Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/fuqGWXkP8O0roVnRAUyw4A4sFr0.roa
File: fuqGWXkP8O0roVnRAUyw4A4sFr0.roa (raw, json)
Hash identifier: 67Hq4K26H99brH34A7ZXOkkCBO3g2cYJcTlYQeKPbaw=
Subject key identifier: 7E:EA:86:59:79:0F:F0:ED:2B:A1:59:D1:01:4C:B0:E0:0E:2C:16:BD
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018571956529794E598B027DF4D6AA5C9D6A
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/fuqGWXkP8O0roVnRAUyw4A4sFr0.roa
Signing time: Mon 02 Jan 2023 08:24:54 +0000
ROA not before: Mon 02 Jan 2023 08:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2687
IP address blocks: 145.30.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:65:29:79:4e:59:8b:02:7d:f4:d6:aa:5c:9d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 08:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7eea8659790ff0ed2ba159d1014cb0e00e2c16bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3e:76:a7:69:a7:36:2b:66:6a:35:2c:f8:cf:
30:6e:b9:f1:8a:fa:3b:68:54:8a:fd:6c:32:5f:27:
9d:cb:94:d8:7f:6f:bc:ff:ca:ed:ab:0f:7b:d3:9a:
34:fb:8a:ac:3f:39:f8:59:48:c1:d9:7e:2d:19:e1:
59:4f:56:c7:65:e5:e7:ba:ee:86:5b:fa:90:34:c8:
43:3d:54:1e:60:fe:ce:99:e5:7b:2a:c9:b7:28:f6:
89:ab:1f:c9:a1:f7:39:55:17:cb:22:54:9b:54:69:
ec:0c:ea:3d:f9:b5:25:80:95:8d:d8:91:f6:a9:2b:
52:6d:e0:43:1e:9e:58:b3:f0:ec:5b:4a:a3:13:b7:
d9:95:22:e9:e7:82:ae:70:7c:b1:94:d6:e8:59:88:
e6:45:bf:9a:d8:77:5d:0e:91:40:02:25:13:25:29:
56:61:e2:f4:81:51:d5:ab:04:e1:b2:eb:52:96:7b:
47:4c:76:e6:85:b8:87:f3:84:ce:10:ec:39:57:06:
ac:d3:22:e0:1e:af:b9:c4:e1:24:d6:95:cb:08:ff:
3c:bc:51:f5:42:8b:5b:46:8f:cb:5c:95:67:bb:7e:
a7:be:fd:54:19:22:fd:b1:d9:84:d9:49:7a:bb:ab:
84:d5:1c:51:c0:42:91:14:25:3a:e3:0c:e3:2a:fe:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EA:86:59:79:0F:F0:ED:2B:A1:59:D1:01:4C:B0:E0:0E:2C:16:BD
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/fuqGWXkP8O0roVnRAUyw4A4sFr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.30.226.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b8:d5:69:d0:f5:f1:d5:28:88:4c:3a:43:0f:62:90:c0:0e:
5c:fd:94:87:86:3a:43:b0:69:da:3c:ec:a3:f7:4f:68:5b:f1:
d2:58:23:10:d7:13:16:48:21:76:54:dc:22:2e:7d:e2:ab:bd:
f8:e0:6a:9e:8a:3d:31:e7:eb:3e:7b:9b:55:68:d4:50:ef:5f:
a6:32:a5:1f:26:f1:af:7d:a6:26:ec:41:cd:55:a2:16:0f:28:
7d:92:65:95:81:e6:be:c6:85:21:2a:ce:51:fd:de:3c:f7:3e:
67:36:bf:29:32:78:34:42:09:39:58:97:e9:8d:89:79:fd:68:
e2:56:2c:8d:8f:1e:32:eb:80:3c:d0:2f:61:60:5d:fe:6e:5b:
08:06:4a:be:fc:8e:b1:36:c8:56:6d:8d:dc:ee:4a:74:5a:04:
3f:74:d3:78:fb:15:ec:f9:c3:81:44:ca:33:c0:22:26:11:e7:
9a:7e:2d:87:95:17:34:cd:4f:7a:4b:63:10:61:aa:3e:55:ea:
b7:ad:99:3c:e2:be:4c:37:24:2d:00:78:00:1e:bf:61:df:d7:
16:e0:10:a4:5f:fe:25:04:d3:e5:1e:5d:f4:e1:1d:67:3e:8d:
a8:f3:b2:a3:1e:0c:3b:48:67:8a:75:27:2d:fd:d4:4d:46:ac:
c4:4c:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org