Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/CH9CrdkTDQmNBw4vkLy9IwAnNHw.roa
File: CH9CrdkTDQmNBw4vkLy9IwAnNHw.roa (raw, json)
Hash identifier: JJ6OplXXIB8Ln8+88m8xp7VeWdqtm5dsorkayOXF4Yo=
Subject key identifier: 08:7F:42:AD:D9:13:0D:09:8D:07:0E:2F:90:BC:BD:23:00:27:34:7C
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018571956D85A4944E4ADB4E5C6332E012CC
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/CH9CrdkTDQmNBw4vkLy9IwAnNHw.roa
Signing time: Mon 02 Jan 2023 08:24:56 +0000
ROA not before: Mon 02 Jan 2023 08:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201208
IP address blocks: 145.62.80.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:6d:85:a4:94:4e:4a:db:4e:5c:63:32:e0:12:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 08:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=087f42add9130d098d070e2f90bcbd230027347c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5c:40:36:6f:a5:23:5a:f4:98:87:91:d1:59:
b2:c7:49:7b:b6:7c:f0:00:a7:32:d4:58:f7:d1:cf:
53:01:2c:0a:46:69:ad:0a:bc:26:30:e3:2e:7b:99:
3c:85:46:b1:4a:ef:c4:2b:6c:2a:00:fa:a7:8e:a8:
50:c7:ba:24:fa:24:b0:1a:b2:92:07:e1:ec:38:cf:
40:50:d1:c3:43:95:1a:72:0d:8c:5b:98:eb:e1:6f:
cf:77:e0:04:04:a5:e0:d4:4a:6c:d4:3f:95:3d:43:
54:64:17:5e:03:cd:f3:c1:c1:03:e8:92:6b:01:4b:
49:d8:8f:dc:8f:22:f5:97:4c:49:48:eb:f3:ca:5d:
94:c7:78:d1:2f:fa:24:2f:16:2b:a2:51:49:33:89:
2b:ef:e3:85:eb:fa:f4:99:a7:26:0a:98:a7:81:ac:
f2:b8:09:50:2a:6f:43:04:0c:a1:41:40:c7:0e:ed:
25:2b:43:0f:ce:b5:9a:8e:16:6f:60:8d:10:33:87:
7e:3d:e3:19:69:0d:a7:9a:43:aa:a1:80:07:2b:d7:
b6:22:ba:33:b5:c9:96:f8:20:16:8b:60:21:d2:53:
34:dd:73:ae:da:06:a0:71:45:d7:6f:a3:8c:2b:e4:
f9:24:df:f9:05:95:ed:8d:58:98:b6:91:7f:e8:46:
a9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7F:42:AD:D9:13:0D:09:8D:07:0E:2F:90:BC:BD:23:00:27:34:7C
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/CH9CrdkTDQmNBw4vkLy9IwAnNHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.62.80.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:37:2f:16:4f:ae:6b:ec:c6:8c:47:54:9c:e1:4d:1d:6b:9e:
0e:6e:64:dd:57:0d:35:d3:65:05:62:cd:11:cf:d6:fb:f2:45:
57:8a:e8:a6:16:9f:41:5e:55:d2:14:3b:8d:1c:21:bf:52:65:
ba:ed:52:8e:b4:b1:65:04:7f:29:94:e8:ae:f7:26:fe:1d:b1:
0e:9f:e8:7d:b2:c5:30:cf:c1:08:47:b8:cb:fd:b2:c9:30:e7:
22:2d:a9:1a:0c:a4:93:f4:82:e9:63:d9:3c:66:19:36:a7:24:
de:b0:64:a2:ba:95:50:b2:d5:72:d7:94:7f:df:26:d1:9a:42:
22:17:64:45:7f:23:7d:a6:b9:34:6e:75:e4:f4:bb:6b:36:97:
d8:56:11:19:2f:b2:00:a9:8e:38:4d:8d:c4:8b:91:cd:01:4f:
d8:0c:81:00:a7:e5:25:5b:9c:32:8d:6b:36:fb:06:9d:0e:11:
15:4b:e7:ae:70:20:54:7a:82:14:58:4d:c1:c1:82:b5:23:60:
46:55:47:a9:e8:fb:bf:da:52:41:d9:61:f6:f0:cd:34:e1:78:
02:aa:10:01:f7:c9:56:77:34:76:c8:b5:76:6c:ee:e3:01:ad:
6e:e0:2a:c3:a4:ec:eb:28:b0:ec:2a:f1:dd:9b:65:a9:1e:44:
de:5d:4b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org