Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/V4eNy27n8cJ6DvK3GI2OSGJCHGA.roa
File: V4eNy27n8cJ6DvK3GI2OSGJCHGA.roa (raw, json)
Hash identifier: +ldXalybJjiefrWXN2WlQIVBiYhIpNkgvszKJvTSAaE=
Subject key identifier: 57:87:8D:CB:6E:E7:F1:C2:7A:0E:F2:B7:18:8D:8E:48:62:42:1C:60
Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial: 01856D5D25B371E3CA6FF76B78067ECC724C
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/V4eNy27n8cJ6DvK3GI2OSGJCHGA.roa
Signing time: Sun 01 Jan 2023 12:44:59 +0000
ROA not before: Sun 01 Jan 2023 12:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208789
IP address blocks: 45.85.52.0/22 maxlen: 24
2a0e:b880::/29 maxlen: 31
Validation: Failed, certificate revoked on Tue 28 Feb 2023 11:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:25:b3:71:e3:ca:6f:f7:6b:78:06:7e:cc:72:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Validity
Not Before: Jan 1 12:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57878dcb6ee7f1c27a0ef2b7188d8e4862421c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:05:53:7a:bf:d1:8f:cd:dd:35:6a:1d:55:
0f:1e:cc:72:8c:45:c7:30:dd:2a:80:c5:0b:c8:0b:
da:a9:a9:74:91:9b:08:03:70:49:da:d6:00:a3:e2:
bd:f2:25:e3:3e:46:c5:0d:72:73:a8:2e:1d:19:50:
5b:37:dc:99:23:4d:70:86:08:2d:a1:f5:03:01:1a:
30:9f:2e:a9:0c:26:30:21:bc:c1:ef:b3:bf:0a:8d:
22:0c:08:b9:a6:49:53:8c:f3:b7:71:61:a0:d7:98:
ae:26:59:0d:bc:3d:ce:f9:53:ac:01:e2:d1:0c:77:
ad:f8:c0:52:4a:56:ff:2e:29:98:7d:a9:1e:82:7b:
f1:73:b4:5c:5c:eb:98:3a:44:84:ec:1c:d6:a9:0a:
99:bc:15:03:f6:5e:ef:44:ff:9f:e5:ee:47:6c:9d:
d3:7b:f7:8c:88:72:69:af:b4:d1:a2:b7:b3:1f:3e:
71:46:b5:3e:a3:48:8e:9a:e1:3b:d5:6e:34:0f:3a:
50:7d:82:85:16:d4:d9:eb:54:63:56:8c:97:64:4a:
ee:42:84:95:81:aa:76:6e:6d:31:89:da:d7:ec:a1:
b4:01:e5:9c:0b:87:4d:31:78:64:9d:43:34:9d:7c:
a4:47:8d:ca:25:19:ea:6b:cc:13:7f:5b:b1:6e:68:
f9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:87:8D:CB:6E:E7:F1:C2:7A:0E:F2:B7:18:8D:8E:48:62:42:1C:60
X509v3 Authority Key Identifier:
keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/V4eNy27n8cJ6DvK3GI2OSGJCHGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.52.0/22
IPv6:
2a0e:b880::/29
Signature Algorithm: sha256WithRSAEncryption
01:81:29:1d:4b:b8:8d:19:63:20:90:bc:b7:37:56:d5:93:5c:
83:cb:54:c7:b4:3a:d5:4e:9d:03:2a:e9:fc:f7:b4:25:bf:41:
79:46:d9:69:b4:7b:25:48:d4:ec:36:a0:eb:51:54:b9:02:cb:
66:eb:ff:97:3a:09:b9:c7:d2:13:d8:0c:ad:9b:ef:5c:fe:7f:
4d:84:08:0e:cd:50:9d:ea:1f:0a:18:b2:cf:fc:89:e0:b0:c0:
56:56:1b:27:5a:8e:16:5f:69:c6:3b:c2:d8:67:37:b3:3b:82:
60:41:97:20:83:37:c3:b9:21:b8:c3:e8:2f:18:46:61:b5:21:
da:29:fb:5b:4d:57:93:4a:3d:6c:5a:6f:37:a1:be:e2:17:50:
18:e6:fe:60:7f:57:08:e7:d2:f5:6d:15:bf:ba:08:fa:5d:3b:
b7:fd:d9:7a:da:5e:b9:48:6b:24:0a:39:7f:9b:ae:ee:90:52:
86:14:39:c4:14:d8:51:49:75:39:27:88:fc:30:c6:c1:44:13:
e0:92:78:84:a2:56:1c:4e:a1:33:31:2c:66:d9:09:db:6f:0a:
ab:2d:c1:86:f0:25:2e:75:6e:2b:7e:c7:a4:71:c8:77:1c:35:
89:2a:e0:23:81:fd:3e:8c:f8:c0:35:48:64:a3:3a:0a:b0:e9:
82:bd:c7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:23 2024 by rpki-client on console-ams.rpki-client.org