Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/nbrWrWaUrG0Ka-tkNj9vpg_x9_0.roa
File: nbrWrWaUrG0Ka-tkNj9vpg_x9_0.roa (raw, json)
Hash identifier: DlBRrqmBUowsCw8hYijLBDeXRW0EakgpUFYzxTj5dEQ=
Subject key identifier: 9D:BA:D6:AD:66:94:AC:6D:0A:6B:EB:64:36:3F:6F:A6:0F:F1:F7:FD
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F798FBD600ECF8B8463777FB57C4EE1
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/nbrWrWaUrG0Ka-tkNj9vpg_x9_0.roa
Signing time: Sun 01 Jan 2023 22:35:15 +0000
ROA not before: Sun 01 Jan 2023 22:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203268
IP address blocks: 136.144.44.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:8f:bd:60:0e:cf:8b:84:63:77:7f:b5:7c:4e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dbad6ad6694ac6d0a6beb64363f6fa60ff1f7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:a5:1a:54:35:1c:9d:c2:35:d1:42:e7:bb:
ce:f9:87:95:53:c0:66:98:dd:af:6c:f4:3e:7b:1a:
73:68:1b:59:25:ed:08:87:ec:1f:0c:c1:41:f1:12:
8a:e9:a1:74:bd:a4:53:d6:82:49:d0:3c:9f:d1:3e:
7f:2e:30:75:56:cf:1a:7d:ab:13:04:5b:f5:76:af:
e6:c3:5b:f4:62:7c:17:e4:05:ae:d1:e1:b1:3f:79:
25:55:f0:a0:ea:16:63:44:b0:f0:0f:a1:eb:95:8f:
9c:19:1b:f8:07:56:f4:a1:b0:79:50:5c:4f:97:f0:
61:eb:fc:06:b6:4a:ff:bf:58:0a:8d:9f:c1:6b:75:
5f:90:e8:de:96:ad:ba:c7:2f:f8:f4:1d:84:62:cb:
fa:23:ee:ce:86:31:a0:9a:81:3b:62:f8:56:99:d5:
f7:6a:14:ad:a2:a0:1c:f3:88:89:79:38:45:82:37:
d9:c5:03:ed:6e:28:4f:fe:6a:33:8b:b5:c1:59:f8:
d0:14:48:a4:f0:a0:ee:00:40:89:12:ec:78:2e:1b:
a4:73:c0:39:3f:9d:2e:92:8a:cc:46:82:69:3a:81:
36:23:9e:01:46:47:59:14:3d:ef:15:7c:64:6a:15:
49:c1:8f:d3:3b:a7:a8:f1:74:4e:92:e5:81:00:a1:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BA:D6:AD:66:94:AC:6D:0A:6B:EB:64:36:3F:6F:A6:0F:F1:F7:FD
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/nbrWrWaUrG0Ka-tkNj9vpg_x9_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.144.44.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:fb:5f:d7:15:e0:3e:4e:88:47:ac:c9:69:e9:07:3f:90:36:
59:57:14:84:68:73:02:9e:5d:8d:0f:b8:c5:5d:a6:4e:44:3e:
e0:8a:ee:5b:93:be:a2:60:01:f8:50:ef:a0:24:b1:4d:c8:e9:
6c:a0:b8:e9:71:86:8f:68:f6:60:7c:40:2a:dd:28:04:d3:69:
6b:e0:42:5b:ee:38:cb:e9:1a:94:73:da:12:65:9a:11:28:5f:
4b:ca:ee:25:09:63:cf:d2:fc:3a:05:31:fc:bc:65:81:79:97:
48:6c:48:91:7e:90:49:5a:f5:72:ec:88:c0:cd:7f:a7:98:06:
dd:80:ef:b6:fc:6b:35:e2:1c:0e:96:d9:a3:1f:b7:ea:05:9c:
3b:51:39:50:e2:10:db:df:31:f8:d8:f4:89:b5:e6:63:61:67:
10:54:30:fd:4c:c7:d4:7b:63:f0:70:57:10:fb:83:2d:5a:ff:
3c:e2:4e:ba:2a:89:90:00:1c:4a:32:45:10:35:55:3c:7f:4e:
eb:f6:39:04:90:21:27:39:92:ff:b1:80:81:19:75:00:fa:f6:
ab:86:19:94:3b:c8:5e:be:6e:9b:df:8e:64:f2:69:ad:31:96:
54:8c:3e:13:2d:d0:e7:e6:be:5c:16:13:e5:b5:18:84:b6:0c:
97:c1:f8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:43 2024 by rpki-client on console-ams.rpki-client.org