Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/JCfQBigaWhoi4t-HxYHgKLn4B4w.roa
File: JCfQBigaWhoi4t-HxYHgKLn4B4w.roa (raw, json)
Hash identifier: ZXizCePG9uHF89b8Y3UbOnyZLLIy10z6xd9XvGWanj4=
Subject key identifier: 24:27:D0:06:28:1A:5A:1A:22:E2:DF:87:C5:81:E0:28:B9:F8:07:8C
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 01857195645CF6FEC7E791E0F3BBBE318994
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/JCfQBigaWhoi4t-HxYHgKLn4B4w.roa
Signing time: Mon 02 Jan 2023 08:24:53 +0000
ROA not before: Mon 02 Jan 2023 08:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2686
IP address blocks: 145.139.78.0/24 maxlen: 24
145.139.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:64:5c:f6:fe:c7:e7:91:e0:f3:bb:be:31:89:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 08:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2427d006281a5a1a22e2df87c581e028b9f8078c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:de:16:e7:03:d0:11:37:40:4d:ef:e8:2d:13:
b5:c6:80:76:ed:f8:e4:a4:b4:e4:ac:90:14:23:5a:
ea:4e:90:81:1e:f9:71:a3:97:fe:12:59:6b:33:db:
06:fd:8f:9f:b9:eb:d6:42:88:d5:85:44:f6:cf:dc:
9e:07:61:20:28:b8:4d:15:e4:33:05:6b:fb:a3:85:
21:cc:fa:6c:20:36:68:29:26:11:80:58:d4:17:ae:
f0:ec:55:7e:d8:65:d9:fb:cc:a8:37:bf:d5:99:c2:
05:33:f8:91:8e:2a:5a:2b:96:a9:ac:61:10:ef:0b:
30:c1:cc:83:be:07:d6:33:6d:b1:20:ca:9a:b3:c5:
c3:91:e6:21:0d:ea:1b:a4:24:0d:ec:9c:2c:46:e5:
94:d0:84:e8:05:34:11:a7:e5:b2:2d:c2:3d:70:75:
e7:cf:a3:82:c3:3a:38:68:ce:7e:38:46:38:77:7e:
f9:c2:a5:5c:ea:5e:4b:13:6a:64:f0:1a:b4:ce:5f:
22:61:95:d6:d1:76:55:67:8f:b5:92:c5:ab:ee:d4:
58:29:0a:4e:73:08:24:c3:ad:70:44:60:a6:25:a1:
f1:99:08:1f:78:d8:01:7e:bb:12:3b:5c:a4:91:53:
2d:e3:69:fd:db:f8:7f:f6:f1:f8:47:b3:f6:f1:6b:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:27:D0:06:28:1A:5A:1A:22:E2:DF:87:C5:81:E0:28:B9:F8:07:8C
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/JCfQBigaWhoi4t-HxYHgKLn4B4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.139.77.0-145.139.78.255
Signature Algorithm: sha256WithRSAEncryption
a9:f3:5a:50:89:ff:d9:6d:34:09:74:d4:97:e0:fb:b1:b4:78:
32:1e:7d:54:0b:13:b7:07:53:a0:bb:d7:0b:df:d1:db:2b:f8:
28:c7:ae:1d:41:cf:fe:57:65:56:e1:a5:84:e6:2e:39:44:ab:
87:e2:4f:d8:34:b7:36:64:91:d3:50:59:dd:79:6d:5b:32:fd:
93:52:a0:c8:5e:7b:a5:ab:c4:35:88:9b:21:2f:f6:a6:89:be:
fe:d0:f4:c1:96:4c:08:0d:5a:09:bf:49:fa:3f:95:fa:58:a8:
88:7c:71:9e:44:41:a3:f2:11:63:8b:b9:ff:29:1c:c4:ac:6e:
a3:ff:3e:77:e1:4c:d5:c5:d7:0b:0f:92:1a:48:7c:88:70:f7:
91:5e:2a:e0:df:3b:68:10:f2:51:77:fe:83:38:6a:83:0d:60:
9e:fa:d5:63:d7:e3:30:47:be:86:72:4c:24:85:3c:a8:8f:ac:
d1:e9:36:f1:1a:f6:c7:37:c9:94:1f:2a:fa:15:f9:94:7e:f3:
9b:9d:6f:34:b1:d2:5c:9e:85:d5:56:9a:25:d5:84:76:4f:d0:
e9:0a:4d:87:57:ed:6c:99:79:c1:2a:f6:f3:aa:dd:1f:95:c6:
03:98:f3:e5:aa:cc:84:23:6d:41:92:2f:d6:6e:6e:d4:4c:cf:
e2:ae:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org