Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/S2b4bkK73acRQWkkmkTCSa6JfaY.roa
File: S2b4bkK73acRQWkkmkTCSa6JfaY.roa (raw, json)
Hash identifier: HcbmGfM0yon29qZe+AarvsoS04hyyS7g/vsIyJwGvzs=
Subject key identifier: 4B:66:F8:6E:42:BB:DD:A7:11:41:69:24:9A:44:C2:49:AE:89:7D:A6
Certificate issuer: /CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Certificate serial: 018C836BC0786A4AB5B1ED580B3530304E40
Authority key identifier: AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/S2b4bkK73acRQWkkmkTCSa6JfaY.roa
Signing time: Tue 19 Dec 2023 18:52:06 +0000
ROA not before: Tue 19 Dec 2023 18:52:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 185.159.247.0/24 maxlen: 24
45.80.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 21:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:83:6b:c0:78:6a:4a:b5:b1:ed:58:0b:35:30:30:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Validity
Not Before: Dec 19 18:52:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b66f86e42bbdda7114169249a44c249ae897da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:a3:d6:a7:b9:44:b3:2f:35:13:91:22:33:
21:44:d4:0a:2e:7f:46:44:84:c5:83:d3:a4:3c:01:
c1:39:6e:17:f4:5c:ed:e0:da:79:a9:97:28:f8:de:
b1:33:28:ca:e6:79:13:05:0d:5f:e5:d5:e9:cd:74:
bf:4f:3e:c8:81:09:8a:52:00:9f:10:92:02:aa:1c:
ac:6a:5c:0a:2b:86:43:96:8d:2a:9d:54:61:c8:8c:
8e:70:85:3f:a6:d2:db:88:69:db:15:d4:21:9c:0c:
82:e3:6b:7d:bf:19:a0:a4:3a:88:b0:70:b5:86:8c:
2a:4c:63:d0:a6:1e:5a:71:a2:b1:fd:90:4c:f7:dd:
00:d2:bc:66:24:0a:f2:39:90:a8:2e:22:a6:2c:9f:
c6:f9:90:07:f9:db:5c:05:1b:e5:fa:5c:66:10:19:
22:fb:91:2a:02:14:16:c7:fd:6a:6f:a2:3a:fc:7b:
8d:16:39:f4:7c:83:7a:56:2e:e7:84:db:41:77:44:
4a:87:91:10:cf:ea:d7:f6:52:fe:45:0c:1e:9c:1f:
bf:28:69:dc:e2:2a:0b:65:3f:f7:2f:6d:9e:8b:cd:
e7:d3:75:c2:3a:8d:be:0b:99:5c:19:72:f0:d9:78:
92:6a:69:88:3a:ae:28:ad:7e:ca:d2:4c:5f:17:ec:
3d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:66:F8:6E:42:BB:DD:A7:11:41:69:24:9A:44:C2:49:AE:89:7D:A6
X509v3 Authority Key Identifier:
keyid:AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/S2b4bkK73acRQWkkmkTCSa6JfaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.110.0/24
185.159.247.0/24
Signature Algorithm: sha256WithRSAEncryption
94:73:d2:3e:80:fd:40:b5:96:cc:f7:a5:9f:6d:ca:70:66:1e:
68:aa:65:ca:4b:2a:71:92:ba:d8:a1:a3:32:89:03:c1:0a:b3:
b5:6b:e1:05:2a:27:48:d1:7f:45:f1:0a:9c:f6:0b:3a:65:e9:
0e:cd:21:a2:83:cd:87:d0:30:e6:f5:03:c8:9a:00:11:c7:c4:
c2:62:4c:d1:61:98:f9:7f:19:dc:fd:90:0c:4b:c3:23:b5:7d:
27:3b:2b:bc:df:91:74:e5:34:4b:be:91:64:04:57:88:24:31:
85:a4:95:4c:74:92:1a:82:e5:2f:c2:1f:42:ec:17:4b:44:66:
ad:a6:55:89:cd:96:3c:71:61:30:d4:d1:52:58:db:cb:27:33:
2f:74:f8:59:e5:e0:40:8c:a8:3d:56:ee:ed:3f:c4:d0:bd:67:
28:c5:d6:4b:3c:5d:3c:8f:ec:d6:24:46:a2:80:90:46:41:e9:
6c:d7:6c:7b:e0:36:66:c8:2b:cb:7a:69:40:06:37:ee:77:c6:
30:8d:09:95:99:d5:c1:92:ee:c5:9e:39:d9:e8:2a:78:0d:62:
1e:20:b7:cd:b8:66:8e:7c:83:b3:92:ed:90:8f:59:96:ba:2e:
89:91:3f:2c:1c:c3:2f:a5:d1:13:1a:dd:3a:df:b0:9c:4a:46:
6c:4a:ea:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:20 2024 by rpki-client on console-ams.rpki-client.org