Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/1SjOOtmECnehMCx2d5-K8pXxQUU.roa
File: 1SjOOtmECnehMCx2d5-K8pXxQUU.roa (raw, json)
Hash identifier: WNauhHf3riec9BkJSEp1Tr+8693Xe9SuLMtY/hUeSww=
Subject key identifier: D5:28:CE:3A:D9:84:0A:77:A1:30:2C:76:77:9F:8A:F2:95:F1:41:45
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018571956C0F3571B356048B1F5E5F7E69C9
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/1SjOOtmECnehMCx2d5-K8pXxQUU.roa
Signing time: Mon 02 Jan 2023 08:24:55 +0000
ROA not before: Mon 02 Jan 2023 08:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42517
IP address blocks: 145.35.174.0/24 maxlen: 24
145.35.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:6c:0f:35:71:b3:56:04:8b:1f:5e:5f:7e:69:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 08:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d528ce3ad9840a77a1302c76779f8af295f14145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1f:2e:61:d5:f1:7c:93:d3:3e:d2:e9:0e:73:
2f:ba:24:41:21:e1:d8:2b:b7:63:69:01:a6:a0:d9:
ba:47:be:e6:75:83:c7:c5:b9:2c:84:1d:5c:9c:44:
29:12:94:21:13:17:c2:92:e8:52:17:20:c3:d1:f6:
95:86:ba:36:42:d7:91:88:d1:5c:ce:00:00:81:1b:
c5:1a:a9:ca:a0:b3:a2:0a:66:88:22:19:fb:23:a6:
4a:53:0b:ee:ec:f1:5f:85:3b:60:3b:a5:a8:09:39:
1a:96:ba:4d:e9:15:00:62:cf:48:3d:92:9c:b1:63:
5a:30:53:3c:1c:1a:c2:46:75:9a:2f:7d:b9:9c:0c:
41:47:8a:02:a8:80:db:a4:91:ab:ea:ca:77:53:79:
b1:0d:7b:86:2f:0f:be:ab:6d:39:08:65:2d:02:32:
02:06:b7:14:09:7e:0a:b6:c8:72:16:95:db:18:ed:
ea:ef:35:44:33:1f:b8:61:1d:57:cc:e5:27:6d:fb:
07:2b:ca:13:13:29:3c:48:c3:52:d4:1f:ce:bf:ab:
e6:f4:65:57:c1:ba:f7:1c:0c:7b:d9:ca:15:b1:50:
1b:e7:71:c1:d8:19:53:8e:23:a8:fa:6c:8e:a2:51:
5b:85:42:17:71:91:ea:bf:2c:8f:1c:b2:da:5a:91:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:28:CE:3A:D9:84:0A:77:A1:30:2C:76:77:9F:8A:F2:95:F1:41:45
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/1SjOOtmECnehMCx2d5-K8pXxQUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:5a:b6:78:f2:7f:64:20:42:b2:b1:06:cc:1f:f9:13:46:4d:
37:15:33:af:b4:70:f0:28:0f:52:ea:82:2e:1d:a1:97:5a:26:
d6:6b:75:da:1b:a1:cd:4e:03:96:93:b0:35:c7:af:e5:ee:4b:
7c:2f:cf:cd:e9:59:5a:f4:38:d6:d7:7e:df:03:78:21:c6:46:
9e:3d:cb:ac:30:9e:16:08:d5:34:f5:55:cb:14:99:fd:ee:2f:
b6:ef:45:78:7f:ff:34:27:13:b1:68:85:0a:53:c0:a3:4e:e0:
9a:c7:4a:62:2e:64:c6:45:e7:ce:7f:1d:f1:e9:5d:1f:78:40:
f6:a3:65:a4:8f:d3:82:bf:71:87:5c:98:47:99:32:2f:06:70:
93:c4:be:c2:01:d8:bc:fc:7c:bc:b8:87:db:27:91:27:1e:74:
2a:3d:f9:bd:63:bf:ed:a0:9a:c4:b4:4e:74:ab:3a:b3:17:54:
57:23:d3:16:21:c6:8f:fd:71:bf:6f:6e:fa:9a:39:eb:f0:d6:
82:e4:23:43:6e:66:b5:a1:21:85:aa:9f:81:01:b1:1a:aa:7e:
0c:5e:dc:bc:9b:29:db:a0:4b:12:b0:48:9b:bf:31:c4:16:d2:
ee:73:db:9a:67:2b:ea:d2:27:cc:d7:7b:80:03:70:3f:a3:80:
41:46:ac:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org