Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/f-B-DpwnWjjQVR54Ni5TrVofQVE.roa
File: f-B-DpwnWjjQVR54Ni5TrVofQVE.roa (raw, json)
Hash identifier: iXaie/eW4Xi35t/kysMErNPUOqknxVkKlFUTen0kPrA=
Subject key identifier: 7F:E0:7E:0E:9C:27:5A:38:D0:55:1E:78:36:2E:53:AD:5A:1F:41:51
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B639ADA2CE3225D64DD0DE4547C2A2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/f-B-DpwnWjjQVR54Ni5TrVofQVE.roa
Signing time: Mon 02 Jan 2023 09:00:45 +0000
ROA not before: Mon 02 Jan 2023 09:00:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140947
IP address blocks: 185.251.228.0/24 maxlen: 24
45.147.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Feb 2023 14:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:39:ad:a2:ce:32:25:d6:4d:d0:de:45:47:c2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fe07e0e9c275a38d0551e78362e53ad5a1f4151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d9:c0:63:80:82:7e:7a:b4:c3:7d:86:fa:94:
4b:aa:bb:13:9f:97:70:78:39:f4:a0:19:0a:05:b4:
64:87:b4:5a:a4:b7:5e:c6:f3:61:6c:a9:5d:a4:6d:
88:e8:23:b0:64:b0:e1:28:53:7c:22:25:b3:97:53:
99:87:67:76:d8:ab:fe:41:b6:dc:78:7e:05:b3:ce:
72:6f:1e:81:45:68:57:1e:41:a2:fa:89:69:3a:e6:
4e:cc:13:97:b8:eb:69:4a:7f:0e:ae:17:ad:8c:78:
7b:ce:ac:27:5f:be:1d:ee:61:01:c2:c0:d8:35:91:
5a:20:6f:f4:84:5e:7e:79:6c:96:f6:88:84:74:55:
a7:e1:b5:67:6c:b6:48:3c:76:d7:37:fd:ff:5d:bd:
14:44:57:29:12:d0:04:c7:4b:dd:80:af:ba:80:d0:
27:dc:a9:fa:a5:b5:7a:8c:61:86:fb:4f:c7:f2:db:
f5:e9:2c:92:e1:01:b1:ca:9c:18:fc:90:17:03:39:
ea:22:c4:12:c8:0f:61:88:0c:26:28:fc:cc:6c:9c:
75:25:17:2a:54:9f:4c:b8:e3:7b:e7:91:03:60:7e:
c9:34:da:f4:d5:68:dc:3a:29:f6:6c:41:9c:44:58:
61:ca:69:0e:33:c0:bb:dd:45:c0:25:85:f8:26:33:
9e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E0:7E:0E:9C:27:5A:38:D0:55:1E:78:36:2E:53:AD:5A:1F:41:51
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/f-B-DpwnWjjQVR54Ni5TrVofQVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.227.0/24
185.251.228.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d1:83:17:1d:05:78:d3:55:67:d3:25:34:05:59:19:a8:93:
76:6a:fb:1f:82:ff:ae:b3:86:b6:65:d6:02:ca:b7:24:b0:41:
31:57:2e:75:14:15:79:63:e9:43:d0:8a:34:2d:08:53:41:f9:
50:50:c1:4b:54:8f:ab:b2:58:7d:7e:aa:bd:1a:84:61:16:97:
30:ad:22:8f:9b:48:ed:c9:5d:00:52:09:71:85:c0:26:d7:50:
69:ad:69:41:be:e2:1f:bf:b3:71:66:3e:11:66:70:51:47:e1:
f4:ff:bb:17:99:2d:44:52:1c:9d:93:ad:34:63:f7:e4:86:71:
80:4f:9f:b8:32:1d:f4:36:75:8d:85:ff:cb:e8:2e:9d:91:7e:
3f:14:ab:1b:f4:4d:9b:7f:ca:ed:ae:48:f3:ca:95:bc:bf:e9:
1a:b6:d7:4e:64:d8:42:d1:37:63:ee:a2:67:cc:a0:2e:e1:8b:
4d:86:9a:73:67:43:e8:82:0a:0f:36:80:3a:22:f1:4d:f1:d4:
c7:6b:51:3c:fe:da:4d:77:54:b6:56:8f:99:57:71:bb:41:76:
4e:ec:a7:29:41:72:4b:1d:4b:d2:b7:ec:47:9a:35:ea:fb:b9:
59:ef:bb:e6:b8:9d:40:1e:44:ec:3c:d0:05:0a:a3:0c:9a:a6:
40:76:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org