Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/Rp_QGxJK1j4_auCQq1ThRetOHts.roa
File: Rp_QGxJK1j4_auCQq1ThRetOHts.roa (raw, json)
Hash identifier: rr6pQ5DwY7ebAPIYYGkJsgHzT0JAhqjoA+kT/3vKzBE=
Subject key identifier: 46:9F:D0:1B:12:4A:D6:3E:3F:6A:E0:90:AB:54:E1:45:EB:4E:1E:DB
Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial: 01856D5D23DA60CF2B6A42FADBC2062381C2
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/Rp_QGxJK1j4_auCQq1ThRetOHts.roa
Signing time: Sun 01 Jan 2023 12:44:58 +0000
ROA not before: Sun 01 Jan 2023 12:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8218
IP address blocks: 45.85.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Feb 2023 14:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:23:da:60:cf:2b:6a:42:fa:db:c2:06:23:81:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Validity
Not Before: Jan 1 12:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=469fd01b124ad63e3f6ae090ab54e145eb4e1edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:39:89:67:7b:9b:43:8d:06:a1:14:8b:b2:28:
0f:57:3a:0c:45:4f:cb:fa:d6:63:7e:05:69:26:6e:
db:51:ac:90:e0:37:bf:77:bb:1e:ba:87:38:86:c8:
da:fa:31:ee:15:cd:5e:02:5f:01:e7:cd:d7:f4:58:
41:2f:40:c7:14:a8:77:fa:2c:89:7f:a7:aa:66:38:
a1:fe:3a:bc:9c:e6:6e:78:0c:d5:e4:fd:94:99:42:
51:27:38:47:b1:22:38:e4:09:9e:a5:92:f0:32:1b:
bc:a5:81:ea:b5:09:62:c9:bb:86:b4:76:4e:0b:c8:
5e:a8:8e:bc:c2:7b:65:b3:52:bf:04:17:6d:39:64:
15:35:0e:46:67:1c:86:ab:ec:40:ef:68:c4:36:05:
88:39:37:c8:90:f4:47:72:4a:db:2b:3b:9e:58:64:
bd:58:7b:ac:2d:7e:6b:6c:a5:78:ec:e3:bd:bc:ba:
b2:02:17:fe:ff:f6:50:1a:0b:76:9a:a4:be:bb:4c:
bb:6a:1c:8f:b2:01:16:a9:67:67:9d:59:f8:f6:87:
5a:0a:17:85:12:04:30:39:c9:a6:0e:11:83:1b:79:
ca:2b:9a:09:d3:ca:54:6f:7f:75:5a:56:06:f7:39:
66:b3:d8:79:87:9d:cb:dc:fe:86:0c:71:db:34:52:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9F:D0:1B:12:4A:D6:3E:3F:6A:E0:90:AB:54:E1:45:EB:4E:1E:DB
X509v3 Authority Key Identifier:
keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/Rp_QGxJK1j4_auCQq1ThRetOHts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.54.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:63:9c:af:ce:33:d7:f7:ad:85:ab:58:24:db:01:1f:32:92:
71:e9:f9:55:76:d3:76:eb:8a:8c:5e:27:25:a4:01:ea:f8:fc:
ed:3c:3e:14:24:d4:42:b6:24:11:8f:2f:d5:d4:2d:36:5e:b6:
6b:4e:84:98:1e:73:d1:ef:2b:c6:16:fa:79:ad:a7:56:01:1e:
fe:ff:63:21:e6:e1:18:bf:45:a8:3d:b6:3c:e3:c6:6d:5c:7b:
43:fb:89:fa:50:c8:5d:67:b2:13:a3:c6:f7:76:67:a0:ec:b9:
f2:01:2e:23:d0:55:fa:6d:89:19:50:ca:81:7a:ce:90:76:f8:
4c:ff:ab:07:0f:7f:fd:f1:17:83:03:e8:b0:d1:47:33:c6:a9:
7d:be:d7:76:67:a8:d2:91:fc:df:ef:ce:cc:0e:2a:55:35:12:
d5:3e:63:a3:f8:e9:a2:12:04:a3:cc:84:aa:84:06:1c:cb:f7:
72:6c:76:a6:30:8a:d0:66:95:cb:64:6c:33:0a:af:29:5a:58:
e1:82:4a:f7:86:78:57:98:61:c7:05:ba:f8:98:52:57:d3:39:
8d:b7:7f:6d:61:89:5f:a7:aa:ff:c8:cd:1b:57:4c:eb:23:ff:
86:eb:0e:01:cb:3f:0c:1a:55:06:eb:3d:50:a6:d5:ea:4e:fd:
3f:93:2e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:23 2024 by rpki-client on console-ams.rpki-client.org