Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/tHVeFkMknLkVudug7zZIFHsp_Qs.roa
File: tHVeFkMknLkVudug7zZIFHsp_Qs.roa (raw, json)
Hash identifier: EkrHJ33dT2ndc6ENBZFH1a4WyMQ7l4b0VGnyTezuR0Q=
Subject key identifier: B4:75:5E:16:43:24:9C:B9:15:B9:DB:A0:EF:36:48:14:7B:29:FD:0B
Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial: 01856D5D25310914189160BC0144AAD06E82
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/tHVeFkMknLkVudug7zZIFHsp_Qs.roa
Signing time: Sun 01 Jan 2023 12:44:58 +0000
ROA not before: Sun 01 Jan 2023 12:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2263
IP address blocks: 192.108.119.0/24 maxlen: 24
192.44.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:25:31:09:14:18:91:60:bc:01:44:aa:d0:6e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Validity
Not Before: Jan 1 12:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4755e1643249cb915b9dba0ef3648147b29fd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:d9:fa:7d:4e:e9:f9:20:16:b8:34:cb:8d:
27:43:3e:3e:83:c1:37:9d:02:8a:26:c8:7c:8e:9d:
d1:7e:29:ed:ae:d3:0d:00:35:ae:ab:35:2a:e5:ae:
5d:fb:be:ec:2a:00:8d:6a:b1:f1:3a:b9:91:5a:ac:
60:1f:37:08:8e:d9:46:3d:be:2a:37:57:ac:6c:20:
b8:9e:0b:a4:aa:17:89:ad:ea:2a:a3:b4:cb:c5:b3:
41:d9:af:80:50:fb:b4:b6:2e:18:8d:b1:b3:68:58:
52:cc:58:b4:11:f3:99:0a:77:b1:4a:e4:57:26:7d:
ad:32:89:5f:04:bd:a7:03:3a:7a:d9:da:d8:cf:78:
89:a1:41:b3:e6:0a:91:92:75:5d:42:bc:82:c3:a3:
ba:16:cb:a6:a8:16:99:b1:53:86:a5:00:e1:59:39:
26:f0:71:fb:10:22:49:77:f3:4a:f3:26:f5:fb:20:
3a:6a:1b:60:eb:43:9f:fa:81:c0:f0:03:c7:22:c0:
31:71:6d:ab:25:da:23:a6:d4:45:5e:a7:88:79:e2:
0f:e4:2e:ef:30:ea:98:86:13:01:bc:41:25:83:e7:
19:74:9f:d7:81:af:21:5b:17:5e:a4:ea:6d:ff:82:
6c:67:42:90:4c:a6:ef:96:81:f5:a4:46:d2:54:7f:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:75:5E:16:43:24:9C:B9:15:B9:DB:A0:EF:36:48:14:7B:29:FD:0B
X509v3 Authority Key Identifier:
keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/tHVeFkMknLkVudug7zZIFHsp_Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.44.77.0/24
192.108.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:3c:ac:35:3c:08:4f:51:3d:38:2e:f9:12:80:90:63:82:1d:
48:26:5e:9b:5e:64:3e:01:ea:b1:4a:05:8b:e2:82:00:35:50:
9a:ce:67:ff:39:55:ec:25:53:8c:5b:53:8e:32:c8:b3:cf:ac:
97:c4:12:84:e7:61:17:7c:2b:dd:cc:e6:c2:df:10:a1:47:cf:
6e:2c:ae:34:63:77:0a:e6:39:5c:aa:94:4a:32:17:d9:e8:56:
37:fa:e6:96:e3:91:bf:ce:dc:b7:ca:d4:d8:11:d6:75:90:4a:
17:27:8d:4f:48:3a:46:26:a8:4b:37:15:c9:65:4b:91:60:e1:
9a:f9:49:87:ba:0f:b2:c2:37:d5:c4:0d:e6:6d:4b:63:04:0f:
3a:5b:41:35:5b:58:4f:5a:12:84:45:1d:88:02:44:b5:3e:6d:
a9:79:83:b2:de:80:0c:40:4a:94:92:26:46:44:97:2b:90:45:
b8:f8:20:c7:fa:eb:96:11:fb:fe:b5:93:c9:eb:ba:86:84:42:
0b:7a:86:7e:5a:9e:6c:52:85:85:82:c2:2a:ff:64:cd:11:7c:
5e:05:8f:ef:47:00:12:0a:b2:20:85:a2:49:79:1a:49:26:c8:
93:09:f9:a6:f8:3c:4d:98:59:a4:31:aa:d0:66:1e:0e:98:a6:
9d:9a:37:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:27 2024 by rpki-client on console-ams.rpki-client.org