Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/82hfS2nHrVLZqlKpHINznVfQu2k.roa
File: 82hfS2nHrVLZqlKpHINznVfQu2k.roa (raw, json)
Hash identifier: //1N91u9JBKIz9X9+SIlab7QgVm4o3BnkPXtaHa3e7k=
Subject key identifier: F3:68:5F:4B:69:C7:AD:52:D9:AA:52:A9:1C:83:73:9D:57:D0:BB:69
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0189486F26D018BF2B20067AD233DD761D59
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/82hfS2nHrVLZqlKpHINznVfQu2k.roa
Signing time: Wed 12 Jul 2023 04:49:51 +0000
ROA not before: Wed 12 Jul 2023 04:49:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 141.98.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:48:6f:26:d0:18:bf:2b:20:06:7a:d2:33:dd:76:1d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jul 12 04:49:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3685f4b69c7ad52d9aa52a91c83739d57d0bb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:ed:82:03:d4:8a:d1:a1:7d:1f:38:27:23:
f1:f0:1e:fb:9a:0d:07:a3:5e:e7:b4:6a:f7:17:b5:
51:74:25:60:86:28:0d:ce:8f:4c:24:5c:ca:02:11:
8a:12:b5:20:46:2e:06:27:85:6d:6d:5f:9d:76:79:
d7:ba:af:38:5b:1d:05:3d:c9:a8:f1:ed:cd:20:72:
f6:b3:dc:50:4f:c5:20:cd:a0:b7:e7:cd:41:f1:31:
c7:88:ef:e1:1a:9d:b8:18:a2:3e:aa:f1:14:43:a6:
4d:9d:77:24:51:91:1e:de:2d:ef:ef:f2:68:f6:e6:
0d:f4:02:1a:e4:f6:b8:fb:dd:b3:62:9a:08:15:02:
b7:4e:23:37:70:c8:3b:9c:da:a0:33:41:11:9d:24:
f7:fa:b0:f6:1a:40:e9:46:e9:ce:05:97:fb:21:24:
ae:0a:57:0a:46:eb:6f:0a:f4:ac:e6:15:3b:a0:b7:
f8:00:f1:47:dc:1f:b9:cc:69:fc:af:9d:47:63:03:
62:49:b8:45:87:3a:19:22:54:35:91:42:9a:21:f7:
94:61:48:90:da:6c:0d:20:98:29:46:99:88:2a:4c:
74:db:10:c3:3e:32:d7:75:da:7e:ef:e5:28:04:39:
cb:a2:5d:a6:35:64:b8:d5:02:3c:58:4c:19:8d:fd:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:68:5F:4B:69:C7:AD:52:D9:AA:52:A9:1C:83:73:9D:57:D0:BB:69
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/82hfS2nHrVLZqlKpHINznVfQu2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.233.0/24
Signature Algorithm: sha256WithRSAEncryption
63:83:dd:a2:8d:60:71:57:be:1f:1b:f0:e5:5b:46:44:c4:b9:
49:95:33:8d:3f:06:4a:39:db:8e:82:d0:a0:67:b7:cb:68:23:
45:71:6f:62:e0:d3:27:0c:f1:c6:33:36:e2:30:10:04:9d:f2:
41:ad:4a:5e:0b:e1:53:d4:c9:fb:6d:6c:db:1a:eb:00:55:dc:
26:db:d4:c6:78:46:81:99:84:82:78:7b:51:5b:64:a0:b1:f4:
f2:15:f9:53:36:4c:6c:52:99:0b:68:fe:92:46:5c:0d:bb:7f:
e4:9d:9c:07:9e:68:dd:04:b9:fa:4e:cb:22:a0:bf:9e:05:ae:
a9:e5:d7:09:dd:14:a8:e4:b2:8e:65:5c:b9:4b:9d:64:0f:48:
52:de:c6:aa:8d:e5:8d:4e:38:05:9f:06:d2:4b:ca:ca:e0:00:
c5:01:6a:72:84:06:94:60:64:81:e2:5c:37:5a:b9:96:d9:f7:
4a:dc:fe:f2:d7:c4:56:a0:d4:93:16:02:d1:cf:6a:46:d2:f5:
57:80:f0:fc:f9:2a:8a:47:f9:5a:0e:fd:51:3b:18:13:49:b2:
08:de:ca:a9:88:bd:a3:87:07:23:2c:ba:4a:0d:ea:98:c9:aa:
8c:57:dc:cb:db:ae:df:cd:4e:f3:8f:92:55:df:cb:02:50:a4:
54:f2:07:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 06:24:36 2023 by rpki-client on console-ams.rpki-client.org