Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/J-fLbfFN-e-MI53v88a93M7GrQI.roa
File: J-fLbfFN-e-MI53v88a93M7GrQI.roa (raw, json)
Hash identifier: /jJw05o+z4EGTTKCTFar2/+Fy/qqFo8rHBy9Kk+AO/s=
Subject key identifier: 27:E7:CB:6D:F1:4D:F9:EF:8C:23:9D:EF:F3:C6:BD:DC:CE:C6:AD:02
Certificate issuer: /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial: 0186CA7DE486112630D7F6C174B2EC7CDAA8
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/J-fLbfFN-e-MI53v88a93M7GrQI.roa
Signing time: Fri 10 Mar 2023 07:48:13 +0000
ROA not before: Fri 10 Mar 2023 07:48:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47450
IP address blocks: 147.78.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:7d:e4:86:11:26:30:d7:f6:c1:74:b2:ec:7c:da:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Validity
Not Before: Mar 10 07:48:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27e7cb6df14df9ef8c239deff3c6bddccec6ad02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:23:61:ae:03:ab:71:af:d0:96:18:a3:90:
5b:5c:72:72:41:da:c8:49:eb:eb:06:f2:e5:c3:26:
17:c9:76:c5:0a:4f:8c:e2:10:18:2c:50:8b:95:04:
96:2c:0c:91:39:87:cd:d9:3f:d7:21:c2:79:7b:04:
3c:ad:46:31:e5:5a:fb:06:b8:62:7e:39:72:59:ec:
69:63:4f:81:36:b7:ab:45:0c:f8:e6:a4:a4:57:ec:
57:4c:22:c5:8f:ab:a7:99:d8:8d:81:b7:5c:7b:75:
e9:db:5e:c5:11:5e:f7:61:48:38:76:91:ec:4f:56:
30:7e:df:0a:20:0b:c7:5e:23:b2:64:e0:5e:98:58:
1f:14:48:4d:4f:08:05:4b:c1:ec:7b:c2:71:f2:1c:
f8:01:aa:0b:3e:bd:35:4c:9d:12:4f:00:59:6b:2e:
12:12:31:28:91:75:21:6c:77:3d:bb:4a:db:6e:8b:
6c:57:f8:7b:12:e7:94:01:62:d4:51:9d:e1:0a:28:
b4:b0:95:95:24:51:2e:9f:04:2d:61:2c:b7:55:00:
53:d6:f2:5d:f1:36:ca:1b:4e:03:41:10:0a:2c:44:
3a:b5:fd:94:02:33:cd:d3:21:80:d8:0c:5e:2d:71:
55:2b:1a:86:59:07:17:5c:1b:61:1f:e9:0e:5b:d2:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E7:CB:6D:F1:4D:F9:EF:8C:23:9D:EF:F3:C6:BD:DC:CE:C6:AD:02
X509v3 Authority Key Identifier:
keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/J-fLbfFN-e-MI53v88a93M7GrQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.6.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:2d:a2:7c:51:96:b7:9d:d7:ef:a8:bd:55:17:f4:61:84:a6:
25:16:9c:71:2c:11:86:ad:88:48:1d:08:9e:dc:d3:d2:6c:17:
78:89:75:f9:55:a1:cb:b6:bc:8e:a8:1e:12:3c:e9:71:51:6c:
dc:57:32:30:ed:9d:ee:ad:94:2d:48:4c:f5:3e:d0:ee:a5:b5:
b1:0b:7a:fb:17:86:79:5e:6f:56:f3:90:e4:82:2c:3d:d5:50:
b4:15:ed:a2:77:0f:52:d1:ac:13:af:e4:9d:63:3c:29:c3:32:
f3:75:5b:5e:f8:e3:dc:4e:2b:47:43:32:64:cc:fa:5c:73:a6:
96:58:79:a9:76:52:d6:af:e2:11:1c:31:08:7b:58:84:71:17:
8c:a8:e8:e5:48:e9:ca:d0:4f:b3:88:28:8a:41:ae:5d:a6:1b:
ee:15:a2:41:3a:21:63:74:c0:9b:69:d5:fc:8f:df:c2:60:72:
da:68:4e:c4:05:2c:72:fd:0d:4f:1c:a3:ce:58:4f:85:3f:7e:
e1:67:44:2b:34:13:2c:de:d1:57:44:e9:ad:a6:5c:22:d0:bb:
25:2b:01:1f:26:d7:ad:55:91:76:81:b4:56:bb:b1:fb:b4:3e:
c9:44:85:23:3d:6d:bc:14:6b:53:2c:3a:3a:0f:97:0e:be:0a:
40:5d:09:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:25 2024 by rpki-client on console-ams.rpki-client.org