Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RczG7GNOfZJ3qdUgEN9c9g-jRng.roa
File: RczG7GNOfZJ3qdUgEN9c9g-jRng.roa (raw, json)
Hash identifier: 57AiHVboR+x0CHuAFbxkg1X7DpAMK28a1+JSoQQTUvU=
Subject key identifier: 45:CC:C6:EC:63:4E:7D:92:77:A9:D5:20:10:DF:5C:F6:0F:A3:46:78
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018954E971780AF8A34BED2390DE88EA2B99
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RczG7GNOfZJ3qdUgEN9c9g-jRng.roa
Signing time: Fri 14 Jul 2023 14:58:52 +0000
ROA not before: Fri 14 Jul 2023 14:58:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212097
IP address blocks: 178.19.39.0/24 maxlen: 24
45.80.82.0/24 maxlen: 24
45.80.83.0/24 maxlen: 24
45.80.82.0/23 maxlen: 23
185.28.49.0/24 maxlen: 24
185.28.50.0/24 maxlen: 24
185.227.102.0/24 maxlen: 24
178.19.36.0/22 maxlen: 22
178.19.36.0/24 maxlen: 24
178.19.37.0/24 maxlen: 24
178.19.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:e9:71:78:0a:f8:a3:4b:ed:23:90:de:88:ea:2b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 14 14:58:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45ccc6ec634e7d9277a9d52010df5cf60fa34678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2b:e1:e7:b2:5c:a2:b8:78:1d:5d:cc:ba:57:
01:65:aa:81:4c:92:6c:61:37:b5:da:59:eb:5f:e8:
8c:83:1e:7c:ba:ef:f4:3c:68:e9:f6:1d:3b:d7:7a:
72:8a:89:f9:65:bc:82:03:df:44:f6:01:ed:6a:ed:
90:66:eb:2b:86:67:00:85:23:60:73:5d:fe:9e:96:
ca:9c:43:e9:fc:1b:96:55:4d:87:0a:66:3a:63:15:
17:47:ee:f8:f7:6f:45:c2:bc:b9:10:8a:42:54:9b:
a7:ad:b7:46:06:6a:c1:87:21:bc:c4:1b:e3:54:5a:
05:54:c8:59:3f:d0:b2:84:81:85:80:c3:cd:f3:f7:
54:ab:51:0a:10:0e:83:1d:85:fb:e7:77:23:02:55:
95:22:7c:fa:25:d5:23:64:3b:9a:75:88:36:c4:ef:
1b:b9:27:9b:d7:fe:9d:b0:68:fd:47:cb:54:76:f2:
97:ce:6a:00:0b:ef:2e:f1:0c:19:c6:c3:f7:4f:da:
8f:2e:02:6d:6a:e4:5f:b4:ae:36:2e:51:33:8d:8b:
17:2c:3f:84:96:b2:35:d3:6c:06:79:61:2f:00:18:
a7:96:66:30:50:d5:83:38:97:39:f7:fb:d0:59:71:
35:aa:d3:1c:7f:80:ae:5b:d3:a6:6a:61:96:fd:9e:
78:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CC:C6:EC:63:4E:7D:92:77:A9:D5:20:10:DF:5C:F6:0F:A3:46:78
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RczG7GNOfZJ3qdUgEN9c9g-jRng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.82.0/23
178.19.36.0/22
185.28.49.0-185.28.50.255
185.227.102.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:6e:03:c7:ec:09:b4:db:64:be:43:9f:db:de:cf:1a:c7:5f:
e4:0a:45:79:f7:78:d1:fe:ac:74:0e:a5:2f:40:b7:95:22:e3:
bf:53:57:01:21:c2:aa:1c:22:b5:09:f3:3c:7d:8f:07:2a:d0:
59:b2:a3:a9:af:72:5a:c6:40:35:f8:e4:2e:cf:ec:45:49:20:
c1:94:a4:c2:10:ea:f8:fd:dc:d4:f7:5f:c8:32:d0:0f:96:47:
7b:a9:93:8b:23:6b:d9:2c:07:18:64:3a:b4:96:b0:88:5a:4f:
ca:93:b3:c2:76:8b:04:ca:0d:58:f7:54:7e:3f:b2:0c:cc:4c:
fd:77:58:a0:71:19:32:1b:87:da:76:0f:8b:aa:9c:21:31:8d:
8c:b1:35:10:33:ef:8a:1d:d7:78:64:e4:f9:a9:21:e2:43:d3:
cc:5d:d9:34:ca:76:e4:06:4a:54:bd:2d:01:04:b1:12:ff:2d:
3d:5c:6a:d6:99:fa:09:6e:24:df:05:a9:db:f1:c1:ee:46:48:
3c:6e:41:f6:e7:eb:2a:4a:b3:97:8d:8e:5f:d1:c8:b3:89:48:
63:2a:fc:a0:7a:58:33:71:4f:8b:e7:6d:11:3b:8f:c5:49:90:
a0:cc:50:95:de:2b:d9:9b:c9:25:72:0e:5d:35:c0:0d:58:ab:
dc:ee:ce:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:08 2024 by rpki-client on console-ams.rpki-client.org