Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/5Rg4wn-DjKOwR60_En8ld729Z3s.roa
File: 5Rg4wn-DjKOwR60_En8ld729Z3s.roa (raw, json)
Hash identifier: 6cjzf+GvUGEQr491RZUzuud0bwwZT9uKIiO0ftDNT9I=
Subject key identifier: E5:18:38:C2:7F:83:8C:A3:B0:47:AD:3F:12:7F:25:77:BD:BD:67:7B
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 0188535B7D739DC355FB95890ADC8EA33385
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/5Rg4wn-DjKOwR60_En8ld729Z3s.roa
Signing time: Thu 25 May 2023 14:41:24 +0000
ROA not before: Thu 25 May 2023 14:41:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203244
IP address blocks: 45.80.85.0/24 maxlen: 24
45.80.86.0/24 maxlen: 24
45.80.87.0/24 maxlen: 24
185.246.196.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:53:5b:7d:73:9d:c3:55:fb:95:89:0a:dc:8e:a3:33:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: May 25 14:41:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e51838c27f838ca3b047ad3f127f2577bdbd677b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:52:44:9a:e1:dc:11:b8:49:b6:c1:d3:bf:
d7:78:d0:7f:43:a8:5f:b5:d3:04:61:d4:41:88:44:
f9:67:e6:b5:ea:8f:93:ee:63:dc:1f:a6:21:45:b9:
d0:a0:06:1a:23:40:d5:b5:93:19:6a:56:37:da:00:
90:c8:c2:ea:1f:c3:1a:09:a7:7a:50:26:a4:de:4f:
07:d5:9f:7c:39:49:90:d0:64:f0:11:c5:4e:eb:3a:
a4:98:bc:28:2f:e8:bc:ed:de:8f:d9:df:5a:46:f9:
21:4b:49:d7:e4:46:78:1f:29:08:07:4c:57:c4:cb:
4f:c6:91:a2:8d:68:04:09:ee:22:f4:3b:75:43:ae:
8b:99:bf:e9:55:63:13:46:80:5d:1d:a9:70:2d:d1:
01:4c:b4:17:27:3a:74:63:d5:bd:43:56:d3:a6:b9:
7c:04:58:67:96:49:b9:55:ea:8a:09:e4:cf:d6:c2:
46:5c:2d:40:57:a7:50:be:0e:80:a2:80:e1:1b:5a:
98:a9:29:45:09:07:d4:76:6a:fc:23:7f:25:4a:70:
c0:88:9d:2c:2a:41:ae:9e:d9:a3:85:b0:31:35:94:
45:7e:77:0e:af:85:d1:76:77:68:d3:25:98:5d:0f:
c7:5f:d2:08:f6:ac:6b:ed:2d:ff:08:d4:6a:67:03:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:18:38:C2:7F:83:8C:A3:B0:47:AD:3F:12:7F:25:77:BD:BD:67:7B
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/5Rg4wn-DjKOwR60_En8ld729Z3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.85.0-45.80.87.255
185.246.196.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:eb:5e:8f:f1:9d:23:1a:3a:4a:04:75:f6:de:78:4b:0a:34:
91:d7:cd:bd:56:7b:e3:11:68:71:fe:d2:40:03:ce:3c:d8:6b:
45:27:18:26:9e:80:1b:f7:f9:69:e7:01:81:60:3e:64:50:17:
86:c8:ad:81:8e:62:46:16:10:29:ca:60:63:c6:8e:e9:19:ec:
84:8d:fa:78:bf:46:f3:20:cf:ff:dc:64:5c:52:82:b6:13:53:
c5:a7:c7:54:5c:cf:96:89:3a:38:d5:0a:65:dd:e7:a5:b1:69:
b5:8d:89:98:b3:a7:bc:e8:cc:eb:ec:4b:16:46:5b:74:81:97:
58:f1:c9:8a:98:c8:44:80:1d:d6:4f:26:fa:3c:22:79:1e:3d:
e8:7a:7b:80:80:1b:b7:ec:bd:65:1b:39:16:7f:6b:0d:12:71:
66:92:dc:fe:e9:28:d8:da:34:91:48:43:f1:5f:8b:8e:a8:82:
c5:c9:49:f0:d0:85:52:e7:84:97:3a:70:97:0f:61:b1:5d:6f:
3f:ec:f1:f6:d1:a0:1a:4f:6b:71:fc:c6:aa:84:9c:17:ce:15:
6c:5b:43:f5:5c:37:26:da:cf:cf:80:50:f9:53:3d:6f:f7:83:
65:ba:de:08:61:10:d1:3d:1e:7a:c3:d7:3f:86:a7:2b:81:3c:
89:dd:5d:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:59 2023 by rpki-client on console-fra.rpki-client.org