Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0T81KgNJM1kPnIAOjJUkqFNMy5E.roa
File: 0T81KgNJM1kPnIAOjJUkqFNMy5E.roa (raw, json)
Hash identifier: v2rbNZEsP8X52wEBXzlfG+h68npULNO0qQUYToYkSHQ=
Subject key identifier: D1:3F:35:2A:03:49:33:59:0F:9C:80:0E:8C:95:24:A8:53:4C:CB:91
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D5A6BF03F192F933B11BFE9A043167746
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0T81KgNJM1kPnIAOjJUkqFNMy5E.roa
Signing time: Tue 30 Jan 2024 12:50:39 +0000
ROA not before: Tue 30 Jan 2024 12:50:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215666
IP address blocks: 2.57.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Apr 2024 06:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:6b:f0:3f:19:2f:93:3b:11:bf:e9:a0:43:16:77:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 30 12:50:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d13f352a034933590f9c800e8c9524a8534ccb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:62:2f:25:36:ee:86:11:49:94:2f:a0:66:97:
df:72:de:d6:b1:f9:b8:a5:1a:a7:90:74:b5:3a:54:
33:d0:59:27:fa:e0:55:fb:53:b4:e8:bd:5c:b9:b4:
a4:8b:1f:3d:09:f8:34:8a:d4:47:ad:43:26:47:92:
e8:e4:03:6e:28:f1:42:62:5d:fe:85:13:76:6b:4d:
a7:da:b2:06:a2:5a:a2:14:d4:c8:f0:4d:6e:35:9c:
9a:44:00:25:55:c1:c4:94:43:ac:32:02:3c:aa:f6:
c3:97:c7:78:0b:12:72:9a:9c:ed:20:fa:d1:d1:4a:
0b:d6:09:b1:58:a0:7f:ab:4b:58:0c:59:6c:fa:1a:
bb:46:c5:d0:c9:ff:11:90:2c:ab:22:92:a6:1a:df:
0f:a3:5b:be:32:b3:32:77:df:c6:c3:44:f9:72:c8:
a1:32:40:95:2e:8e:a1:6b:b7:13:32:31:ee:1d:32:
d9:b4:3c:c2:0a:1b:c9:73:7c:b4:79:e4:e4:b1:34:
42:ee:4b:95:d7:64:a5:54:f9:d5:95:b8:e6:5a:6c:
f1:1f:14:bc:5d:30:7f:67:de:e9:f0:50:cd:3a:38:
3b:0d:82:ef:7d:40:1c:07:6c:94:cb:fd:3c:7d:59:
91:b9:f2:4b:8b:9d:a1:22:d7:90:8c:04:9e:d5:f8:
24:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3F:35:2A:03:49:33:59:0F:9C:80:0E:8C:95:24:A8:53:4C:CB:91
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0T81KgNJM1kPnIAOjJUkqFNMy5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a9:5c:61:44:9d:41:d3:b2:1f:e1:e5:2f:af:6e:0d:c8:9b:
2e:33:21:21:a8:60:e1:d9:ad:8a:d3:31:a7:32:61:c1:c8:9d:
c7:1c:96:be:d1:45:c4:96:f0:8f:24:cf:fb:4b:bd:33:5f:3f:
3b:ed:45:cf:aa:6b:76:cd:63:b0:b6:02:13:37:36:e8:a5:46:
54:78:77:c8:59:e0:b8:0c:f9:94:03:00:fb:8d:2d:a5:cb:e7:
b1:19:5d:da:62:85:49:69:02:08:72:f0:f6:da:4b:d7:2d:bb:
84:2d:c5:48:63:88:da:26:64:8f:0a:91:37:f2:c3:c7:94:3a:
74:43:8f:26:e7:44:38:7d:2a:3e:15:ad:96:0f:4e:0c:e1:39:
10:9a:2a:96:35:84:06:5b:09:eb:34:b1:36:7a:f3:3f:87:fe:
f8:6c:5f:61:cb:c1:5f:25:60:6e:a4:36:3c:d6:49:4a:10:df:
65:d0:80:95:27:49:a9:da:f2:93:40:c8:48:77:17:af:4d:14:
b8:5c:d1:22:1d:cf:61:77:39:a1:dd:f0:56:6c:4a:18:f5:ad:
43:e0:6d:08:56:e1:7b:25:4e:3c:8e:4f:da:ed:bb:cc:ea:08:
9f:61:92:78:85:53:34:f9:4d:6c:98:cc:38:89:b1:1e:19:bd:
5e:8c:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:11 2024 by rpki-client on console-ams.rpki-client.org