Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/AGlFttT_TuQ6wbuxR3Mk5ShYWvY.roa
File: AGlFttT_TuQ6wbuxR3Mk5ShYWvY.roa (raw, json)
Hash identifier: LXH85ufTMO0+GUvzaZ6x9TjdkIZkU/IC4VRjXtnrtYs=
Subject key identifier: 00:69:45:B6:D4:FF:4E:E4:3A:C1:BB:B1:47:73:24:E5:28:58:5A:F6
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 0185711E688EE752DFC18150124E368F8A01
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/AGlFttT_TuQ6wbuxR3Mk5ShYWvY.roa
Signing time: Mon 02 Jan 2023 06:14:56 +0000
ROA not before: Mon 02 Jan 2023 06:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142111
IP address blocks: 2.59.182.0/24 maxlen: 24
45.156.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:68:8e:e7:52:df:c1:81:50:12:4e:36:8f:8a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Jan 2 06:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=006945b6d4ff4ee43ac1bbb1477324e528585af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7c:86:87:e1:a7:c9:f1:3b:82:6e:c0:e5:0e:
94:e3:b8:90:7e:40:52:d1:e7:01:de:5e:e2:9f:a5:
dd:3c:b1:13:84:83:a3:57:62:0e:fd:df:98:52:d9:
80:68:a4:a0:af:6f:fd:63:6b:34:0b:bb:46:76:00:
a0:85:93:70:90:a7:57:97:e5:07:64:b0:60:e3:34:
e5:8e:f2:92:cc:59:68:bd:9d:04:4f:b8:77:76:45:
09:e0:b7:a3:52:ed:b3:53:3e:d1:85:91:3e:30:7d:
81:0f:20:b2:f9:93:05:cf:e4:12:42:fb:bb:02:9a:
aa:e5:cc:96:42:4c:3e:88:bf:a8:13:5d:6f:4d:bd:
f3:f9:15:df:ae:68:1e:6d:5b:fa:57:75:13:89:64:
5b:a7:a6:54:8c:84:0c:dd:c9:06:ac:83:85:b9:89:
d2:c3:a0:b1:5f:7d:fa:44:cf:5c:4b:d6:d4:60:6f:
83:12:c2:70:82:01:bf:e4:c3:7f:15:be:cb:dd:ae:
ec:27:85:be:45:f8:9f:96:fe:ab:b2:14:87:6f:fe:
a5:77:ba:f0:ac:e5:4e:65:b7:b7:86:7c:c0:c6:88:
8b:1f:ef:f2:7d:08:b0:d8:31:a5:20:8a:ab:34:0e:
76:a4:49:6f:86:41:c1:a5:6e:1b:9c:cf:09:9e:16:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:69:45:B6:D4:FF:4E:E4:3A:C1:BB:B1:47:73:24:E5:28:58:5A:F6
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/AGlFttT_TuQ6wbuxR3Mk5ShYWvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.182.0/24
45.156.146.0/24
Signature Algorithm: sha256WithRSAEncryption
27:5b:bd:c2:db:54:7f:a4:c7:36:0a:c5:20:7d:5d:11:43:90:
87:9f:5b:8e:20:88:52:23:83:b9:e4:ed:73:a3:a5:85:07:a6:
3a:d6:5c:9f:a2:8e:b1:32:66:d8:47:05:6e:97:39:7e:03:43:
0e:5b:e0:71:e2:46:bc:88:ff:1b:9d:2e:18:de:f9:30:ab:9d:
6d:34:cb:c7:7d:0a:61:59:89:61:d0:2d:62:f3:1e:0e:c3:fc:
de:87:e4:a6:63:bd:72:40:f6:84:1b:4d:62:4d:bf:5c:7d:51:
fe:2c:56:59:3d:64:55:ec:e0:4a:c3:71:7d:d3:b8:b5:61:1c:
25:e2:77:90:a1:35:9a:24:2b:5a:82:ea:7a:62:66:a8:44:9b:
a5:c5:22:a4:d0:25:67:bf:c0:c7:65:2f:d3:a1:7e:f0:03:15:
bf:3b:ef:45:2c:d3:e2:76:ca:94:fb:90:3e:5b:7f:cc:87:fd:
96:a8:1b:2a:f1:34:f7:5b:c6:7b:65:38:cf:18:28:b1:b5:da:
1b:25:4b:55:22:96:dc:75:05:81:0d:77:6a:01:78:07:1a:ae:
f1:7b:6f:7d:fd:e9:6b:ca:9b:6d:1e:f8:d7:60:4a:4d:72:05:
56:4a:1b:a1:5a:b8:c6:d6:83:c0:6c:fc:be:a1:08:36:ea:57:
2b:d5:f1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:03 2023 by rpki-client on console-fra.rpki-client.org