Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/57lYr6hHYR8_teB1IuxbApo4ITw.roa
File: 57lYr6hHYR8_teB1IuxbApo4ITw.roa (raw, json)
Hash identifier: E/pZmvjd6xss95UmxDmsAOYzLeapiLDADHX+pFu9+Wg=
Subject key identifier: E7:B9:58:AF:A8:47:61:1F:3F:B5:E0:75:22:EC:5B:02:9A:38:21:3C
Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial: 01856D5D250EC16A629BEDD8E0BB44A7CFD1
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/57lYr6hHYR8_teB1IuxbApo4ITw.roa
Signing time: Sun 01 Jan 2023 12:44:58 +0000
ROA not before: Sun 01 Jan 2023 12:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34177
IP address blocks: 45.85.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Feb 2023 14:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:25:0e:c1:6a:62:9b:ed:d8:e0:bb:44:a7:cf:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Validity
Not Before: Jan 1 12:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7b958afa847611f3fb5e07522ec5b029a38213c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:65:9d:c6:2a:47:d2:f9:28:1f:13:cf:08:
bd:c9:fa:2b:a5:e3:6e:df:85:74:24:6e:e8:68:5c:
5f:c9:79:bb:1e:6a:31:6a:cf:c3:d2:93:54:71:62:
8e:ac:c3:0d:7c:9e:40:f8:f2:ee:bf:45:42:17:fd:
2a:66:3c:20:9d:3f:bb:6a:1d:06:02:7e:62:ac:96:
11:90:d4:00:a8:d7:89:7c:6c:9d:68:c2:0a:54:6b:
d1:4e:8f:b2:bd:d0:02:89:69:9f:15:a0:ad:27:4b:
04:11:e2:25:8e:95:94:28:95:60:06:7e:5b:06:86:
43:07:8c:5e:e9:b0:f4:a5:a2:96:ef:c7:ee:78:94:
6e:ff:c4:43:d5:e5:1b:1e:67:fc:47:7d:77:1e:ba:
2b:3c:1a:75:3f:a3:e8:c7:af:e0:16:1f:c1:88:0a:
18:3f:75:99:a1:03:de:4f:13:b3:66:73:7b:8c:f8:
52:97:4c:98:9e:33:ca:9a:26:48:bb:1d:4b:7c:62:
ec:5b:8c:a5:90:2a:72:c0:58:ec:64:aa:30:c3:a4:
c6:0b:11:7f:9a:e7:87:7b:4e:a1:1b:f0:fd:f3:71:
d5:ae:fb:40:3f:84:e0:71:fc:42:84:ff:34:8e:d5:
94:1a:cb:e8:1a:7e:52:03:72:b1:73:3d:b0:76:cc:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B9:58:AF:A8:47:61:1F:3F:B5:E0:75:22:EC:5B:02:9A:38:21:3C
X509v3 Authority Key Identifier:
keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/57lYr6hHYR8_teB1IuxbApo4ITw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a1:14:21:a2:df:c4:22:4d:54:5e:d4:c7:0f:33:f9:0a:c9:
a1:43:8e:11:0a:b1:56:bd:60:5c:52:88:f5:e5:96:bf:48:6c:
74:a0:e5:01:b3:ce:c3:06:4e:a5:2b:73:75:6f:23:02:d5:90:
1a:5b:a5:1c:69:2b:16:00:d9:64:be:36:e6:b1:34:ab:c8:a2:
a2:55:9e:37:28:c5:80:60:e8:a7:dc:82:2e:76:53:b2:46:ff:
c7:8b:67:f8:ba:b2:8b:f1:aa:9f:14:aa:16:e0:34:b5:90:e5:
fd:94:2b:dc:30:a4:80:d2:a2:e6:81:d1:d8:8e:20:3e:30:c3:
60:3e:39:96:c5:8d:9f:a1:20:a3:82:52:4d:f1:80:a5:23:dc:
04:fd:ed:52:3a:e8:a9:0e:2f:3a:db:01:ad:0e:9c:cb:24:ca:
b0:c2:ba:a0:83:aa:8d:da:8c:73:b9:a4:d8:40:91:44:4c:be:
23:fa:10:01:a9:0c:b1:df:7c:16:a3:61:c2:c7:12:1a:7d:5e:
08:03:b2:ce:24:90:8b:72:4a:68:89:7e:ff:d8:aa:f3:82:a8:
6a:76:0d:5c:6f:32:03:45:31:a2:95:a6:b4:6b:10:9e:71:73:
83:6b:b2:9f:85:80:94:e2:e7:2f:73:d4:14:de:4e:d0:d0:b6:
58:cf:64:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:23 2024 by rpki-client on console-ams.rpki-client.org