Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Xq1qn-joOMe4--MGnbJGK7AxIf8.roa
File: Xq1qn-joOMe4--MGnbJGK7AxIf8.roa (raw, json)
Hash identifier: 6NoZAdjgJi/48zMATp7x3HbRKbS+kyXUUb3hGwLoEVU=
Subject key identifier: 5E:AD:6A:9F:E8:E8:38:C7:B8:FB:E3:06:9D:B2:46:2B:B0:31:21:FF
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B62DC29C939476DEC986C563DCF387
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Xq1qn-joOMe4--MGnbJGK7AxIf8.roa
Signing time: Mon 02 Jan 2023 09:00:42 +0000
ROA not before: Mon 02 Jan 2023 09:00:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 45.8.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Jun 2023 21:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:2d:c2:9c:93:94:76:de:c9:86:c5:63:dc:f3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ead6a9fe8e838c7b8fbe3069db2462bb03121ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:49:cb:08:ef:e9:68:aa:d2:3b:ec:4c:25:
c5:5b:ad:f7:0d:9c:53:5a:4d:89:d1:85:2c:a7:8f:
f8:69:5b:08:9f:64:fe:9d:80:8e:41:6d:c1:e5:08:
6e:8a:b6:65:c2:6f:05:80:90:7d:18:cb:44:2b:98:
46:33:5d:e4:b0:e5:39:30:6f:42:3e:c8:61:66:cb:
15:cb:76:f2:11:c6:59:2f:43:32:19:d3:f7:89:33:
57:45:41:5e:88:d4:3b:a7:f1:6a:7d:5d:4a:5e:a8:
ff:42:49:87:a9:7b:ce:b0:e2:23:1e:f9:e9:39:52:
41:19:d0:ae:58:a0:30:95:1d:f4:f3:60:71:8b:94:
e8:94:1b:0c:73:a0:21:40:58:03:e7:31:59:83:b4:
f5:7e:58:4a:a2:81:14:f1:7b:9d:64:13:32:fd:53:
83:7d:8c:86:a5:e4:96:70:a1:4d:1d:c9:68:ed:67:
8f:ef:d9:10:e1:b7:8c:ce:99:4f:db:4a:30:98:f6:
d1:ac:cf:17:5d:c6:26:23:95:37:75:9e:59:90:9b:
64:6e:4d:a2:dc:25:26:1f:58:34:31:46:be:65:3f:
e2:af:10:b0:05:bd:31:9a:2e:c0:d2:26:cb:41:20:
bc:57:2d:f0:09:8a:5c:99:47:85:f1:c0:cf:26:98:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AD:6A:9F:E8:E8:38:C7:B8:FB:E3:06:9D:B2:46:2B:B0:31:21:FF
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Xq1qn-joOMe4--MGnbJGK7AxIf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.22.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:dc:2a:96:56:be:6f:fe:66:d5:85:9a:79:b2:b5:b2:5d:3b:
1b:e3:ad:39:5d:0b:45:38:81:51:67:01:8e:48:7f:6c:45:0d:
71:ed:98:ac:8c:cd:27:15:4e:fd:a1:77:ef:ba:4e:83:ad:39:
47:53:ad:07:57:ba:17:68:58:4b:a7:3b:89:8d:da:9f:02:92:
33:53:e4:a3:17:4b:29:92:d2:62:21:13:7b:c5:47:ce:13:9f:
9d:fd:78:fd:65:93:01:f5:fd:05:d7:c0:ea:e5:0b:7b:8b:e6:
18:8a:a4:6c:f2:84:ee:c1:bc:9f:4a:f6:22:cf:da:85:32:84:
62:a9:3f:c2:55:01:8d:d4:f3:79:db:ee:cb:d0:b5:57:aa:a5:
3b:2d:8c:be:26:fd:77:66:42:fe:48:0c:cd:95:06:9f:b7:37:
34:18:a6:46:ec:31:2b:80:14:9a:cb:38:a5:5d:45:d0:07:5c:
2e:b5:20:64:75:b6:df:27:50:30:88:48:44:8f:98:f6:58:92:
88:80:03:d1:4d:18:c2:15:d9:b3:71:25:09:2b:83:1d:10:08:
a5:09:ae:e6:de:cf:d9:3e:2e:dc:e7:0c:eb:dd:94:fb:3e:48:
43:0c:38:29:4e:0b:7c:f7:c0:9e:a5:67:ad:a2:e5:4d:d9:a3:
e5:eb:e1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org