Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/1J2yH1N_fg5ZYhmEGzbmjiGpZ_M.roa
File: 1J2yH1N_fg5ZYhmEGzbmjiGpZ_M.roa (raw, json)
Hash identifier: kIfcH6j7w4CWrJyc3KdqrwHMqtgXk0mLL7SYFQACyu4=
Subject key identifier: D4:9D:B2:1F:53:7F:7E:0E:59:62:19:84:1B:36:E6:8E:21:A9:67:F3
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0186C6BBAC0AF271A7BC1372ED323D2FAC6A
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/1J2yH1N_fg5ZYhmEGzbmjiGpZ_M.roa
Signing time: Thu 09 Mar 2023 14:17:13 +0000
ROA not before: Thu 09 Mar 2023 14:17:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213305
IP address blocks: 192.144.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:bb:ac:0a:f2:71:a7:bc:13:72:ed:32:3d:2f:ac:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Mar 9 14:17:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d49db21f537f7e0e596219841b36e68e21a967f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:df:1a:54:b7:c4:09:cd:0b:a1:81:3c:b6:
41:2a:4f:ff:fd:63:16:03:3c:b0:53:66:d6:01:01:
dd:bb:f2:3e:65:e3:f7:2e:9d:4e:01:a9:e7:19:10:
60:c9:c0:0e:37:24:d2:be:c3:e0:bc:b5:df:86:15:
ae:5c:2c:aa:c6:7b:08:c5:ca:45:ea:83:c7:65:b9:
df:17:6b:4b:5d:da:1e:3b:d0:84:9f:db:dc:be:fb:
98:a3:60:4f:dd:81:a6:1c:93:39:41:61:89:3a:9a:
a4:36:41:d0:ea:6c:db:0d:39:85:e3:cd:23:b2:1e:
15:2e:07:7e:c8:24:85:4a:73:90:ac:df:63:c9:ab:
0e:15:69:6e:94:69:2c:c4:e8:f6:6b:f5:1e:a8:e8:
ae:18:48:42:dc:59:77:8c:65:d1:b1:49:e0:b5:30:
e4:7f:c7:c8:61:d3:23:4d:51:20:4b:99:99:36:52:
a1:dc:99:d4:4d:db:3d:0d:d9:fb:80:60:90:4f:f4:
05:34:df:37:e1:a8:e9:f2:8a:25:a4:5f:aa:e1:94:
1a:51:e7:5e:af:b9:12:52:6e:53:7a:49:e0:c5:0d:
90:46:4f:4a:eb:b8:da:44:bd:4e:59:d7:72:5b:1f:
9b:fd:8e:91:df:9b:0d:5d:69:ff:cb:2f:d0:ea:06:
8b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9D:B2:1F:53:7F:7E:0E:59:62:19:84:1B:36:E6:8E:21:A9:67:F3
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/1J2yH1N_fg5ZYhmEGzbmjiGpZ_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.32.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:73:7a:47:25:72:7e:b6:c4:6e:67:59:45:ad:65:ff:a0:72:
68:12:c1:1a:33:51:6c:b0:91:89:d9:87:c2:e7:72:1d:c1:bb:
20:d3:fc:ae:8a:6e:44:cd:94:52:fd:fb:bc:60:79:0c:66:2c:
9e:ce:0d:ff:43:91:5e:81:ab:d0:2b:83:4d:b4:00:d8:be:6f:
45:42:a4:ac:36:a0:0b:2e:a2:14:4b:8f:10:03:0d:43:88:7a:
68:b2:bd:57:4b:58:4c:14:b0:76:21:cf:2f:47:6b:0c:27:92:
09:9f:92:a1:84:f5:75:d3:72:7c:7c:e1:f6:43:22:a8:b3:a5:
4e:44:ec:f7:63:ef:5e:30:fd:f2:e5:8f:31:f4:7b:60:44:b9:
5a:2f:61:f9:06:ec:6c:f8:77:90:8b:03:68:cd:2c:28:01:46:
d4:36:3c:e8:bf:a4:86:b3:64:02:43:1b:b4:5e:d6:87:02:d1:
af:11:f0:6e:95:d3:5f:bb:42:51:ae:93:20:a6:a0:b3:6f:e7:
4c:2b:ec:44:44:cf:a4:b2:ce:7b:84:53:13:1a:40:46:5d:80:
ee:a7:8b:e2:07:84:d5:44:12:1a:53:d6:87:06:4b:6e:11:18:
e8:e7:01:7f:d1:5f:97:cd:a8:cb:f5:92:03:93:72:7c:8a:dc:
86:b8:95:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 11:46:00 2023 by rpki-client on console-ams.rpki-client.org