Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/BdV5FLxBQqpO9XyvAu6ptKEAqtg.roa
File: BdV5FLxBQqpO9XyvAu6ptKEAqtg.roa (raw, json)
Hash identifier: uYrkUaIRp600CLKoUCY0uSM9Xc4TqnJ9NLvkdA6m26M=
Subject key identifier: 05:D5:79:14:BC:41:42:AA:4E:F5:7C:AF:02:EE:A9:B4:A1:00:AA:D8
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 01856CB85D3509237B8E2860D1851C35E025
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/BdV5FLxBQqpO9XyvAu6ptKEAqtg.roa
Signing time: Sun 01 Jan 2023 09:44:59 +0000
ROA not before: Sun 01 Jan 2023 09:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.157.92.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:5d:35:09:23:7b:8e:28:60:d1:85:1c:35:e0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Jan 1 09:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05d57914bc4142aa4ef57caf02eea9b4a100aad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4d:07:12:87:da:6c:20:92:3a:0d:cd:7f:b2:
a4:58:fb:85:cf:ac:02:7c:bf:db:5f:e5:05:31:a9:
67:7a:b1:cb:57:40:1b:22:99:00:18:b6:13:b2:90:
12:19:db:3c:3a:b1:9c:1d:38:13:b6:62:f6:04:1a:
13:70:d5:9e:21:1e:12:58:6a:ee:65:7f:22:66:10:
33:3b:b8:49:96:e8:43:8c:56:d9:ea:ab:d1:9e:61:
d6:ef:d9:4e:c6:2b:c8:0e:4a:af:98:85:72:ce:00:
76:80:8e:0d:83:27:cf:15:31:91:aa:68:8f:f8:ad:
07:6a:e8:f7:d3:0a:3e:ce:74:c9:08:76:b8:35:fa:
c5:37:f3:c1:0a:80:dc:20:72:18:91:4f:70:f3:99:
bc:56:b9:ec:c7:c6:c4:48:17:90:d5:c1:dd:27:fa:
59:82:c9:25:6d:c4:34:7f:9e:4d:e2:9c:7e:2f:83:
93:fa:c5:35:d3:3e:7e:08:d9:11:86:74:2d:26:5e:
df:c2:60:45:f7:cc:70:52:73:3a:52:91:96:8b:fc:
32:9c:3d:17:73:c0:66:52:b0:c0:ae:b9:d5:51:86:
23:19:62:30:f7:df:6d:ee:5b:44:7c:a9:67:ca:18:
e3:7b:ca:f1:bf:f4:48:d4:3f:1a:7a:5b:ea:e8:c6:
1a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D5:79:14:BC:41:42:AA:4E:F5:7C:AF:02:EE:A9:B4:A1:00:AA:D8
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/BdV5FLxBQqpO9XyvAu6ptKEAqtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.92.0/22
Signature Algorithm: sha256WithRSAEncryption
40:71:96:55:72:f9:13:1c:73:1a:0b:bc:97:72:65:d3:80:36:
96:a6:1e:d1:77:4a:51:38:5d:b7:60:5b:b2:83:ab:c2:ea:77:
a3:b6:af:2b:de:68:95:33:3e:aa:cd:75:45:67:ab:5b:8e:a0:
95:1d:af:ff:6a:78:06:a5:55:20:fd:99:27:43:38:58:83:80:
00:ad:ae:fb:2e:b4:3c:a7:e7:06:47:62:b1:ad:4b:da:b2:bd:
9c:5d:80:4b:42:fd:7d:c3:e6:21:22:ef:b9:a0:ab:4b:61:b7:
07:11:23:6a:05:81:65:11:30:1d:80:cf:93:8e:87:32:b8:62:
c7:c1:61:60:dc:a6:6b:4f:59:dc:d6:c0:1b:e7:ff:2b:2c:20:
31:c3:4a:5c:82:72:3e:68:e1:ab:24:17:8f:a0:6b:56:6a:ce:
8f:fd:fe:3b:6d:14:5f:40:13:ec:1c:46:9d:3b:43:be:36:b9:
fd:ca:03:90:bf:03:99:1e:1c:13:df:b2:c0:e4:06:6e:ac:b2:
4e:5e:70:56:20:38:4a:d8:50:25:6e:01:59:02:75:c8:f8:44:
fc:41:f6:c2:68:d3:1d:d5:ec:7d:28:65:1d:65:6c:fc:fd:ec:
19:39:63:17:1e:b7:c8:00:c6:22:d3:23:fd:e5:bb:8b:06:a9:
c3:7c:0b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:06 2023 by rpki-client on console-fra.rpki-client.org