:a6:37:7e:41:
e8:31:14:57:26:d3:e4:26:d5:a3:c4:d4:46:16:30:
85:a2:d0:56:79:6c:c5:77:56:fb:15:c8:cc:cf:4a:
a3:43:4b:97:49:66:3c:7b:58:8b:b5:6c:56:f0:cf:
f0:8b:5d:b0:9e:b1:9b:37:c0:c3:cf:a8:ae:fd:0b:
00:ba:b8:cf:1e:cb:91:14:57:3d:4a:8a:b9:6c:b5:
06:e9:2d:28:a3:d1:81:d1:a6:92:29:e5:92:b8:4d:
50:46:96:c7:8e:b3:d0:54:55:bf:5e:99:94:88:62:
31:ba:c9:4a:44:78:99:97:63:d9:2b:f9:5e:2a:79:
a7:98:28:37:c5:79:0c:d7:8f:26:de:6b:74:98:b1:
4f:7b:e1:f7:21:2e:54:32:de:65:fc:a1:ce:2c:00:
42:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FE:B4:73:C0:52:97:06:62:9C:EA:30:12:3D:9C:D7:40:84:77:5D
X509v3 Authority Key Identifier:
keyid:02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/c_60c8BSlwZinOowEj2c10CEd10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.172.0/22
Signature Algorithm: sha256WithRSAEncryption
af:2f:af:b8:6d:4c:45:8a:47:03:18:27:66:9f:ae:3d:60:56:
1d:22:f5:35:35:0f:a8:c1:77:b4:60:a5:13:68:23:cf:ea:ac:
e7:0b:7a:1e:b1:f3:b7:d4:b7:4e:b3:57:ff:9f:7b:95:21:8f:
7b:43:d5:9e:bb:e4:e4:d1:3f:8d:08:d4:97:0a:ba:de:b9:23:
4e:c9:40:41:05:82:f2:de:f4:34:ff:bf:e0:77:52:61:15:c6:
e6:1f:4e:59:bf:d8:e1:c3:ae:ce:66:19:13:89:8b:b2:dc:4f:
28:85:9c:a2:b3:03:83:43:bf:20:e8:e3:05:f8:81:04:cf:13:
ea:04:a4:ed:47:76:50:a7:b2:45:fc:77:a4:5e:31:32:0c:1d:
7d:27:b5:85:98:fb:4c:9c:4d:86:c3:d7:4b:47:2e:f3:78:61:
3d:f6:ed:2b:f9:03:61:db:ca:b9:9a:e8:66:ca:01:53:d6:ec:
7f:3a:d9:48:6b:ca:ed:33:99:73:31:21:cb:53:a7:fa:39:40:
35:f9:bd:99:14:8b:30:5a:9f:ea:c2:c8:d1:de:39:ed:33:de:
23:c9:12:3b:61:90:58:6f:aa:bc:81:95:94:86:78:3e:15:d9:
60:fa:90:73:d3:b6:30:9f:05:56:59:c9:10:97:d8:04:5a:36:
fa:72:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:24 2024 by rpki-client on console-fra.rpki-client.org