Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/TfY--5YvtoECpBwtJD0Bdu4XuDg.roa
File: TfY--5YvtoECpBwtJD0Bdu4XuDg.roa (raw, json)
Hash identifier: hOjy20HfgHhXPQ4MRSKlITyjNOI6uar9nU3Uz7DGQFk=
Subject key identifier: 4D:F6:3E:FB:96:2F:B6:81:02:A4:1C:2D:24:3D:01:76:EE:17:B8:38
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 01856DE6669B1EB3A6EA776A5FC1B1B09ED7
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/TfY--5YvtoECpBwtJD0Bdu4XuDg.roa
Signing time: Sun 01 Jan 2023 15:14:54 +0000
ROA not before: Sun 01 Jan 2023 15:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 45.80.51.0/24 maxlen: 24
45.80.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:66:9b:1e:b3:a6:ea:77:6a:5f:c1:b1:b0:9e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Jan 1 15:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4df63efb962fb68102a41c2d243d0176ee17b838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:8f:d5:59:26:d7:dc:6e:35:6b:fc:6f:44:
3b:a2:ed:d5:22:90:21:33:ef:80:88:20:8e:4d:9b:
fd:6a:49:1f:1d:ff:16:ab:f4:91:b3:e9:f4:dc:4c:
70:d5:cd:99:f6:f8:ac:4d:f3:22:a3:f6:6f:2f:7c:
b3:15:e4:06:be:65:ba:03:dc:e0:21:19:e5:9e:9e:
e8:92:4c:19:dc:80:19:0c:ab:08:21:5d:c3:47:87:
20:11:ca:47:4a:ae:2b:3d:c7:26:28:27:55:61:11:
4b:dc:84:f6:a5:86:05:f9:3f:a9:91:23:bc:d9:9b:
d3:c1:eb:bc:e4:a8:bd:7f:e8:ab:a4:f0:56:0f:37:
b1:d8:c1:5a:0a:88:e9:96:35:fb:2e:53:d9:14:7b:
12:2f:45:88:8d:af:8e:c3:a1:10:b6:d2:a2:06:b8:
96:aa:d4:7f:54:8b:d7:a0:f4:f6:c4:78:02:71:39:
41:67:3f:e2:f1:c2:88:6a:13:f6:a0:29:5c:73:09:
a5:dc:28:96:a0:f8:b0:2c:dc:5d:e9:13:b4:df:6b:
88:e4:f7:c3:24:ae:2f:cc:42:fb:6c:02:99:cf:d0:
7b:3f:c9:3d:3a:75:b1:40:47:06:b3:49:a4:d1:ef:
61:b8:bc:76:9e:77:a9:48:ff:76:47:77:11:04:6e:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F6:3E:FB:96:2F:B6:81:02:A4:1C:2D:24:3D:01:76:EE:17:B8:38
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/TfY--5YvtoECpBwtJD0Bdu4XuDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.50.0/23
Signature Algorithm: sha256WithRSAEncryption
16:d2:8b:aa:44:d7:aa:59:94:e9:1a:fc:37:5c:77:4c:46:a5:
b1:a9:4f:f4:1f:17:74:f6:0d:41:05:e6:78:83:7c:eb:31:ff:
a4:d0:08:24:60:93:d0:5b:b6:b1:90:b8:92:5e:ee:4e:29:8a:
f1:6c:28:9b:59:4c:7c:ce:c4:37:b6:40:91:96:03:00:cf:bd:
ba:53:a1:79:3e:cc:3d:85:c6:42:77:d9:cc:b1:69:aa:b8:97:
0b:84:f3:7b:c8:5a:9c:c6:71:53:25:25:40:0b:3a:07:7c:39:
db:42:7b:0b:c5:96:ff:5e:ad:45:dd:22:71:9a:02:0f:72:7e:
ce:3b:0b:97:fe:53:ef:d8:92:ee:06:c8:9d:1b:3e:e6:97:c5:
78:55:30:86:27:83:85:99:0c:9f:99:98:16:3a:0e:b6:3f:ae:
16:af:c7:49:72:4a:12:59:08:74:ac:7c:35:77:5e:e9:ed:f7:
66:dd:ff:4c:9b:94:7f:6f:60:86:7f:22:09:ef:b3:fb:66:85:
34:26:c0:56:d9:53:2f:24:f6:a4:24:5a:eb:8a:12:4a:03:dc:
6a:82:fb:19:68:0c:f9:20:e3:9c:0c:73:ad:29:f5:ce:eb:b6:
dd:4e:13:48:2d:4c:c5:c3:7a:ed:48:45:11:97:59:3c:a1:5a:
07:f0:67:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:05 2023 by rpki-client on console-ams.rpki-client.org