Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1FCc-5sS7PWrpEZIVGNZpSVW60Y.roa
File: 1FCc-5sS7PWrpEZIVGNZpSVW60Y.roa (raw, json)
Hash identifier: 0TxWQCrXISluqr5j4ZHO9MI1pZmvycZuxrTnbdwzn8c=
Subject key identifier: D4:50:9C:FB:9B:12:EC:F5:AB:A4:46:48:54:63:59:A5:25:56:EB:46
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5011CFA3483E08169E3DE00509F89EA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1FCc-5sS7PWrpEZIVGNZpSVW60Y.roa
Signing time: Mon 01 Jan 2024 12:30:33 +0000
ROA not before: Mon 01 Jan 2024 12:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142299
IP address blocks: 45.141.26.0/23 maxlen: 23
89.38.101.0/24 maxlen: 24
185.241.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 06:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1c:fa:34:83:e0:81:69:e3:de:00:50:9f:89:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4509cfb9b12ecf5aba44648546359a52556eb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:aa:70:eb:90:84:b3:6e:e5:ee:85:9b:e6:
d6:c3:61:9e:95:40:37:e6:c4:4a:53:85:ef:37:01:
f3:0f:36:a2:02:9a:2a:96:23:68:4b:4a:a4:1c:67:
eb:dd:8d:92:82:2d:37:c4:62:11:58:db:18:23:cd:
5e:ad:87:0f:bf:36:ff:c5:31:c3:58:16:e5:8a:15:
8d:bc:ee:91:c6:f9:44:a4:bc:a4:6f:9c:20:c5:ac:
a8:89:eb:b9:c8:0d:c7:67:5c:49:e6:2a:f3:e3:8e:
b8:54:18:32:47:73:f5:c8:f0:58:be:33:41:7f:6f:
59:74:c2:06:99:6f:f0:33:ef:2f:f0:25:9a:d9:80:
e8:87:f1:bf:f8:da:f6:22:db:e5:4a:d4:4f:67:50:
01:05:01:7d:c9:d5:af:f5:70:e6:91:61:fd:e0:16:
c4:29:cb:79:2f:21:69:00:11:fb:ce:22:17:f8:17:
a1:9c:3c:ee:c5:a7:d0:f0:ad:16:d7:1b:b4:c0:4f:
73:0e:d2:d0:85:57:94:03:1d:0c:81:25:8a:75:5f:
b6:29:09:2b:2d:15:32:b5:ca:8a:4c:7b:9a:a3:2f:
f3:50:5c:af:a3:11:9a:dd:6f:21:97:26:c2:83:7d:
2b:73:ca:af:a1:ea:9e:71:87:95:0d:cb:e8:6c:69:
12:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:50:9C:FB:9B:12:EC:F5:AB:A4:46:48:54:63:59:A5:25:56:EB:46
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1FCc-5sS7PWrpEZIVGNZpSVW60Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.26.0/23
89.38.101.0/24
185.241.210.0/24
Signature Algorithm: sha256WithRSAEncryption
34:89:3f:e0:cb:ed:49:85:d5:a8:a0:79:dc:d1:49:4b:5d:e7:
43:0f:a6:9f:39:ac:37:dc:6f:b4:d1:14:8f:5b:90:c5:42:ea:
c7:a5:23:7e:0a:82:01:a6:8b:82:9c:0e:00:b7:51:ab:9e:74:
0b:e6:d9:5d:7a:62:95:1a:7b:31:57:fd:2f:b2:21:2e:57:71:
69:77:7d:0f:0d:4a:b4:8d:73:7a:74:6f:2f:e6:f7:ba:74:3b:
b4:ff:36:76:dd:73:bd:a0:0b:79:cb:34:b7:24:1b:5f:bf:6b:
e8:66:c8:1c:ff:49:e0:3e:b0:a8:1d:36:06:33:c9:a7:8f:8f:
b1:9e:34:68:99:65:9c:80:13:52:58:f7:69:5f:d6:dd:eb:47:
32:19:7e:ea:ea:63:0f:04:37:77:27:e8:e7:1b:10:93:5f:f6:
a3:77:15:63:7c:98:c6:7c:9e:f3:f9:38:c6:3c:29:a7:ba:54:
f3:4e:ce:60:06:7b:ba:99:c0:2e:0a:bb:b7:5b:b0:10:e9:5d:
ae:9a:5d:d7:03:aa:3a:e7:e7:4c:74:cc:53:57:fe:dd:8a:28:
e6:69:2f:09:96:cb:f1:7f:1e:2d:af:d1:7b:4f:88:30:da:0d:
5b:3e:39:a6:bf:20:38:49:8f:fa:ff:5b:ae:49:74:cd:d7:f2:
b4:a5:75:3f
-----BEGIN CERTIFICATE-----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 at Tue Jan 16 09:55:53 2024 by rpki-client on console-ams.rpki-client.org