Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/kbPcnODoPo6WG9iXD_9Wg4IZgyc.roa
File: kbPcnODoPo6WG9iXD_9Wg4IZgyc.roa (raw, json)
Hash identifier: rJN2iA8UmrkmjCGoUxfRuMhj2QM7WYWYjsR0yqalo78=
Subject key identifier: 91:B3:DC:9C:E0:E8:3E:8E:96:1B:D8:97:0F:FF:56:83:82:19:83:27
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01856F94DE5E6FD0CB035C8734A3C0EE40C3
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/kbPcnODoPo6WG9iXD_9Wg4IZgyc.roa
Signing time: Sun 01 Jan 2023 23:05:05 +0000
ROA not before: Sun 01 Jan 2023 23:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149440
IP address blocks: 198.105.127.0/24 maxlen: 24
198.105.126.0/24 maxlen: 24
155.254.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:de:5e:6f:d0:cb:03:5c:87:34:a3:c0:ee:40:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 23:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91b3dc9ce0e83e8e961bd8970fff568382198327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:66:5a:53:c1:c3:d3:2c:5c:45:68:de:4c:
f8:ad:c4:c9:d1:7d:1c:0a:6f:07:e7:22:e3:f1:e9:
37:3d:f4:48:50:34:eb:c2:f2:ec:79:6f:47:68:ad:
66:9f:6c:16:64:a8:56:ad:42:de:36:ed:99:27:5f:
df:d3:f2:a9:29:46:1b:e7:57:42:cf:a2:02:5a:05:
58:97:bc:33:11:9b:e0:85:57:fd:5b:82:76:31:13:
5e:d3:94:22:6b:59:b7:63:6f:fc:3e:1c:20:31:51:
7e:6e:12:ef:3d:a4:75:af:da:9b:19:e3:56:39:a1:
bb:65:5d:4b:2b:43:29:ab:74:aa:1c:06:ba:d6:b9:
12:3c:9f:3a:0b:79:67:89:7f:50:d8:25:52:d2:b9:
2f:b9:35:48:97:8c:b4:6b:b3:ff:3c:51:87:54:12:
95:0a:2c:7c:e4:41:53:4c:68:d3:64:ce:60:ae:d7:
7d:98:31:1e:3e:db:1e:98:8d:ce:3d:be:54:a5:ea:
f2:09:dd:ae:bb:f6:f8:aa:d6:85:56:b3:36:45:e2:
bb:b4:0b:12:e6:31:07:9c:c2:34:e8:50:50:0f:2b:
22:9a:5c:71:b8:cb:92:93:4a:dd:87:5e:c0:66:b8:
46:4b:84:62:c2:19:83:7e:b0:3e:24:2c:cd:aa:1c:
51:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B3:DC:9C:E0:E8:3E:8E:96:1B:D8:97:0F:FF:56:83:82:19:83:27
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/kbPcnODoPo6WG9iXD_9Wg4IZgyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.254.60.0/24
198.105.126.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:2d:26:b2:8c:32:3f:5e:a5:e5:65:e4:10:43:34:8a:bb:a8:
ce:1d:2f:da:6e:0f:b6:d0:53:c8:d5:d6:01:a0:aa:3c:17:79:
71:19:57:a3:fd:62:74:78:e5:b2:65:c3:67:3f:96:bf:12:33:
b2:ce:35:f0:8f:e0:b8:4f:b6:89:5d:77:f5:e2:ab:73:7a:ab:
64:8e:ba:c1:7d:4b:1d:1b:74:3c:47:5d:58:fe:bf:f8:41:e4:
83:c0:95:2b:36:b7:f4:26:3d:63:75:f3:be:fd:44:af:ce:c3:
37:33:10:05:9e:ca:76:7f:41:be:a6:97:d9:2a:84:35:6f:3a:
01:ae:d5:c3:58:e8:e1:e4:b7:d9:31:41:1c:db:38:f0:be:76:
59:7e:14:32:bc:6c:ac:e2:10:40:44:8a:d4:06:1d:3a:ea:ca:
1a:8c:be:4a:7e:1d:1a:0f:8e:9f:f2:cc:19:43:88:ce:a2:05:
88:65:87:43:1e:91:56:59:3a:22:8e:88:c9:06:85:ec:b5:78:
08:82:f5:3e:4d:25:f6:4c:49:eb:f8:9a:8a:c0:90:9d:02:1c:
ba:31:dc:7f:7d:4c:f9:8d:55:24:fb:1a:5a:fa:3d:f7:4a:27:
e0:f9:df:8f:dc:0c:6d:82:ea:77:07:91:99:9d:db:87:46:70:
71:19:a0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:08 2024 by rpki-client on console-fra.rpki-client.org