Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/HcXsCgq2dF7F7Tg_AqZ1-AXSKaY.roa
File: HcXsCgq2dF7F7Tg_AqZ1-AXSKaY.roa (raw, json)
Hash identifier: dkdrwyaCHQgvhldaYXnbMj7yMcFrf6aF2nRMEh4s6bs=
Subject key identifier: 1D:C5:EC:0A:0A:B6:74:5E:C5:ED:38:3F:02:A6:75:F8:05:D2:29:A6
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4DB0AB9F955FFBC5312EBCF4A6CBE
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/HcXsCgq2dF7F7Tg_AqZ1-AXSKaY.roa
Signing time: Sun 01 Jan 2023 19:35:21 +0000
ROA not before: Sun 01 Jan 2023 19:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209235
IP address blocks: 45.80.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 May 2023 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:db:0a:b9:f9:55:ff:bc:53:12:eb:cf:4a:6c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dc5ec0a0ab6745ec5ed383f02a675f805d229a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ad:1b:c9:0f:51:56:33:5b:81:2d:61:6b:a1:
88:65:62:18:c3:db:96:0c:6f:23:b5:33:5d:75:ed:
6f:e4:b1:e3:ef:47:a6:bd:4e:c9:be:e3:64:fa:d6:
04:8c:d7:d9:b6:2e:a2:e3:82:97:bd:61:cf:29:b9:
88:81:9a:2b:fa:08:2c:60:3d:10:e5:5f:e4:b0:6b:
5b:30:c7:66:3d:63:49:47:53:68:d7:fb:78:9f:32:
f0:e6:6a:3e:46:25:cc:00:28:f1:3e:d8:29:50:52:
2a:19:bd:8e:43:5c:a1:d2:56:2f:e0:ff:7a:43:ba:
77:2d:91:4f:80:da:eb:3f:19:9d:d7:e4:19:6f:22:
1a:42:6a:9f:20:18:79:06:a3:cb:d6:3a:17:03:07:
4b:25:10:a5:88:3f:82:92:e2:7e:3b:8d:5c:42:2b:
92:20:67:aa:03:41:3f:94:14:f2:29:3e:69:c7:1b:
ff:90:5a:09:79:c3:b3:d5:8c:a2:03:28:f0:b0:ed:
3e:9d:69:b0:cb:cb:b8:f2:bd:e2:60:4b:8b:46:99:
81:07:e3:e5:70:4d:36:bf:af:58:d5:ad:d7:09:de:
bf:53:c5:e5:02:1f:2d:4f:d0:8f:51:f9:50:a7:ae:
3f:d3:99:5c:e3:68:9b:96:4a:07:26:8a:c3:a6:e9:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C5:EC:0A:0A:B6:74:5E:C5:ED:38:3F:02:A6:75:F8:05:D2:29:A6
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/HcXsCgq2dF7F7Tg_AqZ1-AXSKaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.80.0/22
Signature Algorithm: sha256WithRSAEncryption
30:ff:3f:a9:59:d8:28:d9:3e:69:be:3b:0e:d1:ab:eb:08:cd:
83:0a:d5:fa:6f:93:ae:dd:c9:92:fd:82:15:a2:54:dd:3d:b1:
01:c9:85:1a:69:68:76:aa:7d:f7:b2:d6:09:58:b0:0e:b6:89:
21:07:b2:08:19:2b:74:c4:fd:d0:ec:ab:7e:c7:58:85:cd:ae:
8b:e6:97:d4:94:2b:fc:12:53:40:a0:2c:1a:64:b3:b5:aa:ff:
9e:45:61:24:d2:1b:bc:5a:bd:52:d5:37:84:cf:dd:34:d2:81:
74:e4:1b:38:9b:d2:a5:7f:05:12:8d:4d:49:52:08:b1:14:21:
0a:8b:59:eb:86:3e:f4:0b:d8:1c:d8:25:d6:51:07:1a:17:39:
8a:e4:4a:3e:34:19:c0:4b:ea:c4:ba:28:44:2b:a5:88:19:26:
5f:11:53:a4:4b:f0:40:65:6c:d7:ab:c5:8a:29:61:67:77:45:
c7:a5:46:5c:45:de:94:d6:33:c8:0b:63:27:f0:a8:02:c7:17:
6b:b3:26:4a:62:67:3b:41:d1:c8:e9:ac:9e:7d:b0:fc:17:ef:
de:b4:bc:9b:7d:d0:fd:01:f0:a8:c4:10:91:85:7a:4f:7f:7c:
40:fb:dc:2b:d7:10:9e:05:7c:03:73:4b:4c:37:46:fb:0f:cb:
5e:65:b6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:35 2024 by rpki-client on console-ams.rpki-client.org