Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/1H231d1KSRbmAEv5Xa5DLzmRbIg.roa
File: 1H231d1KSRbmAEv5Xa5DLzmRbIg.roa (raw, json)
Hash identifier: Y2R0veTjIhtP9hXaU4TlVkSnmn62kmvOGaSGltm63pQ=
Subject key identifier: D4:7D:B7:D5:DD:4A:49:16:E6:00:4B:F9:5D:AE:43:2F:39:91:6C:88
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018571956B2055D57FEDFA70D4E869C10663
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/1H231d1KSRbmAEv5Xa5DLzmRbIg.roa
Signing time: Mon 02 Jan 2023 08:24:55 +0000
ROA not before: Mon 02 Jan 2023 08:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25182
IP address blocks: 145.58.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:6b:20:55:d5:7f:ed:fa:70:d4:e8:69:c1:06:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 08:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d47db7d5dd4a4916e6004bf95dae432f39916c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:17:3f:15:a7:e7:83:85:31:54:e6:02:b2:
2d:0a:01:ac:95:59:fb:8e:2e:7c:b7:1b:66:3b:74:
c9:3c:05:43:b7:32:9d:17:ac:9c:29:4c:06:a4:e4:
f8:f7:00:05:cf:c2:0f:ec:93:e3:a5:ff:ca:bd:f1:
7c:03:34:71:53:22:cb:8d:36:c8:47:31:12:37:e6:
02:99:f6:35:8d:2b:c1:02:67:cf:56:e7:4a:f8:4c:
54:7f:da:44:96:79:cb:b6:a3:d8:0b:63:d7:d3:f5:
51:c1:67:36:ac:1a:c8:f5:2d:b4:94:66:41:37:b8:
41:55:02:f2:80:7a:31:40:88:38:ab:94:e2:b0:e1:
09:9c:ec:37:48:01:89:aa:c4:99:a8:7e:ed:69:c4:
ac:ff:d1:bb:d0:e7:19:95:51:59:b7:3b:eb:1b:ae:
40:66:4f:88:54:2e:2f:ab:16:b2:b7:53:0a:fa:18:
d1:61:31:5c:25:5c:bd:c0:af:99:e2:97:5d:ec:88:
7c:70:10:d1:00:d6:0a:af:cc:1d:71:99:ae:55:1e:
0b:6a:66:b4:fa:aa:9a:46:b0:0f:22:8a:0a:9c:42:
c5:eb:8d:49:3c:dc:b8:f7:2c:3e:a0:db:33:af:bf:
85:8a:57:2a:cc:21:ac:f5:8c:98:f8:04:0e:4d:31:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7D:B7:D5:DD:4A:49:16:E6:00:4B:F9:5D:AE:43:2F:39:91:6C:88
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/1H231d1KSRbmAEv5Xa5DLzmRbIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.58.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:cd:d9:89:60:e5:80:bc:71:3a:fa:90:df:b4:67:45:b8:1f:
d8:eb:cb:62:25:7a:26:17:20:a9:e7:df:79:8f:f1:af:dc:92:
79:19:39:cf:81:1e:44:07:4d:0b:22:c0:1a:fc:37:69:b6:0c:
5e:44:6c:77:b0:7a:ea:12:30:b0:26:56:bb:e1:b6:86:5d:03:
55:67:36:02:a2:93:03:08:bf:1c:8e:d2:3d:f9:e5:6c:b2:45:
94:01:92:55:33:02:f2:b9:f9:5a:07:48:9e:31:ce:29:c9:05:
79:4a:40:e2:a8:31:c0:bf:82:fc:09:ab:a2:67:3d:0b:6a:07:
55:34:84:fe:37:6f:f9:d9:c7:70:a5:2e:87:51:0c:69:47:86:
1c:68:ed:c6:e8:26:de:47:72:97:b6:a7:5b:46:d4:03:53:3c:
f9:aa:5b:c3:f1:74:ae:53:e3:2b:af:4f:6f:e1:51:8f:16:b9:
a2:56:62:c5:87:5f:6c:ba:49:dc:6e:a3:fb:97:97:12:1b:1a:
70:97:73:ba:16:4c:f8:f5:e1:90:2d:0d:6e:6c:12:72:a5:6e:
6d:2c:b9:ef:62:5c:24:da:3c:d9:12:b9:93:83:e4:ec:5a:78:
75:b3:ff:c8:56:2f:76:f9:ed:c9:0b:4c:45:6f:db:e4:bc:2e:
74:4b:d1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:21 2024 by rpki-client on console-ams.rpki-client.org