Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/zyxKzPc50rKPcSWn8avuXY7LCrU.roa
File: zyxKzPc50rKPcSWn8avuXY7LCrU.roa (raw, json)
Hash identifier: 1mFhFkJomKTbfvzo+SDPuyqzBQ/2+GcJ0C+juN66IAo=
Subject key identifier: CF:2C:4A:CC:F7:39:D2:B2:8F:71:25:A7:F1:AB:EE:5D:8E:CB:0A:B5
Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Certificate serial: 018D0E6118666A120A270D162BA33A9C8824
Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/zyxKzPc50rKPcSWn8avuXY7LCrU.roa
Signing time: Mon 15 Jan 2024 18:27:40 +0000
ROA not before: Mon 15 Jan 2024 18:27:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200245
IP address blocks: 45.85.44.0/22 maxlen: 22
45.85.47.0/24 maxlen: 24
2a13:2240::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 17 Jan 2024 08:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0e:61:18:66:6a:12:0a:27:0d:16:2b:a3:3a:9c:88:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Validity
Not Before: Jan 15 18:27:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf2c4accf739d2b28f7125a7f1abee5d8ecb0ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:27:ac:6f:ae:0a:96:21:9a:d8:bd:f0:06:33:
11:d2:62:35:d1:41:69:09:81:71:21:30:f5:61:70:
38:99:df:b0:0e:1d:a3:11:37:b4:d2:fd:da:a9:24:
92:ec:cf:9e:96:dc:97:18:1c:ac:af:73:98:93:74:
7e:f3:8b:89:c0:db:52:ea:1c:b4:e3:ed:ee:d8:22:
ca:85:59:fb:c4:5d:61:72:15:77:14:60:51:7a:f1:
4c:45:c3:d4:ea:f9:0c:49:ef:eb:51:02:52:bc:df:
a1:70:b2:1e:fc:64:90:fe:b5:6d:82:51:02:66:05:
f9:eb:d5:ba:63:7a:51:e8:5d:c3:87:6c:aa:b1:70:
0e:9a:93:79:05:a3:87:eb:d2:9d:0e:a4:80:2c:24:
c4:78:df:34:5e:8d:42:cd:d2:5e:b6:87:3b:5c:14:
70:29:2a:60:c9:ce:e2:11:68:55:51:0b:30:77:de:
0b:7e:f0:e9:61:e7:a9:d5:37:be:34:04:59:e7:a0:
57:db:c5:2f:c3:31:99:5f:69:98:e8:f1:c1:dd:13:
db:fa:6f:a6:6d:71:2e:7a:00:4a:d8:e0:a2:95:0e:
aa:2f:93:cb:94:df:c8:f3:49:69:cc:35:5f:24:5b:
96:13:ed:36:7e:dd:28:00:b1:a0:86:cc:66:23:f8:
db:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2C:4A:CC:F7:39:D2:B2:8F:71:25:A7:F1:AB:EE:5D:8E:CB:0A:B5
X509v3 Authority Key Identifier:
keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/zyxKzPc50rKPcSWn8avuXY7LCrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.44.0/22
IPv6:
2a13:2240::/29
Signature Algorithm: sha256WithRSAEncryption
dc:7b:a3:4e:b7:a0:aa:72:e5:04:a6:30:f0:18:02:5c:91:a3:
e3:69:63:85:ed:da:9e:65:4a:bd:b1:40:6a:a6:79:e2:ad:47:
18:0e:1a:56:be:7f:5a:43:92:5c:77:12:e8:51:bb:55:0c:63:
d2:e0:6a:08:b9:b7:aa:78:a1:4d:35:17:c4:de:ef:df:36:06:
2d:eb:ef:88:eb:fc:33:b0:a7:04:38:cc:9b:39:4a:9f:e1:2a:
3e:dd:95:51:b1:cc:60:77:8a:17:f2:ce:ac:e7:c1:a5:ef:b6:
54:21:ff:bd:ab:45:48:21:d9:3d:70:f5:33:33:e0:36:2a:65:
04:0c:1d:86:38:9f:df:62:00:dc:bc:6b:9a:9c:9f:35:d3:0e:
97:71:fc:f7:93:10:9f:15:09:f2:d9:26:75:63:5d:05:82:66:
78:f8:c2:86:0a:2e:c7:8a:ba:66:f5:ec:a3:cd:a0:26:2e:82:
41:07:a0:ac:5c:c8:c3:97:ce:91:9c:6e:86:0d:04:7c:98:ff:
ff:87:71:6b:ce:c0:59:ac:01:a7:d8:52:b6:ca:8e:55:34:10:
5d:6d:0f:fb:1d:9b:23:07:42:47:fb:35:0c:1c:94:38:8f:18:
a9:1d:37:a8:da:a6:4e:35:0c:0d:61:04:24:61:f1:49:7d:ac:
54:55:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:03 2024 by rpki-client on console-ams.rpki-client.org