Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rfxR58f3skO6EGbLgJicDy9-S20.roa
File: rfxR58f3skO6EGbLgJicDy9-S20.roa (raw, json)
Hash identifier: WaNXRA4hxSuX8E3qKkSfMQOBLZLialX8V4drbqV4Q0A=
Subject key identifier: AD:FC:51:E7:C7:F7:B2:43:BA:10:66:CB:80:98:9C:0F:2F:7E:4B:6D
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0189E41130BC38E153CA4B73B198AE3A2459
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rfxR58f3skO6EGbLgJicDy9-S20.roa
Signing time: Fri 11 Aug 2023 10:07:59 +0000
ROA not before: Fri 11 Aug 2023 10:07:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204603
IP address blocks: 45.9.74.0/24 maxlen: 24
185.217.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 21:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:11:30:bc:38:e1:53:ca:4b:73:b1:98:ae:3a:24:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 11 10:07:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adfc51e7c7f7b243ba1066cb80989c0f2f7e4b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4d:8e:cd:08:19:2a:d0:fe:3a:dc:30:b5:fe:
2e:d4:ca:3d:2c:bb:27:48:f6:dc:66:c9:57:79:b9:
3d:c7:d5:c7:29:27:f6:f0:cc:1e:52:ed:3b:b9:79:
73:04:bd:28:08:d1:1d:4c:28:8d:b8:72:6e:7d:02:
d9:5b:9a:46:78:b6:13:89:4f:0e:2e:1d:58:2e:53:
d8:4a:b5:e9:dc:b7:1e:ef:d6:6c:1f:03:34:3d:78:
97:99:ed:12:26:ff:6b:d9:87:0f:51:dd:c7:b5:e6:
a4:89:c7:e2:49:9a:66:d1:7f:a9:37:24:a8:b1:71:
32:23:2f:74:76:df:80:70:2c:77:a9:10:34:86:d2:
68:e1:87:dc:c6:57:60:a3:ec:87:79:86:ff:a6:57:
22:12:60:48:d5:61:3d:ee:83:86:f5:40:de:b1:1a:
83:0a:fe:dd:3a:f8:15:c8:f2:10:05:de:bf:49:47:
7f:e4:35:f1:27:6f:45:1e:6a:f4:4c:81:95:c4:dc:
fa:29:f3:c5:7f:b6:cb:3a:be:7a:42:41:53:04:a1:
03:c9:44:16:13:d4:51:29:28:15:8e:f5:8e:37:8d:
23:6f:dd:46:56:98:b7:d9:86:31:02:c4:df:28:b8:
8e:e7:d7:f4:38:5f:6b:c2:6b:3f:70:4c:6f:0f:3d:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FC:51:E7:C7:F7:B2:43:BA:10:66:CB:80:98:9C:0F:2F:7E:4B:6D
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rfxR58f3skO6EGbLgJicDy9-S20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.74.0/24
185.217.197.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:25:3b:62:ba:b8:55:5f:15:ba:77:a4:22:5e:08:82:91:ee:
ee:6b:c5:e3:37:69:a2:c2:f8:36:9c:09:9d:a7:05:bf:26:3a:
a8:5b:84:4e:8c:a4:e2:12:29:6a:13:8d:34:1e:1e:ae:47:28:
de:bb:5e:e1:2f:03:73:87:bd:3d:f7:90:ca:dc:dd:de:18:dc:
80:f6:51:6c:d0:5f:b4:05:7f:b0:c2:f6:15:22:7f:0b:24:9e:
fb:09:67:96:71:0a:1d:21:b4:59:ad:f4:f5:95:1b:14:5a:fc:
68:fa:d9:06:57:75:28:f2:53:b3:94:49:b5:33:60:1b:c2:c9:
de:70:a1:6a:37:7d:a4:a5:0b:3d:3f:09:2c:bf:9a:20:96:29:
05:ea:20:09:6e:96:e5:0b:a9:81:e4:e6:4a:ad:be:13:b7:5b:
f8:84:66:cf:ae:74:fa:cf:d6:92:75:0b:ef:c7:7b:ce:9d:c5:
7f:e3:fe:ee:68:d3:fe:18:27:30:84:47:5a:55:bc:09:8a:5b:
56:bf:07:c9:9c:cd:02:99:21:ae:25:b1:97:6f:42:81:7f:43:
6f:42:4c:55:f3:c5:cb:e0:5f:29:66:85:00:56:e1:07:be:08:
0f:fd:0e:a7:ab:bf:3b:db:4d:06:3e:11:34:92:7a:cd:37:de:
fa:06:68:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org