Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/x2MhnNlLkYEBKir5yWkBmjylz-A.roa
File: x2MhnNlLkYEBKir5yWkBmjylz-A.roa (raw, json)
Hash identifier: lgtAcZIaghVM7ftP5nMf8a4bYlsr/y2o65OpbmY344Y=
Subject key identifier: C7:63:21:9C:D9:4B:91:81:01:2A:2A:F9:C9:69:01:9A:3C:A5:CF:E0
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 0187F4702DB40744434A91EEF888AC1DA7C8
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/x2MhnNlLkYEBKir5yWkBmjylz-A.roa
Signing time: Sun 07 May 2023 04:20:05 +0000
ROA not before: Sun 07 May 2023 04:20:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35577
IP address blocks: 185.245.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f4:70:2d:b4:07:44:43:4a:91:ee:f8:88:ac:1d:a7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: May 7 04:20:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c763219cd94b9181012a2af9c969019a3ca5cfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:46:bb:9e:97:c5:b0:bc:da:f2:93:92:e3:
97:ba:d1:f0:6a:a1:fb:b6:d9:66:0f:60:68:05:26:
9e:7c:e0:bb:33:ed:2a:2b:a7:8e:cd:c4:b0:0c:4a:
dd:15:09:71:23:b6:36:d6:4b:ec:af:54:b7:86:b3:
c1:0c:3e:53:cd:fe:e5:6b:cf:f9:db:33:78:5f:c6:
b2:db:1e:21:40:d3:5b:19:69:0d:7d:2f:8e:ed:cb:
4e:90:f2:07:7f:9e:f2:2a:20:ee:72:a3:e1:af:21:
43:b2:ef:7b:27:8e:d1:6c:40:e5:a3:cf:1e:e0:12:
e9:5a:65:ed:2a:f6:3d:04:c0:23:43:0f:d2:30:ba:
cb:9b:39:02:2c:a4:b5:57:31:08:fe:4c:a8:f7:81:
5e:54:4b:8f:04:1e:07:54:88:2b:a5:91:97:55:a7:
d0:ab:e0:20:c2:d7:31:1e:d5:1f:c1:f3:a0:fb:63:
5e:ee:5d:4e:a6:9a:9e:0b:b2:1b:92:d4:ab:21:4a:
87:a4:d6:92:90:ce:61:d5:fd:dc:67:1b:fa:77:c7:
3f:e1:e6:66:8d:19:15:1e:d3:57:d9:61:09:e7:44:
48:a6:f9:bb:3e:c9:80:a0:c8:5a:27:00:4a:ec:f6:
9a:ca:c2:53:ba:77:d0:11:89:10:02:e3:1b:59:10:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:63:21:9C:D9:4B:91:81:01:2A:2A:F9:C9:69:01:9A:3C:A5:CF:E0
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/x2MhnNlLkYEBKir5yWkBmjylz-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.244.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3a:a2:fe:75:0f:49:b4:c6:92:c7:6d:42:42:8c:78:fc:8e:
cd:e3:27:03:52:fe:fd:c8:c3:6c:5e:6d:eb:fa:54:f8:b9:45:
7d:17:b4:0a:7e:99:60:e7:fb:d7:3d:87:c0:eb:d8:de:3c:33:
fa:4f:03:78:68:ca:5c:f4:01:a6:10:5b:d2:b3:2b:56:29:10:
9e:99:94:d2:db:74:e0:d1:21:bb:ad:5e:2b:d0:c3:9f:59:a2:
a4:e4:53:5e:22:1e:5d:ed:1e:44:68:95:aa:71:43:ea:17:2c:
c9:38:1a:e9:20:6d:05:34:5c:39:83:20:26:70:6f:72:23:16:
64:98:4a:be:a5:6f:78:a3:72:d1:42:9a:45:9b:29:c6:5b:7d:
66:0c:ea:04:8b:8c:88:b1:14:b9:c5:57:94:ee:08:aa:4f:8a:
40:c4:ec:3f:b5:bf:f8:be:2e:ad:f4:f7:81:92:4f:72:54:82:
6a:82:27:e9:0b:8e:36:18:ec:55:a1:a4:fe:3b:8c:af:77:7e:
03:0c:fe:ae:df:2a:28:20:d7:ca:71:3d:13:98:bc:5a:1d:c1:
14:f0:89:4d:ea:bf:6a:76:e5:7d:d1:d8:28:49:f7:43:75:6a:
f9:60:72:86:26:5c:d3:b1:a2:0f:25:0b:a3:66:95:bc:ae:a2:
c3:f6:2b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:23 2024 by rpki-client on console-ams.rpki-client.org