Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/aJpMJp4WlWz3bVoFR2cC6N815Mw.roa
File: aJpMJp4WlWz3bVoFR2cC6N815Mw.roa (raw, json)
Hash identifier: 0SiEc1lo/Apg6mSKrrVz0ybs0vwHDFOvn/CJ/wbBn04=
Subject key identifier: 68:9A:4C:26:9E:16:95:6C:F7:6D:5A:05:47:67:02:E8:DF:35:E4:CC
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018571956B7B37034310C0C422564D8174E9
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/aJpMJp4WlWz3bVoFR2cC6N815Mw.roa
Signing time: Mon 02 Jan 2023 08:24:55 +0000
ROA not before: Mon 02 Jan 2023 08:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 145.79.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:6b:7b:37:03:43:10:c0:c4:22:56:4d:81:74:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 08:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=689a4c269e16956cf76d5a05476702e8df35e4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:0d:d6:41:7a:30:90:08:a1:98:f6:33:24:
ed:2a:7c:6d:78:f3:93:ca:fd:ba:49:e0:4a:18:b1:
33:82:e4:ce:1d:5c:cf:3e:a5:aa:9c:d4:ec:f7:e6:
59:f3:eb:7f:c1:d7:61:aa:29:89:90:40:dd:e7:cb:
c9:30:38:84:88:3b:71:ac:bb:35:4e:7a:6d:b1:66:
fd:aa:c9:51:d1:e5:11:18:19:e4:99:40:18:88:10:
4f:e9:7d:4a:9e:af:a8:f0:26:af:85:73:7c:94:ac:
60:10:85:15:99:b7:5f:88:56:86:3a:c0:60:ca:bf:
be:6c:52:90:d8:0b:e8:24:3e:9a:2a:91:60:1e:c0:
7d:71:92:9d:cb:36:9d:95:ef:a5:65:9c:62:4a:7a:
5d:81:b0:4c:72:6d:b5:29:8e:ad:f4:8b:98:af:2e:
fe:7c:0b:fd:9e:fd:58:a6:47:4b:70:1c:2e:1f:4a:
f3:95:78:a6:f7:bc:77:23:95:eb:04:f7:7c:88:60:
60:20:c2:09:ed:8d:12:96:9a:30:57:6e:53:7c:d1:
5d:aa:f3:fe:7e:93:e0:e7:75:30:0e:85:f7:99:6e:
5d:0b:88:d9:8e:51:61:53:22:5c:ec:f3:0f:3f:b9:
cb:fc:34:92:8a:86:bc:84:a0:a2:c8:f5:c1:e4:74:
81:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9A:4C:26:9E:16:95:6C:F7:6D:5A:05:47:67:02:E8:DF:35:E4:CC
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/aJpMJp4WlWz3bVoFR2cC6N815Mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:8a:2e:ad:9f:3f:e1:68:61:8d:15:32:5c:d0:f5:00:ec:84:
84:fb:2b:1f:7e:87:d8:5b:65:38:3f:a7:72:52:36:60:d7:89:
3e:da:39:4d:04:29:56:d0:55:a5:ee:64:ec:19:77:e3:51:cf:
2d:24:00:1a:81:33:35:25:0b:2b:c0:aa:b7:22:3a:de:f0:26:
e9:b2:8e:e2:83:34:ba:22:71:94:52:60:ba:15:79:a2:f9:1a:
70:cb:80:a4:6f:4d:23:be:ca:fa:7a:b2:ee:ca:d9:69:ef:5b:
57:43:5f:70:18:32:8d:a4:22:0c:5d:6e:30:07:51:76:93:4d:
07:5e:4b:d6:1a:0c:88:45:b6:45:3c:5c:8b:d9:24:b2:a8:a5:
50:db:f7:84:94:f7:83:ed:f1:ef:50:b8:c5:7e:12:99:a5:1c:
12:c5:69:c4:e7:45:de:0b:6f:18:10:36:75:dc:ee:1e:00:79:
22:7b:8f:b0:4f:2a:3c:16:71:7b:35:9f:71:ab:58:e5:a9:58:
5a:1c:5f:ec:59:b1:4f:f9:eb:06:4c:af:b4:46:42:d1:ef:25:
a6:5f:3d:ea:1e:20:e7:6d:20:3b:51:38:dd:80:50:f1:c9:d3:
3c:a0:d9:9a:77:84:1a:3b:fc:a4:5f:4e:77:c8:0e:b2:86:23:
23:5a:20:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org