Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/S23rdGQcFLogE_V7m4en-941Dn4.roa
File: S23rdGQcFLogE_V7m4en-941Dn4.roa (raw, json)
Hash identifier: Wtu15bDXO6LlsBWpty/IkEPUPhxn67SYvcUXXdY4iU4=
Subject key identifier: 4B:6D:EB:74:64:1C:14:BA:20:13:F5:7B:9B:87:A7:FB:DE:35:0E:7E
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0185720C511D3CF4A33951191550662966AB
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/S23rdGQcFLogE_V7m4en-941Dn4.roa
Signing time: Mon 02 Jan 2023 10:34:47 +0000
ROA not before: Mon 02 Jan 2023 10:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 45.12.30.0/23 maxlen: 23
45.85.118.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:51:1d:3c:f4:a3:39:51:19:15:50:66:29:66:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b6deb74641c14ba2013f57b9b87a7fbde350e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:b9:46:47:23:46:22:5c:14:c1:36:69:88:
51:b2:eb:bf:72:4c:f8:0e:c4:e6:35:20:22:d7:96:
34:05:46:f4:d3:0d:8a:4f:f1:b5:2d:5e:72:50:64:
a1:14:5a:4a:3f:8c:32:08:cc:5b:ea:1e:dc:00:2e:
f6:1f:7b:f4:95:0f:b6:16:f1:57:d4:a9:ea:c9:e0:
9a:e8:7a:a8:a2:7d:29:7c:cb:d9:2d:d9:b9:77:94:
9b:ea:92:48:3c:3e:d5:8c:25:4e:d4:5d:79:b0:b7:
2b:de:32:9a:7b:6d:ed:f6:48:e5:e5:ce:e8:f9:08:
85:b3:c6:2f:d7:47:2b:16:a9:19:7e:1e:42:d8:35:
09:21:ac:40:01:93:df:85:10:d9:4d:87:b6:68:fc:
d1:43:07:a2:29:2e:8f:64:20:49:0a:d7:2d:69:02:
66:05:cf:63:96:05:b3:cd:9d:ba:00:be:e5:dc:b2:
98:50:dc:1e:3d:b7:7b:b0:25:12:1c:b4:b2:bb:74:
56:96:c9:23:d7:6a:56:0c:4f:11:c7:20:d8:04:68:
53:76:64:4a:5c:d8:34:65:26:7d:4f:d7:2f:81:ea:
23:c9:c8:d3:01:f0:cd:63:6d:96:02:e2:24:89:da:
52:07:7b:21:5b:8f:ad:52:fe:9f:3a:ce:48:42:e5:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6D:EB:74:64:1C:14:BA:20:13:F5:7B:9B:87:A7:FB:DE:35:0E:7E
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/S23rdGQcFLogE_V7m4en-941Dn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.30.0/23
45.85.118.0/23
Signature Algorithm: sha256WithRSAEncryption
66:4d:fa:fa:49:33:74:7e:2b:69:f5:cf:fa:af:1c:b5:62:f4:
77:73:e1:99:ee:a5:bc:68:ea:26:f5:cf:58:89:9a:fb:02:77:
cb:79:56:8d:25:0d:b6:7d:0a:29:20:fe:72:51:e7:7b:ae:67:
95:01:68:9a:bb:f6:dc:78:42:6e:56:5e:2e:7d:30:25:41:c9:
a9:0f:dc:46:dd:97:a2:33:dd:66:ec:e4:ba:d3:71:bf:9a:51:
9e:34:d9:c5:c9:6b:70:1d:bd:3b:b6:7e:d3:44:fa:d8:21:a5:
30:a5:f6:dc:72:cd:32:70:85:79:7c:92:ff:95:c1:1a:b6:77:
47:b3:d1:28:76:18:2e:bc:b1:c2:e9:83:2c:00:17:53:7f:61:
a5:f4:1d:18:cf:a7:41:74:26:55:78:3b:58:fb:9e:f4:d5:3a:
7a:56:9a:c5:9b:a4:d6:f7:8e:bb:39:32:29:f0:b5:4a:1c:27:
a8:7f:18:06:20:88:24:8d:8b:88:22:fa:42:b6:6a:a3:ff:a4:
8e:9a:f5:c1:6a:01:2b:6d:81:a9:42:0d:97:61:9b:9c:b2:87:
35:20:6a:1a:34:69:51:2e:3d:cd:d0:62:04:2e:6e:d2:91:1f:
d1:73:b4:43:bd:09:49:3c:75:58:b1:74:ba:b4:a7:6a:5a:82:
17:21:59:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org