Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DpzutHYd7nnbCGVWHrXWiTSULUU.roa
File: DpzutHYd7nnbCGVWHrXWiTSULUU.roa (raw, json)
Hash identifier: TUSUBodLIuWymlL/WmWzAgC3YCkknA/M2DR98ZjZDvw=
Subject key identifier: 0E:9C:EE:B4:76:1D:EE:79:DB:08:65:56:1E:B5:D6:89:34:94:2D:45
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095199874D7CFE999E2BC96C4C58869
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DpzutHYd7nnbCGVWHrXWiTSULUU.roa
Signing time: Mon 02 Jan 2023 03:44:57 +0000
ROA not before: Mon 02 Jan 2023 03:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41409
IP address blocks: 146.120.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:19:98:74:d7:cf:e9:99:e2:bc:96:c4:c5:88:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e9ceeb4761dee79db0865561eb5d68934942d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:ab:9d:62:dd:ed:cc:37:ad:90:7f:c5:4c:
65:10:5b:41:8f:2e:3d:9f:4f:b2:24:23:a2:14:1f:
3c:b9:80:68:2c:87:6f:09:14:d0:29:b0:7b:3f:23:
f2:3f:1c:42:f7:49:32:80:82:41:8f:66:4e:0d:1a:
f7:9b:64:2f:6a:6c:10:e2:39:7d:56:3d:e9:5b:03:
c5:03:8a:5f:8e:47:8a:10:a5:b9:4b:f6:f0:97:1c:
84:e8:99:c1:8f:2f:b2:19:9a:5c:28:5e:0e:bb:ef:
72:10:01:b8:ce:a0:37:53:91:3f:bf:b0:0b:7c:b7:
41:e8:7e:ab:7a:ce:05:9e:cb:4d:c1:e4:d7:ff:9f:
3f:f0:0f:14:e6:10:ba:63:45:19:f9:2a:68:1f:c1:
dd:e1:c9:89:00:28:01:fa:27:a2:bf:8d:3f:2a:1b:
87:05:1a:e5:02:9f:d8:f4:e7:ef:53:e8:06:50:65:
ef:27:3b:da:8c:93:ec:2c:b2:38:84:0c:66:86:a9:
c3:40:56:c6:73:da:87:54:15:59:d9:58:95:b0:a7:
22:9e:e5:f3:90:22:1e:9b:b3:e0:b3:4c:55:43:57:
ad:64:31:eb:28:ea:3c:61:20:5b:d5:0c:33:f7:94:
3d:c1:1e:b9:4a:fe:40:94:cf:74:c7:8c:9f:f2:fb:
2e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9C:EE:B4:76:1D:EE:79:DB:08:65:56:1E:B5:D6:89:34:94:2D:45
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DpzutHYd7nnbCGVWHrXWiTSULUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.245.0/24
Signature Algorithm: sha256WithRSAEncryption
36:02:87:87:6e:80:cc:5c:bb:c1:bd:a0:ef:78:44:36:46:b1:
07:27:c2:20:38:8f:ee:0b:31:b9:fe:20:39:c7:20:79:e8:c2:
fc:f8:95:28:d9:12:30:3d:14:15:86:df:16:8b:64:6c:37:0e:
7d:0b:bf:b7:47:98:0c:a3:df:a0:8f:1b:79:f8:8d:7b:96:9e:
99:c9:df:14:c0:30:c6:d6:c8:41:0a:7a:7c:bd:76:3d:cc:cc:
0f:7d:7e:06:c6:ce:75:8f:53:9f:a4:ad:1b:02:5d:41:b5:22:
46:9b:26:b1:c8:b6:64:b4:91:6e:55:7f:92:3c:55:4d:3b:a7:
0e:74:e0:40:c3:f2:11:de:7c:a3:0b:07:99:29:62:0a:be:b8:
5c:e8:b3:f2:37:cd:74:cb:10:9b:6e:08:e7:60:fd:55:37:c1:
be:e8:fc:45:73:d9:1f:06:f4:92:a8:88:53:25:a1:60:eb:68:
95:a7:15:de:7f:01:79:6b:ee:35:37:0f:f9:96:9e:71:91:7f:
5f:ab:41:b0:41:b6:4c:74:50:8f:51:5d:53:88:5d:56:c4:59:
a8:a5:21:75:44:21:f0:b5:9b:a3:84:63:bb:63:95:9c:52:66:
6c:56:80:ec:f1:02:3f:6d:ab:09:35:a9:3b:b4:13:43:48:f2:
9d:6a:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:49 2024 by rpki-client on console-ams.rpki-client.org