Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/J7PBjWuL_fwkHMI6bA6fLNUYi0w.roa
File: J7PBjWuL_fwkHMI6bA6fLNUYi0w.roa (raw, json)
Hash identifier: /2dBMY5wO+9dNnfT0AaXB+1wBKag3gEDYKmbsXU+ltc=
Subject key identifier: 27:B3:C1:8D:6B:8B:FD:FC:24:1C:C2:3A:6C:0E:9F:2C:D5:18:8B:4C
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 018606D8AA422D3F6F48FAFF786E8DB2F63D
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/J7PBjWuL_fwkHMI6bA6fLNUYi0w.roa
Signing time: Tue 31 Jan 2023 08:01:47 +0000
ROA not before: Tue 31 Jan 2023 08:01:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 185.145.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:06:d8:aa:42:2d:3f:6f:48:fa:ff:78:6e:8d:b2:f6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jan 31 08:01:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27b3c18d6b8bfdfc241cc23a6c0e9f2cd5188b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:2c:90:30:f4:22:93:15:d6:19:d6:a0:fe:
96:3f:51:7b:71:1f:b7:d4:f2:ea:4b:6f:80:6b:e3:
f8:65:34:1a:55:a5:e4:e8:58:08:2f:e8:6b:2b:d4:
8d:ae:6b:20:ab:ba:5e:25:a3:79:d0:80:36:07:83:
a2:43:50:e3:65:3e:0c:45:c8:8b:31:0f:e3:06:d4:
bb:77:ad:b4:40:99:c8:a1:ba:b9:1b:09:19:98:74:
b3:a2:e5:95:33:2e:f9:6e:3b:2c:79:e5:eb:9d:7d:
dc:ca:44:f6:74:37:91:00:3a:96:80:98:3a:03:d2:
a5:10:97:9a:3b:e6:90:fe:38:03:4c:6a:65:f9:cc:
95:f9:b6:89:6c:01:b5:7c:62:9a:02:3d:f0:fb:50:
c0:b6:c2:39:95:a8:ea:b7:b0:8b:3b:ba:9c:cc:26:
76:dd:b1:b0:b6:be:36:58:ae:5c:9a:db:46:af:26:
3c:dc:52:74:b2:36:c7:a3:71:a0:90:6f:31:08:6a:
fa:76:49:9c:b7:50:f9:66:29:5a:d5:4a:be:c6:ea:
d4:f9:c4:53:c5:51:1a:6c:2f:8c:c0:76:23:e9:9f:
a9:b8:da:95:d9:48:7b:7f:e9:b3:f1:a9:63:8e:bc:
0d:ea:eb:c7:e4:51:f7:0d:00:c9:4e:ae:07:da:59:
40:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B3:C1:8D:6B:8B:FD:FC:24:1C:C2:3A:6C:0E:9F:2C:D5:18:8B:4C
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/J7PBjWuL_fwkHMI6bA6fLNUYi0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.52.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a5:61:66:fb:b1:1e:af:81:87:74:ec:7e:e6:c3:a5:11:9a:
cd:e0:b0:c9:b5:38:03:a4:17:f4:cc:d6:ab:5f:0d:52:44:81:
8a:dd:69:4a:a4:e7:c6:6d:86:0e:96:f9:d7:60:7a:12:b6:d3:
07:9f:f2:6f:a7:05:2d:46:3a:6e:14:db:de:b4:72:0d:6c:dc:
82:ef:bf:81:38:36:1e:ea:94:47:53:14:13:89:8a:bb:ae:7e:
6d:9b:2d:a8:ac:de:46:94:fd:97:93:f7:fb:1f:ac:43:4b:6e:
8a:18:d2:bc:3b:bb:2d:4c:6a:09:45:ba:5c:64:9b:4b:b8:b9:
0e:92:cc:2f:71:26:59:00:62:56:16:bc:2d:75:b1:d8:b0:03:
0f:a1:b4:e0:ec:38:41:2e:bc:46:17:6b:ef:f1:c1:fe:8a:db:
93:dd:bf:53:02:b6:44:3d:80:77:b8:11:57:b5:c3:64:bf:e7:
46:d3:b6:93:0b:60:e3:9c:6d:2b:d1:b8:b9:33:35:c8:b3:f1:
83:cf:04:18:e9:9c:98:2f:4d:70:e7:55:16:e3:d4:72:b9:0b:
a1:48:21:be:a2:70:bb:df:a8:b7:fc:0d:85:a4:a4:d4:0f:ac:
1e:1b:eb:dc:22:e6:66:a5:a1:ce:c9:bd:a8:d0:28:28:c8:f8:
cd:a2:f9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:38 2023 by rpki-client on console-fra.rpki-client.org