Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/s5bxaUVRfc-4gZOV3llPk6uXWs0.roa
File: s5bxaUVRfc-4gZOV3llPk6uXWs0.roa (raw, json)
Hash identifier: Rkz4OkgkiJjMjrTMj3FNoVAF9KRZg8zQ5UkQ/7miVao=
Subject key identifier: B3:96:F1:69:45:51:7D:CF:B8:81:93:95:DE:59:4F:93:AB:97:5A:CD
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 01856FF9476125D83530C2807C7F9CADA99D
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/s5bxaUVRfc-4gZOV3llPk6uXWs0.roa
Signing time: Mon 02 Jan 2023 00:54:45 +0000
ROA not before: Mon 02 Jan 2023 00:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52088
IP address blocks: 185.45.108.0/23 maxlen: 24
2a02:22f0::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:47:61:25:d8:35:30:c2:80:7c:7f:9c:ad:a9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Jan 2 00:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b396f16945517dcfb8819395de594f93ab975acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:13:2f:23:b4:86:bd:1a:c8:ee:ae:b4:df:
b3:9b:d2:ea:78:02:84:fc:1b:93:18:46:59:98:96:
5b:61:9c:85:fc:89:05:8a:6e:d7:b7:4c:32:ce:67:
73:a1:52:44:33:1e:00:4a:27:7d:6f:48:55:e5:ed:
4f:51:8b:8e:15:9f:73:91:d4:2b:cf:f6:de:66:67:
5d:94:89:f6:db:81:e3:74:79:b1:b4:ce:86:d1:66:
d6:84:06:a2:4f:bd:9d:93:48:65:c6:8c:21:1a:0b:
50:4e:63:2b:93:e5:3a:79:bd:9f:1d:2d:aa:c6:07:
b1:2b:9e:fa:7b:07:9f:67:f8:81:b6:98:3c:31:d6:
be:c0:f7:7b:bf:cf:8f:0a:7c:a5:45:8e:5e:f2:d1:
2e:61:1a:58:d7:5c:b3:fa:38:b1:11:d3:18:31:45:
05:74:7b:c6:5a:1c:7a:dc:11:bf:60:8b:6d:4d:86:
37:33:a5:18:4b:a9:48:15:3a:08:57:36:67:2f:21:
9a:10:a3:aa:58:c6:55:35:18:29:c3:ae:ec:d7:26:
e3:07:38:88:82:f2:a3:b7:81:6c:51:10:16:18:46:
60:57:3c:06:f6:3b:c2:95:9e:a4:7a:f2:04:60:a1:
3f:ae:2d:5e:81:52:45:e3:f2:48:7d:0c:b1:4e:a5:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:96:F1:69:45:51:7D:CF:B8:81:93:95:DE:59:4F:93:AB:97:5A:CD
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/s5bxaUVRfc-4gZOV3llPk6uXWs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.108.0/23
IPv6:
2a02:22f0::/32
Signature Algorithm: sha256WithRSAEncryption
a2:6f:4b:61:20:18:ca:a5:17:f1:8e:ab:f7:f5:f0:b0:80:0d:
66:5a:83:61:0d:a6:3e:bd:87:15:31:17:fa:39:18:39:41:ec:
2e:b4:13:61:b5:7f:ac:97:26:6b:b3:0e:84:4f:7a:66:65:f8:
4f:8e:78:d7:d0:16:ee:2c:a8:ce:92:73:c7:09:17:58:09:c9:
99:ad:51:2e:04:4f:18:7a:90:06:c3:ac:37:f1:25:eb:a3:a2:
f4:35:08:96:a5:80:ad:c4:ca:0c:72:75:41:ea:65:c1:e1:4e:
26:1d:9f:a6:15:fb:24:77:88:b8:59:69:ac:65:16:82:16:1d:
1e:d4:29:d6:b9:03:d8:af:2b:13:36:01:d6:53:5e:02:a5:48:
7b:c4:9e:87:5d:9a:b5:cf:75:cc:63:26:bb:57:d4:2e:ce:eb:
69:3c:fc:14:28:9a:8a:bf:60:11:ed:f5:1f:9b:0f:7e:f7:5c:
45:2f:18:1e:65:4b:18:82:0d:46:e9:16:d9:23:62:b6:b7:1d:
fc:e6:c7:89:3e:11:90:c8:92:69:29:1d:7e:a0:fb:0c:fa:23:
bd:d3:23:90:b5:89:f0:cf:d7:ef:b7:f3:f9:ea:a0:24:72:48:
eb:11:6e:0f:a0:a7:82:a1:1c:8d:82:35:0d:ad:49:f7:32:58:
ee:04:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:46 2024 by rpki-client on console-ams.rpki-client.org