Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/6giGjeFhnvGUZNA8c-t06y3U8Gc.roa
File: 6giGjeFhnvGUZNA8c-t06y3U8Gc.roa (raw, json)
Hash identifier: ATOvZWxFMCXpoV2wMpBWVcjH2PzfNKFaHEtMn5Aoai8=
Subject key identifier: EA:08:86:8D:E1:61:9E:F1:94:64:D0:3C:73:EB:74:EB:2D:D4:F0:67
Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Certificate serial: 018CB128A26348F6A460D276938D3435C12D
Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/6giGjeFhnvGUZNA8c-t06y3U8Gc.roa
Signing time: Thu 28 Dec 2023 16:01:19 +0000
ROA not before: Thu 28 Dec 2023 16:01:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198575
IP address blocks: 45.85.44.0/22 maxlen: 22
45.85.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b1:28:a2:63:48:f6:a4:60:d2:76:93:8d:34:35:c1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Validity
Not Before: Dec 28 16:01:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea08868de1619ef19464d03c73eb74eb2dd4f067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a7:3b:6c:ad:f5:84:ac:7d:8e:7c:30:5e:3f:
9e:ed:1c:80:ee:90:1b:75:68:f8:60:00:28:bc:a6:
6f:da:36:e2:65:96:a0:28:7c:3e:7f:43:c3:9f:17:
bd:65:cb:6e:07:63:da:21:48:72:91:f1:25:7d:39:
0d:d8:e4:9e:aa:80:6e:c3:cc:a4:eb:82:00:38:64:
4c:b5:79:ea:3b:96:65:91:6f:54:65:08:d1:8b:81:
eb:ab:f9:ee:05:6b:e8:aa:e8:47:58:48:a1:f2:43:
fc:e2:81:54:dc:07:b0:04:5c:15:e4:10:60:16:90:
6a:58:11:ee:74:03:2a:8b:1a:8e:c0:d8:13:cd:8e:
48:f1:3a:00:bb:05:7e:94:0c:f2:ed:2e:fd:65:0c:
dc:6e:d3:96:72:06:4a:0a:63:ad:87:61:88:72:a5:
5c:ba:7e:d2:73:aa:96:50:62:9f:36:96:d0:95:b6:
6e:1a:e6:98:61:3d:37:c6:2b:ac:68:70:8d:d3:1c:
7e:47:7d:97:7d:13:cd:88:67:f9:9c:5d:3f:1c:19:
1a:41:01:ad:be:06:01:45:a0:aa:0f:fb:d1:91:c0:
a8:e3:37:ff:63:f8:de:e4:eb:ec:88:92:43:b5:1c:
2f:72:8a:21:dd:a7:75:b4:b2:52:10:82:af:3f:f0:
5b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:08:86:8D:E1:61:9E:F1:94:64:D0:3C:73:EB:74:EB:2D:D4:F0:67
X509v3 Authority Key Identifier:
keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/6giGjeFhnvGUZNA8c-t06y3U8Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.44.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:93:c0:b0:8a:c2:ed:c7:32:0b:f8:3b:4f:8c:75:e6:df:be:
7a:4f:e7:5e:92:63:cd:33:10:35:d9:11:70:ee:9f:d0:f3:ea:
e8:64:07:93:5b:c1:48:d9:0f:4e:64:f3:62:d5:d2:05:0b:94:
ca:30:f7:79:c6:6c:d8:9b:32:b6:e2:de:11:2c:4c:29:d8:b0:
86:61:b6:b1:21:4f:ee:6f:29:f2:47:6a:a0:44:24:df:b1:61:
a3:ed:a6:bc:e3:6d:da:2d:b7:e8:09:f3:40:88:68:68:82:5d:
47:ba:1b:02:2a:1e:01:ce:80:71:21:b7:ca:34:0d:ef:49:be:
05:d4:93:0f:a4:7b:b5:42:2e:ba:26:59:c5:79:d1:cb:e5:ff:
be:b4:b5:49:54:62:e1:74:e0:c2:6f:6a:82:9c:22:af:40:97:
b2:db:f4:71:4b:0e:16:7f:50:1c:19:18:00:5e:60:1d:28:52:
b4:e0:4b:55:22:1e:b6:31:92:b1:df:cd:0a:b2:9d:2b:fc:bc:
9c:3e:b5:6c:9b:8f:c9:d9:9f:07:9e:25:5f:97:1c:b1:fe:bd:
e1:17:c3:66:fb:33:49:6b:8c:bc:a6:62:38:bc:eb:98:11:2a:
3c:73:21:c0:ee:10:76:66:d3:6d:3a:53:cb:7a:d0:c8:33:6b:
90:4e:a0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:08 2024 by rpki-client on console-fra.rpki-client.org