Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/L1xp32WB-SRtdaiI_ljbCO_P6es.roa
File: L1xp32WB-SRtdaiI_ljbCO_P6es.roa (raw, json)
Hash identifier: kp2sVgKOwQzLddwSDGh/t0bqqgDYTt/nxU7pJyt2wS4=
Subject key identifier: 2F:5C:69:DF:65:81:F9:24:6D:75:A8:88:FE:58:DB:08:EF:CF:E9:EB
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 0187799020C64ADE839F7F4E85296CA0CD2D
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/L1xp32WB-SRtdaiI_ljbCO_P6es.roa
Signing time: Thu 13 Apr 2023 07:41:41 +0000
ROA not before: Thu 13 Apr 2023 07:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20853
IP address blocks: 77.83.152.0/22 maxlen: 24
45.147.148.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 04 Jul 2023 07:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:90:20:c6:4a:de:83:9f:7f:4e:85:29:6c:a0:cd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Apr 13 07:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f5c69df6581f9246d75a888fe58db08efcfe9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:35:71:b9:3c:24:e4:d4:3f:22:a8:f9:26:
59:aa:76:06:28:fe:76:ad:23:10:6a:2d:3a:9f:43:
10:34:ca:f8:45:d3:34:db:a2:0c:69:a2:3d:99:63:
5d:bc:91:57:74:ff:78:6b:bb:18:f8:a9:0f:9f:92:
1e:aa:c5:7c:33:ca:f7:03:6d:85:e4:56:6e:d9:56:
e9:3b:0e:f8:2f:c1:68:14:80:51:c7:25:4e:22:2a:
e9:f5:55:1f:a1:7f:8f:c1:5f:82:f8:de:de:49:c5:
37:9d:48:70:8e:34:2d:5f:36:55:5e:27:52:21:69:
ec:df:0e:e5:f7:2a:a0:83:32:71:8b:5a:fe:5d:03:
58:58:bb:43:d4:bd:2a:39:fd:7a:59:00:e9:61:b4:
db:8c:5f:63:24:99:4a:6c:e0:d6:4b:cf:44:ee:3a:
b0:03:be:ab:1c:33:50:7c:80:30:4c:a3:60:a9:c3:
0a:e0:88:c0:7c:67:c0:5a:f3:a9:01:d9:69:d0:68:
a4:ad:33:ec:5b:c5:eb:8f:04:4e:c0:ec:2d:6c:f5:
72:0b:c7:48:9d:90:67:7b:09:0e:1c:c7:8f:99:94:
db:ef:01:54:04:dd:76:1b:e6:c6:26:9d:6a:ad:8e:
c8:30:e5:7d:d2:e4:43:18:ae:b1:c0:fa:ee:b9:35:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5C:69:DF:65:81:F9:24:6D:75:A8:88:FE:58:DB:08:EF:CF:E9:EB
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/L1xp32WB-SRtdaiI_ljbCO_P6es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.148.0/22
77.83.152.0/22
Signature Algorithm: sha256WithRSAEncryption
00:ac:e6:a7:11:79:e0:af:f3:fb:63:de:b7:e6:50:c1:64:d1:
03:18:d8:89:32:8c:a0:7a:b4:cc:e4:04:74:67:89:83:5c:63:
be:0e:8d:19:4e:6f:b6:cc:53:38:61:55:bf:a7:64:e6:9f:59:
8e:af:b6:a1:3a:c3:51:20:c7:59:f2:14:55:d3:cc:ea:ce:12:
2d:03:82:4e:80:85:bd:b6:ed:12:11:58:3d:b7:b4:e3:76:63:
0b:b3:b7:a4:ea:1f:1f:db:c9:76:e4:41:3b:19:90:b5:38:92:
f0:df:f9:57:f1:80:a5:47:64:12:3d:a5:83:06:bc:d8:c4:5b:
da:16:f4:cb:1e:db:00:3c:e7:d8:18:56:bf:58:fd:4a:27:1e:
78:a9:28:da:b2:56:9c:d5:25:b0:0e:fc:3b:fd:a6:6b:08:9e:
81:56:45:8a:5e:6b:39:47:4f:fb:0f:73:4b:7e:06:65:4a:05:
f9:7b:4c:8a:94:4c:92:77:29:8f:e8:5e:80:fb:56:33:e1:2a:
a5:18:e7:63:9e:5a:7e:c6:fe:e1:b6:db:94:85:32:ef:07:a3:
2c:c1:67:2c:2b:7a:64:a3:8a:90:dd:b3:b2:cd:e6:a2:c0:9e:
10:5e:64:c6:58:f0:c8:5b:0b:84:7c:72:7d:91:8b:1c:7e:4a:
42:61:2f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org