Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/frZTpowwhlx2OqYyyULQGeLWj_U.roa
File: frZTpowwhlx2OqYyyULQGeLWj_U.roa (raw, json)
Hash identifier: ntQYOM6YehDAmIc4sa+SvNCYXU08j3tsEAwzcwAwyxM=
Subject key identifier: 7E:B6:53:A6:8C:30:86:5C:76:3A:A6:32:C9:42:D0:19:E2:D6:8F:F5
Certificate issuer: /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Certificate serial: 0185728C725DC27F0AF9455EDBCF13C8FBA2
Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/frZTpowwhlx2OqYyyULQGeLWj_U.roa
Signing time: Mon 02 Jan 2023 12:54:45 +0000
ROA not before: Mon 02 Jan 2023 12:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15924
IP address blocks: 159.253.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:72:5d:c2:7f:0a:f9:45:5e:db:cf:13:c8:fb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Validity
Not Before: Jan 2 12:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7eb653a68c30865c763aa632c942d019e2d68ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:67:39:3d:0e:a2:8c:3c:2a:67:65:b1:e7:
67:87:29:be:19:cd:39:c5:58:02:53:1f:cf:ce:02:
52:63:db:42:80:19:01:3f:22:22:26:aa:45:4e:56:
ec:6b:58:ab:f6:b6:18:fe:2f:03:85:18:54:ae:77:
ba:5c:b1:cd:39:d9:ae:18:ce:fc:f5:fa:12:ff:5d:
89:d7:b0:21:83:be:01:fc:86:c7:b8:72:b3:00:ad:
66:2a:9f:c1:09:36:5d:8d:98:34:14:25:09:bc:70:
5f:cf:c7:2f:55:71:69:bd:eb:90:02:de:b4:28:8c:
63:30:15:24:42:38:18:ff:3b:9c:58:e5:0d:76:79:
f1:7b:17:d1:b0:b1:d9:13:cd:65:7e:a0:df:a2:c0:
36:e3:6c:d5:77:8f:3b:82:ea:dd:3d:3d:a7:8b:e6:
98:a0:7e:27:e4:18:57:9f:b2:ab:63:2e:43:e1:64:
a8:32:90:e9:93:36:86:a9:82:f5:d7:87:1f:09:af:
15:2f:fa:69:f6:7b:2e:ce:71:21:5e:05:08:f5:d9:
97:d5:eb:4f:9b:c4:13:e0:84:a7:e2:3a:70:c6:d4:
fd:f8:fe:99:5e:fd:d0:ac:e4:59:dd:d8:b6:4d:97:
ac:ef:4c:bd:7b:68:27:85:14:d2:81:68:5d:9c:a4:
a6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B6:53:A6:8C:30:86:5C:76:3A:A6:32:C9:42:D0:19:E2:D6:8F:F5
X509v3 Authority Key Identifier:
keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/frZTpowwhlx2OqYyyULQGeLWj_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.85.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:20:94:39:8d:b3:81:fb:b8:25:af:dc:7d:dc:56:7e:f6:0b:
e1:6f:4b:58:41:b7:97:3d:89:ea:17:11:d6:8a:db:3d:f7:44:
d6:33:2c:c2:4b:93:bc:34:dc:8a:0d:eb:67:b7:9f:16:70:b5:
80:23:1c:ab:15:ee:70:2e:f5:a2:a5:e7:30:d1:65:c1:62:2f:
fa:29:a2:b4:48:17:52:3c:cc:f1:b7:60:05:1c:15:21:d8:39:
52:91:a0:8d:f8:19:23:e0:27:e9:70:f9:4f:d3:18:df:b2:3a:
9c:9b:d0:03:a9:7d:88:c7:f7:4e:dd:0a:41:91:32:7a:c5:76:
05:b7:de:f3:a7:1e:fa:3e:7c:3d:62:9a:03:74:fd:07:f9:ad:
5d:ec:e3:22:e5:a2:78:4c:c3:2a:73:4e:e6:a4:d7:5d:45:53:
c5:d5:ec:db:a4:81:94:dd:22:9c:c3:28:83:79:f3:15:a0:c3:
b5:a2:f2:d6:61:82:57:ad:05:ad:f5:d5:59:1b:34:a1:ac:4a:
d2:78:78:c1:1c:73:0e:4d:ed:32:1e:92:d7:e6:8f:2a:48:a6:
68:cf:ef:ab:9f:7f:73:85:b1:8a:e4:82:9a:7e:2f:e6:1c:cd:
35:4f:f0:b0:91:73:f2:07:c4:37:bd:7a:aa:cb:94:0e:e8:f7:
59:af:b1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:18 2024 by rpki-client on console-ams.rpki-client.org