Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/NJ4J7vQGyV1i9ffZc0ylKlGWcgw.roa
File: NJ4J7vQGyV1i9ffZc0ylKlGWcgw.roa (raw, json)
Hash identifier: tmG03UvhtP7VMRW9RvNqWBKesTXhwPbIT0AiZiMqFiw=
Subject key identifier: 34:9E:09:EE:F4:06:C9:5D:62:F5:F7:D9:73:4C:A5:2A:51:96:72:0C
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 01856CEF44DF24034C582ACC9DF91F93571F
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/NJ4J7vQGyV1i9ffZc0ylKlGWcgw.roa
Signing time: Sun 01 Jan 2023 10:44:57 +0000
ROA not before: Sun 01 Jan 2023 10:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61204
IP address blocks: 185.245.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Feb 2023 07:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:44:df:24:03:4c:58:2a:cc:9d:f9:1f:93:57:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jan 1 10:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=349e09eef406c95d62f5f7d9734ca52a5196720c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9e:43:1f:e7:f5:3c:02:4a:51:4e:41:75:60:
04:c8:95:0c:12:e3:e3:42:7a:f1:f9:f6:30:06:70:
86:28:9a:95:35:5b:a3:c1:e4:47:b0:24:0c:12:5e:
30:f4:33:ef:40:c4:d5:24:d8:4d:e3:ca:55:0c:c9:
97:ce:bb:a3:3f:07:3a:61:1a:de:56:db:d6:95:1f:
68:b1:2e:b8:57:bf:bf:1c:c3:1b:de:cd:fd:e5:99:
2d:dc:92:53:76:a8:10:5f:93:b7:1e:fb:07:79:45:
98:66:35:33:e3:17:d3:7b:4c:ab:e6:00:53:fc:23:
0b:a7:2e:81:ed:34:46:90:7e:15:51:be:9c:0c:c3:
a1:6c:ff:9d:4e:1d:c3:e2:de:d7:38:c1:e9:4b:6f:
76:5c:0c:59:28:a7:1b:f4:22:44:4a:e0:fd:58:c9:
91:d7:be:40:bf:6a:c6:d4:bf:1c:5e:60:ff:95:0b:
f3:90:fe:32:c6:10:bd:22:09:d4:30:08:e3:33:59:
e9:d8:6a:9f:cf:93:15:b7:b5:96:1c:ba:c5:8d:fe:
d6:c2:16:d9:4d:83:36:c8:c3:52:ef:3b:ec:51:a1:
65:d3:e6:29:40:a0:11:45:b3:98:47:46:bf:95:83:
d0:85:23:ff:20:4b:31:e7:df:7f:c5:8f:96:2e:7b:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9E:09:EE:F4:06:C9:5D:62:F5:F7:D9:73:4C:A5:2A:51:96:72:0C
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/NJ4J7vQGyV1i9ffZc0ylKlGWcgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.244.0/24
Signature Algorithm: sha256WithRSAEncryption
85:77:81:09:c0:af:4e:f4:a3:e3:1b:c8:be:00:1a:8a:06:76:
13:a6:7c:4d:5c:b8:53:b8:be:ac:95:a6:48:a3:0c:b2:dc:0f:
9a:47:50:64:6f:87:c1:ff:97:a0:9f:2b:ba:a6:dd:2f:bb:4e:
1b:9f:f7:f5:d5:f7:2a:ef:93:40:5a:8e:6e:18:6f:a8:2c:4f:
e0:58:0c:fb:ad:7c:a4:34:10:f7:36:b0:4f:52:50:c6:4a:db:
ce:9c:f9:05:7c:bc:55:9d:b7:45:57:00:40:54:ce:c8:ec:e8:
77:5a:c1:52:b1:20:ac:fd:a8:4b:25:ab:a2:a8:c0:13:0a:0e:
05:c6:e7:ec:09:6f:fa:ab:52:ac:42:77:2f:bf:3b:d7:63:ee:
a4:73:ca:48:7b:cb:a9:d5:4e:99:76:28:7c:66:4f:34:2f:38:
ce:5c:b0:cb:4b:90:b1:c1:c8:2b:49:87:96:b0:45:6a:03:03:
b0:1d:2c:fd:da:e3:ec:a2:f3:3d:d4:c5:20:44:e0:f8:b5:f7:
86:41:8e:4e:2a:a2:81:b0:26:a6:7a:50:b8:d8:ca:b6:f3:c2:
d1:13:3c:63:d3:37:d3:1d:f7:a6:91:66:21:23:d0:70:e3:4b:
39:b3:d5:5d:52:27:df:97:3a:cd:67:0d:1c:40:c3:3c:64:da:
f4:3a:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:22 2024 by rpki-client on console-ams.rpki-client.org