Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/sB4t8bnem6buGKBh4zBPx-adixw.roa
File: sB4t8bnem6buGKBh4zBPx-adixw.roa (raw, json)
Hash identifier: vHYBOMzjNdtYExu5eDoKb8oicDxCtK5zKW1ngWg781M=
Subject key identifier: B0:1E:2D:F1:B9:DE:9B:A6:EE:18:A0:61:E3:30:4F:C7:E6:9D:8B:1C
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 01856CB8656B828EEC0709A491524F774E24
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/sB4t8bnem6buGKBh4zBPx-adixw.roa
Signing time: Sun 01 Jan 2023 09:45:01 +0000
ROA not before: Sun 01 Jan 2023 09:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208015
IP address blocks: 45.92.112.0/22 maxlen: 22
2a0e:20c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:65:6b:82:8e:ec:07:09:a4:91:52:4f:77:4e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Jan 1 09:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b01e2df1b9de9ba6ee18a061e3304fc7e69d8b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:4a:ca:b8:d5:f7:7d:1d:e1:d3:55:53:5b:
eb:e6:69:bc:52:76:36:a1:78:13:5c:e3:7d:e7:41:
47:e4:a0:29:a4:bd:74:5d:06:9e:4f:6b:40:18:34:
ba:6f:25:1b:d1:b9:32:83:4b:e5:cb:72:e2:f6:76:
25:3d:ad:bb:d5:a6:b7:6b:4c:98:35:c2:88:d5:d2:
fb:07:2a:fb:fa:af:67:08:86:72:5c:9e:37:a9:1f:
5c:c6:f8:ab:24:3d:9a:e2:0e:79:a0:4a:09:9e:ed:
99:53:c4:8a:f3:fc:09:fe:14:3f:f9:5b:d9:ce:2f:
80:cc:bb:6b:3d:8e:49:b0:12:75:36:57:9d:12:99:
9c:06:4f:c2:8b:4d:59:83:89:8c:9a:fe:01:39:ef:
b7:d0:64:bd:ee:6b:7c:74:25:79:95:24:a2:92:04:
6e:90:47:58:3d:17:f2:c4:e9:0d:81:68:36:7e:9a:
e6:77:01:37:64:89:9e:90:d9:57:06:dd:03:7b:01:
9b:45:81:00:b1:54:7e:2c:99:2d:99:c0:4a:39:3f:
ad:61:11:9b:27:4b:81:67:12:e8:dd:14:51:65:7c:
5b:81:e1:d5:0d:3c:6c:51:85:63:da:c7:ca:32:bc:
42:28:a4:a6:12:d8:be:e5:da:29:28:c3:34:7c:eb:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1E:2D:F1:B9:DE:9B:A6:EE:18:A0:61:E3:30:4F:C7:E6:9D:8B:1C
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/sB4t8bnem6buGKBh4zBPx-adixw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.112.0/22
IPv6:
2a0e:20c0::/29
Signature Algorithm: sha256WithRSAEncryption
2e:43:68:bb:3b:f0:aa:a6:a2:64:aa:74:72:94:d2:56:40:ae:
6a:a1:30:b1:46:0e:f3:52:f5:e5:eb:27:60:e1:0d:0c:aa:a9:
b1:e3:e6:dd:9b:5b:e0:83:35:25:9b:cd:49:26:7b:c8:fd:24:
89:81:6b:62:cb:56:ca:b7:05:7f:09:62:4a:82:aa:3c:8a:98:
bf:d5:7d:7f:c9:62:56:5b:f5:38:0d:86:eb:d6:0c:16:7e:2b:
eb:ab:fb:57:c6:86:80:4b:9e:82:35:eb:9d:1c:e0:9f:4d:c5:
2a:e2:34:93:61:70:52:9b:b3:08:c1:ec:29:39:8b:4f:ca:c2:
d7:66:45:2c:25:88:52:3b:e0:f0:6b:0a:ec:04:95:6d:8d:a0:
d2:a8:40:2c:cd:1c:72:ec:ef:2e:d3:66:7c:72:98:2a:e7:67:
34:6a:52:0f:d6:72:26:3b:91:9b:cf:0e:17:7b:8a:2b:c1:1b:
46:2d:52:52:a7:7e:8f:32:ae:27:64:fe:53:02:a0:fe:33:25:
5c:fb:a7:3a:1d:34:e7:c6:5b:d5:a2:36:3c:c5:56:ed:e9:92:
b6:7d:78:0b:1a:b2:79:33:e6:f4:e8:2f:7d:a1:dd:d5:d1:e1:
61:b7:c8:28:fc:43:46:9f:f5:8e:9a:77:8d:7b:80:39:13:03:
5b:b8:a1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:07 2024 by rpki-client on console-fra.rpki-client.org