Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/p65Dij2rJ8zgPtMtEhvccdEa-fc.roa
File: p65Dij2rJ8zgPtMtEhvccdEa-fc.roa (raw, json)
Hash identifier: PbDgWRwJewJhnPPQ75N8sjzVP8ykami8YQROHVqDMvA=
Subject key identifier: A7:AE:43:8A:3D:AB:27:CC:E0:3E:D3:2D:12:1B:DC:71:D1:1A:F9:F7
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 0185720C5FC3C3C2AC7FEDDFD012BFE09E96
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/p65Dij2rJ8zgPtMtEhvccdEa-fc.roa
Signing time: Mon 02 Jan 2023 10:34:51 +0000
ROA not before: Mon 02 Jan 2023 10:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 553
IP address blocks: 141.37.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:5f:c3:c3:c2:ac:7f:ed:df:d0:12:bf:e0:9e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: Jan 2 10:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7ae438a3dab27cce03ed32d121bdc71d11af9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:78:01:7d:e9:ac:cd:49:67:36:4a:f2:46:
85:07:a8:3c:cd:4b:a9:b9:a3:8a:cf:18:68:a3:46:
bc:b2:f5:89:78:08:3f:42:9a:e3:5d:d8:f0:27:11:
f4:e9:4f:ad:ae:27:42:6a:25:da:59:c2:bc:d0:35:
ee:6c:27:fa:98:3f:bb:d0:45:76:90:07:40:57:93:
63:1f:ad:e7:a4:c1:f3:a5:fa:19:70:18:0a:2c:a1:
78:97:5b:f5:47:78:62:07:37:7e:42:dc:3c:49:f2:
4a:a9:19:73:0a:96:08:38:98:a6:ab:e7:a5:8f:b6:
8f:3e:49:95:c8:07:77:ae:13:e1:d0:c2:6f:c6:80:
76:a9:64:b0:34:fe:b6:12:c2:8a:46:7e:24:a2:f9:
a2:86:c5:1a:27:37:80:35:12:da:58:a7:3e:33:2d:
5a:e0:9b:f1:23:c7:ae:75:cb:21:b6:05:cb:16:1b:
75:e0:7a:b2:65:48:86:43:8c:6a:cd:8a:e1:4a:e7:
61:85:ba:dc:d0:ba:c6:59:71:9d:86:9d:57:65:be:
28:99:82:46:db:8f:1d:16:ec:59:a9:c2:bd:01:de:
2e:09:4c:27:3d:91:aa:b1:5e:50:97:cc:93:93:e3:
64:34:7d:f8:42:11:6b:12:86:90:74:5a:31:da:e2:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AE:43:8A:3D:AB:27:CC:E0:3E:D3:2D:12:1B:DC:71:D1:1A:F9:F7
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/p65Dij2rJ8zgPtMtEhvccdEa-fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.37.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:ec:27:50:1d:70:d9:63:e7:87:5b:d8:34:ad:c0:9f:4f:02:
47:20:1d:37:6d:1b:08:52:b2:bb:8c:b2:3d:c9:b5:11:bc:ff:
c1:39:7c:06:88:fc:af:d1:db:f2:f3:fe:18:46:1a:19:b1:d6:
f3:65:6a:54:10:3a:16:70:2b:59:a3:89:d5:ea:00:93:ab:91:
23:dd:2e:f2:25:8e:63:7c:32:58:12:23:26:d6:56:d6:83:7b:
b5:c2:1c:2b:fc:75:93:99:3e:93:b2:92:59:9c:66:d5:c1:3b:
65:c9:23:cb:2b:e9:fe:dd:86:34:e4:86:d5:70:56:18:03:70:
81:21:43:6b:0e:39:53:da:1c:e8:6a:56:de:f5:40:ce:44:29:
8c:d3:1b:2e:41:64:b0:4f:dd:87:60:97:9f:c7:51:8d:71:7b:
df:6c:5c:1a:75:2b:76:69:b5:a9:81:61:4a:32:f3:e5:cd:2a:
cf:99:8c:da:15:e0:a6:47:e1:df:99:7c:52:7e:56:40:9c:04:
cd:7c:90:06:3b:87:44:ca:2d:a8:3c:ac:99:db:06:5c:02:cb:
f8:6e:cc:17:ef:85:e8:2b:60:2a:88:93:59:fc:f1:b0:ea:6c:
67:b7:7a:22:6d:6f:a9:f9:02:5d:4c:20:a7:ba:82:32:07:c0:
88:5b:3f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:27 2024 by rpki-client on console-fra.rpki-client.org