Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-totCK7nWsOqznJjANOr3DKUpE4.roa
File: 1-totCK7nWsOqznJjANOr3DKUpE4.roa (raw, json)
Hash identifier: nQ/onOWUJj50KYm6VV2Xhj6GCAQ1WuOcIqwIhNACMiU=
Subject key identifier: FA:DA:2D:08:AE:E7:5A:C3:AA:CE:72:63:00:D3:AB:DC:32:94:A4:4E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095246DD3AA61C0B0AC25DCFC56DF45
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-totCK7nWsOqznJjANOr3DKUpE4.roa
Signing time: Mon 02 Jan 2023 03:45:00 +0000
ROA not before: Mon 02 Jan 2023 03:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43234
IP address blocks: 146.120.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:24:6d:d3:aa:61:c0:b0:ac:25:dc:fc:56:df:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fada2d08aee75ac3aace726300d3abdc3294a44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:23:62:b6:44:0f:b3:c4:82:d2:01:f6:62:
f1:e6:bf:53:83:df:85:fe:10:99:0a:f4:47:7d:ae:
eb:85:c4:53:0d:0d:58:b0:a5:bf:1f:07:9b:83:cd:
95:09:01:a5:6f:22:c9:80:87:e3:4c:32:20:75:76:
75:d5:47:58:6e:b2:84:7f:bb:c7:de:46:39:67:1f:
98:b9:12:c9:d0:cd:61:c7:6d:9f:58:db:aa:a9:67:
4f:d0:26:32:39:ec:31:66:1f:73:59:97:98:54:3f:
e6:e8:f0:f3:48:9c:fb:eb:cb:c9:14:11:64:49:d5:
85:57:23:92:73:f5:bf:0d:5f:e8:e4:bd:6a:30:04:
3f:16:a1:ea:2d:55:fc:ef:b5:55:7f:0c:6e:85:c9:
0a:97:14:94:a9:49:4c:e8:1f:3f:51:9d:d9:ad:23:
e2:17:f9:10:f6:33:97:8a:93:99:02:f4:93:f3:9d:
de:d4:9d:74:5d:0e:a2:2a:a9:d7:42:50:71:8b:a2:
b5:36:36:f7:ba:91:80:ea:55:67:75:ee:96:4a:59:
76:9f:45:42:17:f3:6f:2d:3c:c2:05:ea:cc:72:b1:
70:55:81:5b:83:b3:2c:06:ba:de:ca:39:cc:a8:85:
c7:a7:23:ef:67:00:07:e7:42:44:2d:aa:52:44:86:
d5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DA:2D:08:AE:E7:5A:C3:AA:CE:72:63:00:D3:AB:DC:32:94:A4:4E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-totCK7nWsOqznJjANOr3DKUpE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.113.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e5:bd:b1:66:ee:34:37:95:0a:ad:d0:15:ef:04:d9:75:e0:
55:f9:7b:45:d4:78:ba:ac:86:1e:9a:5c:36:43:bf:cf:08:a3:
26:65:fb:7e:bc:61:58:22:d4:50:24:bb:3f:4e:51:9a:5a:7b:
1b:d3:e2:93:7d:e0:84:9d:b9:61:d3:c9:22:c1:0a:92:97:c7:
6a:3d:1f:db:4c:85:97:0d:ac:9c:31:41:3c:cb:39:47:0f:13:
98:f9:ee:4d:45:59:2c:d0:0a:5b:3c:a8:88:2f:50:78:82:8a:
16:a7:91:5d:c7:80:b3:2f:1d:bb:17:92:09:48:89:53:30:a7:
ad:6e:79:54:d9:87:c2:05:c2:1e:c4:f9:6c:b7:37:35:2d:d7:
a4:82:6d:12:b6:c2:f2:2a:21:70:48:05:f6:6a:89:0f:44:78:
b1:7c:85:f4:82:fc:50:be:e3:3a:fd:83:9d:a2:e8:df:c3:4f:
95:cd:a2:73:06:98:53:d5:2b:df:1b:3f:bb:e9:09:18:cc:6c:
f9:22:96:c6:1e:a8:1f:b0:e8:ff:bc:fe:96:33:8d:7c:a2:c6:
78:aa:aa:62:08:23:c0:d5:37:dc:9a:47:ea:89:cc:04:61:26:
30:e7:4f:95:12:59:16:ae:14:62:5d:52:6c:ee:e3:14:a4:e5:
c4:0a:d2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org