Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/rOFwKCPM5VU-2bxfv-G9l-13ppE.roa
File: rOFwKCPM5VU-2bxfv-G9l-13ppE.roa (raw, json)
Hash identifier: roG20nqL3yVec5U5VaZZLyGHeOZycMQNOO8o1df4KJM=
Subject key identifier: AC:E1:70:28:23:CC:E5:55:3E:D9:BC:5F:BF:E1:BD:97:ED:77:A6:91
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01856C5CA1595BC90CB44DF8FD1BFD979595
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/rOFwKCPM5VU-2bxfv-G9l-13ppE.roa
Signing time: Sun 01 Jan 2023 08:04:48 +0000
ROA not before: Sun 01 Jan 2023 08:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 45.80.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 May 2023 08:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:a1:59:5b:c9:0c:b4:4d:f8:fd:1b:fd:97:95:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jan 1 08:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ace1702823cce5553ed9bc5fbfe1bd97ed77a691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ac:ee:85:54:86:9f:e3:76:76:19:26:5c:e7:
1b:33:12:fe:af:64:25:ff:c9:8b:df:49:f2:26:16:
73:87:30:47:47:05:7d:21:c6:ad:81:69:aa:d3:58:
b9:63:c7:2b:9b:77:f6:3e:2d:61:f1:51:c8:d7:c2:
f0:5f:de:36:b5:87:8e:d4:72:d3:e0:41:0c:0f:17:
8a:ca:72:4c:16:dd:52:f2:7b:52:b5:76:93:fd:d4:
0b:65:01:fb:04:94:ff:0c:9d:6f:5d:4f:73:e0:71:
9d:c2:cd:0c:e9:5b:93:e8:aa:9e:f8:bf:c4:90:ba:
eb:ae:56:a4:52:6a:54:c3:f2:7c:54:13:ac:45:fd:
a5:d9:be:b2:1b:ac:b3:bd:23:f7:92:f7:70:6f:ed:
b4:70:00:dd:be:74:70:b6:a6:d8:e6:f5:0b:5a:e7:
23:92:45:e4:a4:5a:90:cb:3c:e8:56:96:4d:fd:4c:
a5:aa:1a:4c:99:a4:25:63:c6:1f:e0:fb:11:2d:2b:
a9:cc:34:2e:bb:98:9b:67:ca:00:b8:3c:db:c5:11:
0d:e3:2f:66:e2:b6:54:b0:9d:6e:54:b3:5c:94:07:
fb:6b:db:fe:24:e7:66:43:9d:26:5a:0f:8d:89:35:
ad:d7:e9:06:dd:f8:0d:56:4c:c1:6f:c2:22:88:67:
a8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E1:70:28:23:CC:E5:55:3E:D9:BC:5F:BF:E1:BD:97:ED:77:A6:91
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/rOFwKCPM5VU-2bxfv-G9l-13ppE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.30.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c5:24:e9:8d:ee:05:61:90:73:fd:63:6d:4d:00:53:db:6e:
28:35:3c:a9:4f:40:32:cc:ed:33:13:55:4b:7f:69:5c:0c:8f:
72:93:35:b4:49:2b:9f:92:4b:b9:2a:60:5f:1a:8a:4c:e9:62:
25:36:2b:76:66:e2:eb:24:c0:7c:13:c2:89:31:02:83:34:33:
48:8b:54:a4:b5:d2:d1:12:91:9c:40:d2:13:d6:ed:e8:06:11:
e6:d6:da:5f:36:3c:c5:80:11:22:cd:3f:8d:6d:27:77:d8:68:
42:65:ad:4a:f3:54:b3:fe:a8:81:ca:15:4e:44:f6:98:d1:f6:
fb:e6:73:a8:f9:4f:52:85:2b:12:36:7c:05:cf:fd:42:7a:99:
40:c1:d6:3c:d0:c8:9b:4b:59:8a:62:ba:8c:1d:fe:f0:16:45:
59:4c:77:fc:e9:bb:36:d8:6c:fe:69:6b:d6:3b:db:c6:38:da:
7e:b3:a4:8f:90:8a:3c:93:27:f0:de:db:72:75:23:d0:cd:a4:
83:06:f9:38:70:2f:a9:d4:83:1d:d8:e5:59:6a:9c:22:2a:3c:
0d:e1:83:8f:74:b7:b5:53:3a:4d:28:60:79:eb:83:ac:58:51:
fa:36:79:2b:b9:e4:b9:cf:3f:17:39:74:a0:7c:6f:63:29:4d:
2d:f4:45:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org