Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/inxchon2LLUx6sWgfpgwwenrncc.roa
File: inxchon2LLUx6sWgfpgwwenrncc.roa (raw, json)
Hash identifier: xCOH9pybjKF30D13cLaxQBmEFbgqeMZbyO9BERqexzw=
Subject key identifier: 8A:7C:5C:86:89:F6:2C:B5:31:EA:C5:A0:7E:98:30:C1:E9:EB:9D:C7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0186568B94A0AEC67D20070B028E71073E33
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/inxchon2LLUx6sWgfpgwwenrncc.roa
Signing time: Wed 15 Feb 2023 19:27:13 +0000
ROA not before: Wed 15 Feb 2023 19:27:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 45.147.227.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Mar 2023 08:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:56:8b:94:a0:ae:c6:7d:20:07:0b:02:8e:71:07:3e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 15 19:27:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a7c5c8689f62cb531eac5a07e9830c1e9eb9dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:6a:52:73:0f:ed:56:97:d0:c2:f1:cb:34:
13:4f:7d:da:cd:90:6d:41:94:f2:5b:f6:8f:09:d0:
cd:0c:b7:7d:77:ff:77:7b:c4:25:99:76:80:cf:aa:
5a:38:f4:06:94:48:20:a4:ce:95:4b:be:3b:12:bc:
91:3d:28:3d:2c:4b:3d:bd:bb:09:96:43:73:02:9b:
67:67:3c:37:3e:46:0c:53:e8:92:33:3a:c6:84:d5:
48:a6:de:4c:df:ac:d0:4d:bd:4d:68:14:fa:29:e6:
b7:3b:db:ef:cc:da:1e:05:ec:da:7d:fa:6e:0c:70:
ae:7f:d9:1e:9a:07:11:f3:e3:a0:41:ca:d7:68:69:
dd:82:42:f4:5e:69:91:ef:68:7e:8a:f5:21:30:59:
f2:e9:ae:cb:2f:29:b1:5f:fe:39:76:ca:17:b3:87:
36:e4:9a:02:dc:ab:30:5a:d2:9e:bb:2a:df:0e:44:
a8:2d:ca:66:e0:5d:96:d0:d0:ab:56:01:0f:22:7e:
e6:47:db:93:c3:eb:d7:cf:b9:d5:51:2f:e5:6e:9d:
7d:ff:03:1a:31:40:bc:3c:76:85:29:ef:72:ca:97:
31:41:d6:92:23:a2:91:15:69:ad:29:30:81:a6:49:
b8:39:cf:83:d6:94:68:99:81:01:8d:0e:81:af:36:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7C:5C:86:89:F6:2C:B5:31:EA:C5:A0:7E:98:30:C1:E9:EB:9D:C7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/inxchon2LLUx6sWgfpgwwenrncc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.227.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
23:64:a5:54:d6:28:e1:00:21:b2:77:3a:8c:98:1a:1b:e7:e6:
fb:de:81:ea:0b:c5:0c:9e:24:3f:03:56:bf:24:a5:66:f1:a1:
e4:41:34:28:f1:16:4b:0c:bb:d4:c3:cc:17:48:e4:f4:9a:09:
fe:58:d7:1c:f5:c7:14:03:26:57:e4:03:0b:89:fa:15:50:60:
19:81:b2:46:3e:c0:fb:37:bf:c4:37:12:ed:e1:8f:c0:98:31:
0f:61:a3:ac:ca:c5:c2:41:1d:b2:66:a7:e9:66:03:84:67:95:
9c:d5:9d:1c:5c:9e:09:3e:6f:ed:19:58:34:2c:60:4b:06:78:
33:db:96:fb:dc:a5:27:6a:28:b5:1a:db:ad:ff:2a:84:1f:44:
ae:7a:5d:f5:d3:fa:ce:9e:e0:f2:89:4e:d1:a1:dc:4d:50:19:
08:74:1d:1f:70:20:cb:82:11:b1:62:60:a1:41:84:fa:bc:de:
0f:0d:fd:47:c4:93:7a:33:b0:ca:1d:fe:24:da:aa:7a:58:49:
2b:b3:3c:99:e5:72:ac:09:ea:0b:30:0b:2e:b6:f9:a8:c7:bd:
d6:fb:2b:cb:a2:65:38:4a:29:05:6d:dc:2c:64:82:cb:39:df:
2c:3a:30:d1:5a:a8:e7:16:a2:4f:d2:f5:75:cf:ec:9d:d1:22:
34:fd:5a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org