Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/s_y_-KB7XB5svc0dCskQDeDRPX8.roa
File: s_y_-KB7XB5svc0dCskQDeDRPX8.roa (raw, json)
Hash identifier: kbGf9QdY5rZUuCmszEL40FHYv4qaIX/3Gn6kdekTVa8=
Subject key identifier: B3:FC:BF:F8:A0:7B:5C:1E:6C:BD:CD:1D:0A:C9:10:0D:E0:D1:3D:7F
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 0189AB217FC092A5F5D53A7E77D569BC50EE
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/s_y_-KB7XB5svc0dCskQDeDRPX8.roa
Signing time: Mon 31 Jul 2023 08:47:26 +0000
ROA not before: Mon 31 Jul 2023 08:47:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47692
IP address blocks: 185.245.230.0/24 maxlen: 24
185.245.231.0/24 maxlen: 24
185.245.228.0/24 maxlen: 24
185.245.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:21:7f:c0:92:a5:f5:d5:3a:7e:77:d5:69:bc:50:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Jul 31 08:47:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3fcbff8a07b5c1e6cbdcd1d0ac9100de0d13d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d2:15:87:76:5f:55:dc:f0:c8:a5:ec:84:e4:
ea:04:c6:bb:68:6e:06:87:66:8c:00:13:15:ce:d2:
3f:43:06:c0:6a:54:75:82:95:2a:94:30:8c:42:8e:
67:ef:ba:21:be:53:cf:b3:e1:51:db:0a:7d:86:8c:
85:89:20:3a:7a:12:9d:63:e1:3b:68:43:a0:f3:e4:
b8:07:d6:6b:0e:c5:24:39:44:38:20:c8:3b:2c:26:
29:ab:02:d3:c8:3d:08:52:8f:63:b4:d0:dd:cd:87:
87:04:01:0c:ce:95:d6:f5:e8:73:e4:d0:82:61:03:
21:5d:8c:57:b3:d4:a3:6e:13:a0:b8:df:03:05:e7:
d4:e8:2e:33:10:bc:63:19:09:f7:d6:5c:a7:19:0f:
43:de:d1:bb:84:e1:4b:50:32:e4:0e:f7:82:fe:7a:
40:aa:d4:57:37:a0:51:3e:48:fc:88:26:78:98:f1:
ad:bf:b4:24:f2:f4:75:1d:9b:80:e7:7f:2e:ad:a1:
40:04:66:d5:b4:6b:df:00:bb:84:89:21:27:3a:0b:
f3:b1:d6:ad:b1:3b:6e:3a:33:f9:10:3a:81:e9:de:
5c:56:b8:7c:66:0e:10:37:32:a7:32:e7:7e:ef:31:
12:77:8a:e9:f1:19:8c:15:52:db:eb:a9:23:dd:e1:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FC:BF:F8:A0:7B:5C:1E:6C:BD:CD:1D:0A:C9:10:0D:E0:D1:3D:7F
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/s_y_-KB7XB5svc0dCskQDeDRPX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.228.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:46:fa:5b:5a:0b:e5:31:47:1b:7b:cf:16:c9:ee:7d:0e:e9:
1c:d1:f0:32:3f:5a:15:8f:c2:b7:f4:fb:d6:ba:81:94:4f:83:
e6:d4:e1:d1:3f:2f:49:54:56:0f:67:d0:36:bf:59:80:c1:f5:
a2:eb:38:4e:8a:58:14:b8:3b:9e:a7:75:90:67:30:78:5b:50:
27:73:90:95:d6:a4:0e:56:f6:b1:2d:f6:5d:fd:99:96:bc:0e:
c2:c6:47:81:df:b0:a8:ea:55:e4:26:95:fb:ff:6d:dc:d7:e5:
1d:69:3e:21:16:a2:12:c3:17:8e:b0:ad:23:6b:f1:24:3c:b9:
fc:b2:54:89:49:c4:92:8c:c3:94:38:e3:f9:96:7f:77:69:72:
a3:74:68:56:a1:06:9a:d2:fd:e6:ee:95:a8:93:66:de:de:80:
d6:2b:53:7d:19:0d:1d:2f:a5:b5:7b:9b:72:ea:59:8d:38:e8:
d6:c3:72:3d:46:db:c3:c1:f6:f8:7a:00:6a:39:e7:7c:27:e0:
45:9c:62:40:8a:9d:28:17:20:80:5d:05:80:36:30:ea:9d:a5:
1c:f3:de:47:15:37:14:09:08:1e:ec:5b:2a:a0:19:cb:ad:31:
ef:f1:6f:01:0e:6f:1d:49:b6:2e:95:c2:7a:19:bc:90:1f:06:
1b:f3:a9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:52 2024 by rpki-client on console-fra.rpki-client.org