Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/4Q4iImbIrSdwG9-KzCTOm_Ddkso.roa
File: 4Q4iImbIrSdwG9-KzCTOm_Ddkso.roa (raw, json)
Hash identifier: bQ8fvEUiHswQenlw8xFGqhv0OD1LaCrh7DrN8JCmXs8=
Subject key identifier: E1:0E:22:22:66:C8:AD:27:70:1B:DF:8A:CC:24:CE:9B:F0:DD:92:CA
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018571956722C9E745D6D7F5EEB632B4B25A
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/4Q4iImbIrSdwG9-KzCTOm_Ddkso.roa
Signing time: Mon 02 Jan 2023 08:24:54 +0000
ROA not before: Mon 02 Jan 2023 08:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3918
IP address blocks: 145.30.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:67:22:c9:e7:45:d6:d7:f5:ee:b6:32:b4:b2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 08:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e10e222266c8ad27701bdf8acc24ce9bf0dd92ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:42:9f:06:58:53:42:c0:17:d3:10:3a:c9:a0:
ba:29:a8:a1:bc:eb:10:68:01:c9:f5:72:01:d8:34:
45:7b:75:68:01:03:b0:8d:ae:fc:54:f0:db:87:dc:
a5:14:4a:61:36:b1:21:93:e6:57:09:7a:e3:aa:f1:
8f:47:15:01:54:90:75:68:2d:4f:35:3d:96:9f:ed:
8b:5d:7e:5d:5d:53:95:5b:69:32:fe:70:ea:40:ad:
f6:7e:ab:1e:c3:7b:62:0a:f6:5c:ea:6a:58:ed:1f:
bf:9c:2e:74:45:97:a5:70:39:6a:fd:7a:90:0e:f5:
d5:ce:95:63:1c:62:70:6a:00:fd:e7:84:8b:a7:7a:
c7:25:40:93:2e:9b:4f:00:77:8d:af:17:55:49:88:
35:3a:61:d0:02:71:bb:b8:29:ec:24:a7:6d:c7:f4:
8d:3c:6d:ea:22:3f:c2:fd:00:0a:72:bd:dc:bf:c8:
04:dd:68:7d:c1:ce:25:bd:9b:92:e8:4b:c4:1a:9f:
81:05:9b:e4:3f:96:63:01:5c:34:16:dd:a2:0e:23:
1d:5e:53:21:ed:00:01:dd:c0:17:36:c4:82:a7:4b:
e2:ae:c5:26:cf:01:63:00:b1:08:62:89:9a:d1:55:
99:44:e7:ec:c2:06:12:e5:4e:48:78:d4:39:87:20:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0E:22:22:66:C8:AD:27:70:1B:DF:8A:CC:24:CE:9B:F0:DD:92:CA
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/4Q4iImbIrSdwG9-KzCTOm_Ddkso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.30.227.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4b:ee:dd:13:c2:cd:c2:fb:b8:db:bd:f9:35:81:25:5f:81:
85:3a:a8:71:4b:2e:63:6b:3a:56:c0:4c:83:bc:16:ff:da:df:
f2:8f:ae:af:aa:2e:68:05:be:37:82:10:96:2f:af:99:fd:a8:
b9:98:72:f2:8d:8f:36:04:84:1d:07:4f:6f:02:ab:1c:84:0b:
41:0d:0c:0b:2c:de:fa:5f:9b:cb:bd:fe:30:d9:48:b6:87:8f:
b6:97:48:c9:df:f0:82:bb:7e:ed:e8:59:90:34:5b:10:5c:1d:
25:e7:a8:b1:8d:0b:d6:0d:db:27:9f:38:1c:b9:aa:c1:db:45:
2d:9d:0f:f4:bf:99:2f:b9:c1:10:1c:f5:fa:5d:c4:19:31:7e:
4a:fe:24:a0:fd:de:45:3f:95:f8:21:d7:6e:f8:d8:49:7e:64:
fe:ab:e7:0d:10:ba:d7:a1:ba:b1:7f:e9:e7:59:42:97:9e:66:
f1:67:37:65:7b:b6:f4:b1:27:a6:35:51:e2:67:82:2e:e8:89:
1a:36:b8:a2:bc:06:e7:a9:fa:5a:7f:44:a2:83:9a:b5:4a:3f:
cb:fb:15:2e:ec:51:03:62:39:34:b3:26:0b:f0:3a:3d:74:02:
6c:0c:35:f4:e8:67:b1:21:4b:c9:df:2b:7c:97:b0:d0:4c:5f:
3f:d5:d3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org