Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/KDm2TYauoCRsbiKuMRl5pgmVZ_c.roa
File: KDm2TYauoCRsbiKuMRl5pgmVZ_c.roa (raw, json)
Hash identifier: oLW0lf+Na6MmvjlCfzEnqkiWHN4abuJ9yhYRQTmFa3E=
Subject key identifier: 28:39:B6:4D:86:AE:A0:24:6C:6E:22:AE:31:19:79:A6:09:95:67:F7
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 01871E3D4EC970077DFC0F0D1054AD7E0ACA
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/KDm2TYauoCRsbiKuMRl5pgmVZ_c.roa
Signing time: Sun 26 Mar 2023 14:05:46 +0000
ROA not before: Sun 26 Mar 2023 14:05:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20853
IP address blocks: 45.147.148.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 13 Apr 2023 07:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1e:3d:4e:c9:70:07:7d:fc:0f:0d:10:54:ad:7e:0a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Mar 26 14:05:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2839b64d86aea0246c6e22ae311979a6099567f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:aa:ac:26:6b:eb:99:32:d9:c6:cb:bd:32:
af:1e:b4:c2:6b:f8:0c:e6:96:e3:d6:e7:77:d9:5d:
e9:30:87:e7:4e:03:ea:9a:05:ec:66:6a:1b:3d:36:
ad:81:42:10:e0:48:37:63:81:32:90:ec:75:78:57:
16:6f:77:8c:7c:dc:a7:9b:8a:63:9c:02:65:4c:8d:
bc:cf:a1:37:af:54:e3:ad:d0:b9:54:4a:d9:f4:81:
56:49:31:ff:d3:29:2d:bf:cd:96:2f:ee:c3:21:97:
3a:c4:5c:ae:ad:2d:28:86:a8:a5:f6:72:67:02:91:
38:58:54:6d:de:1d:1c:34:88:4e:7c:4b:c8:41:18:
80:3d:f7:84:74:fa:d8:7f:87:d7:0b:69:62:71:33:
7c:bd:e7:8e:83:18:93:e8:09:14:72:c5:c2:ee:4a:
73:43:01:2b:84:c5:c6:3c:65:85:c8:01:8c:5f:c7:
63:73:cc:57:ed:82:86:7e:9d:7f:de:17:42:47:54:
62:51:97:df:a7:6d:ce:c3:38:f6:d0:76:1d:9e:23:
41:65:98:19:0b:e2:38:5a:91:93:35:ea:22:8d:07:
3f:f4:8a:e3:e6:84:83:ff:e7:85:83:e5:7a:10:83:
2b:82:2a:f2:c7:cb:4e:2d:96:3a:f5:77:a3:85:db:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:39:B6:4D:86:AE:A0:24:6C:6E:22:AE:31:19:79:A6:09:95:67:F7
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/KDm2TYauoCRsbiKuMRl5pgmVZ_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.148.0/22
Signature Algorithm: sha256WithRSAEncryption
29:49:7a:46:81:5d:97:cd:ae:7b:6e:b9:68:f4:85:aa:12:eb:
15:82:fd:74:70:f5:c8:71:34:95:1b:f2:e8:ef:c8:d6:97:e7:
59:0a:8c:74:bc:ac:01:72:ff:4c:f8:a3:5a:69:e8:ca:47:c6:
47:00:32:b3:2e:71:ba:79:2e:b6:ec:9a:1e:b3:cb:98:37:f9:
1a:47:74:d4:7f:1d:16:91:24:90:ba:8a:2a:d8:ae:a8:6a:b8:
f3:16:a2:e2:b1:82:cf:a6:3e:cb:41:c8:4d:ce:81:41:ac:7f:
5c:b1:5e:44:39:46:70:6a:60:97:4f:91:13:4f:11:3f:5b:e8:
e3:f1:2b:a4:02:ec:ad:54:79:2c:eb:8a:d8:73:bc:0d:72:c1:
af:65:09:e6:b7:e6:9e:42:6e:27:90:d5:b0:2b:dd:26:b4:11:
de:77:ba:52:2e:3b:8b:01:1c:51:10:54:37:51:80:64:70:ee:
d2:e5:3c:3f:06:fd:f2:91:8e:bb:da:c3:b1:2d:89:7d:74:0b:
89:4d:9a:bd:72:39:b5:b9:9f:1b:be:c6:14:e1:19:e7:ad:59:
f0:30:68:24:6f:62:2a:28:1d:50:a6:68:5c:5e:e0:b7:50:65:
23:b6:49:95:79:ed:31:3c:13:12:5c:01:5e:0f:e8:1d:67:2a:
8d:d4:b1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:41 2024 by rpki-client on console-ams.rpki-client.org