Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/y1_cwXYee3CkcIiqBh73-BXxSOI.roa
File: y1_cwXYee3CkcIiqBh73-BXxSOI.roa (raw, json)
Hash identifier: LyFRI8m2kVDUB0lhTtL0z4plOVTP5CfUTplbsVFhOEo=
Subject key identifier: CB:5F:DC:C1:76:1E:7B:70:A4:70:88:AA:06:1E:F7:F8:15:F1:48:E2
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01886BAEE7663A81D5EB6851CA0B8590F541
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/y1_cwXYee3CkcIiqBh73-BXxSOI.roa
Signing time: Tue 30 May 2023 08:03:24 +0000
ROA not before: Tue 30 May 2023 08:03:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 45.80.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 09:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:ae:e7:66:3a:81:d5:eb:68:51:ca:0b:85:90:f5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: May 30 08:03:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb5fdcc1761e7b70a47088aa061ef7f815f148e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3e:18:1e:c7:3e:c5:31:83:d2:88:b1:43:da:
e5:ad:5a:46:db:4b:14:d9:90:8a:9d:89:37:9f:53:
1b:23:2d:8f:f0:34:93:6a:89:d1:0b:c5:0c:71:d3:
42:84:56:94:e5:42:67:96:af:cf:d6:bb:69:86:c5:
1d:d5:b1:de:4f:27:32:ef:7d:6e:c2:dd:b6:40:ff:
46:c1:81:00:0b:61:f0:c3:25:b0:1e:f5:e2:4c:a4:
f3:ac:b7:e8:2a:45:c2:9d:94:69:b1:7a:7d:9c:89:
5c:c1:aa:27:ff:64:d7:58:87:09:31:4e:cf:67:5a:
5e:43:63:61:68:db:cb:7b:dd:aa:45:c7:c0:e0:cd:
76:d8:df:79:f9:81:21:a5:62:2d:2e:14:90:8c:6b:
74:56:df:a1:a7:fc:8d:b9:89:2b:78:db:11:0e:34:
08:36:68:77:45:a4:7b:7e:8c:59:5b:79:66:de:22:
16:3a:6a:99:eb:52:fb:ad:86:4c:17:ec:3b:ca:d6:
e8:ba:df:7e:01:6f:0f:99:d8:8a:25:09:74:18:cf:
69:ca:1e:d5:23:74:02:d2:05:e0:e7:0f:99:de:25:
f8:7f:65:bb:ba:10:50:f4:02:4f:59:1f:8c:02:4b:
89:de:76:09:26:21:c1:e5:f8:4e:b2:9e:d8:be:6a:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5F:DC:C1:76:1E:7B:70:A4:70:88:AA:06:1E:F7:F8:15:F1:48:E2
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/y1_cwXYee3CkcIiqBh73-BXxSOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.28.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:cf:d9:88:02:cf:ce:09:f0:1a:80:91:58:85:d2:d2:05:58:
73:38:30:45:81:24:d4:d3:a0:dc:b4:05:99:35:0c:26:66:bf:
68:4d:35:3f:ef:6d:8b:20:78:fb:27:5c:64:d9:6d:ea:8f:85:
af:62:25:09:29:5d:d5:fe:4d:9f:90:2c:4a:3a:dd:29:75:2a:
d5:98:62:b3:30:85:bd:e4:66:64:98:08:72:77:67:0d:0c:55:
66:42:8e:8c:b6:f0:17:81:48:59:77:af:45:f8:ef:b6:cf:00:
b9:40:ec:e0:c1:d8:5a:70:ae:0a:72:7c:e3:fe:20:8e:15:9d:
0c:c5:a6:a4:7c:d5:f7:92:39:2c:94:b5:6b:30:f5:b9:ec:03:
b9:cc:99:07:10:f2:5f:3f:c6:cf:c4:5f:af:40:36:bb:81:af:
f2:16:73:fe:6f:e5:2f:06:11:63:35:bd:4b:88:99:27:a7:51:
ce:52:cc:68:f4:87:5a:a3:15:03:ee:b1:bf:0d:f9:cb:c0:0f:
4b:08:3b:18:0a:4e:89:36:fb:a3:d1:c8:a5:9f:90:62:02:73:
13:55:24:7b:c0:b2:c2:f1:d3:0f:34:19:fe:fa:e8:1c:94:40:
27:03:47:2f:31:44:21:7d:a5:ab:9c:99:36:2a:14:c5:76:2c:
6b:68:8a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:39 2024 by rpki-client on console-ams.rpki-client.org