Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/JcQsH6Tyhu1LUS8AW8Xjyw7lkgs.roa
File: JcQsH6Tyhu1LUS8AW8Xjyw7lkgs.roa (raw, json)
Hash identifier: fXf+U2krPLhA8FcquBFjKyT8v79/EgsnjbY7fnEsC0o=
Subject key identifier: 25:C4:2C:1F:A4:F2:86:ED:4B:51:2F:00:5B:C5:E3:CB:0E:E5:92:0B
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 018A60333995C83F1D323B95EB8BBEE14E95
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/JcQsH6Tyhu1LUS8AW8Xjyw7lkgs.roa
Signing time: Mon 04 Sep 2023 12:38:04 +0000
ROA not before: Mon 04 Sep 2023 12:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13127
IP address blocks: 145.83.2.0/24 maxlen: 24
145.83.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:60:33:39:95:c8:3f:1d:32:3b:95:eb:8b:be:e1:4e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Sep 4 12:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25c42c1fa4f286ed4b512f005bc5e3cb0ee5920b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:95:de:12:69:d0:d5:14:fc:ab:80:22:49:9e:
78:1b:89:7e:ca:0e:08:69:f8:57:a9:db:71:2a:ef:
fe:f3:1a:91:1a:b6:21:9a:e6:b0:cd:6f:68:d2:10:
95:8d:98:0f:ca:0c:18:b1:4f:32:5e:d2:a1:a3:20:
5a:bc:4b:6a:a5:9b:8a:45:8a:d6:10:be:d0:f6:19:
30:f0:55:98:89:d0:dc:a8:78:ac:27:f2:ff:73:61:
0f:73:cc:44:c5:f2:0e:42:21:04:22:d4:05:26:74:
4f:4a:0e:03:0d:d4:a2:0f:8c:66:2e:76:d1:82:4e:
65:fe:e5:10:d5:4c:a7:f0:49:5a:1f:2b:e5:3c:c3:
6f:86:ba:7a:63:90:f1:9e:e5:65:4e:f0:ba:96:9b:
94:93:d8:b4:e8:e2:43:8d:02:ec:ad:a6:cf:f1:81:
86:a7:5b:e7:f8:1b:99:e9:3b:c1:c7:55:c8:a9:f8:
64:9c:8e:ad:6d:1f:5a:ba:40:e7:8f:79:7c:5c:fa:
71:d3:bc:bc:94:80:df:11:a1:c3:dc:36:cf:43:15:
2a:0b:13:d6:aa:7e:a8:5c:e8:2d:9e:a8:fb:a4:20:
71:af:91:ae:f3:da:59:0e:db:69:c8:5b:36:c6:9c:
3b:36:77:d5:73:07:1a:e5:d4:a6:db:5b:85:19:60:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C4:2C:1F:A4:F2:86:ED:4B:51:2F:00:5B:C5:E3:CB:0E:E5:92:0B
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/JcQsH6Tyhu1LUS8AW8Xjyw7lkgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.83.1.0-145.83.2.255
Signature Algorithm: sha256WithRSAEncryption
11:f0:15:a6:e3:87:51:1c:68:f2:ea:af:06:b2:98:49:bb:0e:
92:d4:e1:20:5d:bf:67:f7:58:5d:ae:4c:ea:1d:86:bf:98:7d:
e2:e4:09:f0:d8:d9:9b:54:52:b3:ab:af:51:d3:ed:91:20:ee:
0f:19:ad:b3:57:75:ff:83:cc:f7:fb:d5:c2:b7:e9:7d:03:56:
c4:7d:ae:86:f7:93:ff:f8:f3:93:dd:ef:9f:8a:24:34:94:72:
3e:a6:ec:60:82:95:e5:9d:1c:ae:21:c0:ab:dd:bb:b8:83:ca:
e2:f4:d0:86:c9:3d:0b:14:3f:b5:56:57:83:f3:ad:d1:d6:3c:
62:b7:0f:94:ba:7d:9e:62:c0:1f:38:2b:63:47:91:96:fe:84:
b3:2e:3a:09:03:36:29:24:a7:12:fe:4b:65:0b:cf:5b:d0:e2:
17:5b:5e:32:72:f0:13:32:29:bb:44:6b:08:34:75:0e:42:c2:
6c:23:01:ef:98:0d:b1:4c:55:a8:68:04:0e:e1:46:6e:20:91:
ee:b6:e1:7a:99:c9:9b:84:03:e2:9a:62:ab:a2:20:f4:fd:8a:
3e:c8:98:55:47:92:23:0b:a1:63:bc:d1:da:e2:ea:54:17:23:
36:61:01:bb:8a:16:71:c9:1a:f9:44:d9:93:e0:33:93:11:4b:
d6:30:bb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:44 2024 by rpki-client on console-fra.rpki-client.org