Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/jDamJN4XKYS_D3Xkl_PE5detS0w.roa
File: jDamJN4XKYS_D3Xkl_PE5detS0w.roa (raw, json)
Hash identifier: fBUCBAszEvAeYmUpF6HtE8cCnUSUyIGXsCWIgRjpeZc=
Subject key identifier: 8C:36:A6:24:DE:17:29:84:BF:0F:75:E4:97:F3:C4:E5:D7:AD:4B:4C
Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Certificate serial: 01856F14B3FF4C22A21AC3F8CF6661AA2B6D
Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/jDamJN4XKYS_D3Xkl_PE5detS0w.roa
Signing time: Sun 01 Jan 2023 20:45:05 +0000
ROA not before: Sun 01 Jan 2023 20:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47336
IP address blocks: 195.182.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:b3:ff:4c:22:a2:1a:c3:f8:cf:66:61:aa:2b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Validity
Not Before: Jan 1 20:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c36a624de172984bf0f75e497f3c4e5d7ad4b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:07:c8:6a:4d:f3:c7:99:8c:6c:6c:79:fa:fe:
cd:ac:e2:a9:c2:10:76:02:bf:05:d5:db:40:6c:27:
9c:05:de:12:11:b8:66:d3:4d:fd:85:3a:08:d2:29:
77:99:be:b4:9d:ca:47:61:2a:82:7d:1b:19:a6:76:
72:d8:5f:6a:84:c9:88:1d:03:09:44:8a:0d:f6:ea:
82:c1:c4:59:d3:d8:b3:b9:0b:41:84:eb:c6:15:b7:
1b:44:48:21:37:f9:12:a6:5f:19:46:a7:df:6b:43:
01:d3:f4:25:c4:9e:ac:44:f8:11:e1:d1:bc:e6:bd:
bc:ef:2b:83:b8:f6:57:05:bb:ce:26:79:a0:38:e2:
31:85:8a:51:3d:79:ab:ee:a5:bd:8f:65:7f:94:41:
a7:08:c4:dd:0e:5c:d9:26:22:b5:86:9d:47:5f:10:
f6:62:03:9a:f2:3d:07:9a:35:0c:af:c9:57:54:91:
24:16:bf:e6:72:ac:52:44:9e:c3:e7:f3:7c:0a:87:
4e:a8:9a:cc:20:22:bb:2d:76:fc:8e:da:00:19:74:
5d:32:4d:c5:42:6b:71:d7:b3:cd:81:12:8d:dc:57:
fe:20:07:72:45:ec:80:00:66:71:89:80:48:96:72:
48:54:7a:b3:e9:ab:65:b7:6e:66:eb:33:a7:9f:30:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:36:A6:24:DE:17:29:84:BF:0F:75:E4:97:F3:C4:E5:D7:AD:4B:4C
X509v3 Authority Key Identifier:
keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/jDamJN4XKYS_D3Xkl_PE5detS0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.61.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:63:8d:be:28:89:21:1a:cb:90:73:6f:e9:91:d4:4b:a8:c3:
5b:4c:55:2c:61:8c:58:ce:4d:38:4f:e8:4b:27:7a:b6:35:c6:
d0:95:1d:38:bb:2a:c3:36:d6:61:3d:eb:39:5d:e5:84:a6:c4:
68:62:a2:46:e6:15:a8:aa:1f:16:e6:ac:b5:19:60:ef:91:31:
63:92:46:bc:af:62:28:bb:be:ba:8f:7c:38:59:1e:7f:01:c2:
1f:08:8b:31:64:f3:bd:45:75:fe:fd:3a:bb:88:47:22:51:e6:
9c:f0:7c:1f:a2:69:ab:78:86:42:9b:d2:46:88:88:04:88:ec:
6e:e6:6c:0b:75:7b:e8:51:25:20:ef:19:18:bd:2a:ac:f3:83:
cb:40:20:06:da:83:e2:a5:0e:18:c3:21:e3:15:f1:8c:4b:ae:
b9:99:09:40:70:f3:ae:14:65:17:36:11:4b:64:9d:9a:1a:df:
45:7b:10:7a:f9:37:35:0f:90:11:ff:81:2e:df:23:37:7f:4b:
a2:ad:8d:9b:0a:5d:dc:da:e4:c1:ca:a9:1a:b1:eb:a0:4d:06:
8b:5f:cb:09:93:3a:98:34:43:2a:15:be:80:35:2c:e7:29:c3:
64:ec:65:75:1e:74:95:2e:cb:07:f4:86:ec:a4:5b:5b:63:a7:
9d:43:45:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:00 2024 by rpki-client on console-ams.rpki-client.org