Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CA4L-xd_HBXoF5bg0y0ca5Skzv0.roa
File: CA4L-xd_HBXoF5bg0y0ca5Skzv0.roa (raw, json)
Hash identifier: W/r1xG0WDSLfIpM/F6oZf9rLDKd8KlavxmIgp2TvwLk=
Subject key identifier: 08:0E:0B:FB:17:7F:1C:15:E8:17:96:E0:D3:2D:1C:6B:94:A4:CE:FD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B5BE8F796698ACD0D91600B9A50D6F5F1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CA4L-xd_HBXoF5bg0y0ca5Skzv0.roa
Signing time: Mon 23 Oct 2023 09:41:16 +0000
ROA not before: Mon 23 Oct 2023 09:41:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 192.124.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:e8:f7:96:69:8a:cd:0d:91:60:0b:9a:50:d6:f5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 23 09:41:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=080e0bfb177f1c15e81796e0d32d1c6b94a4cefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6f:ac:28:8b:3f:0f:79:d9:7e:1a:66:8c:5b:
4c:b5:25:5e:41:a7:5d:77:b4:49:42:e3:27:c8:ca:
8b:44:ea:40:6d:fd:e2:4a:65:39:2c:10:ef:bd:e0:
56:d3:d9:05:a6:f1:99:01:2c:7a:b6:4c:fa:e4:c7:
7b:d9:9a:b4:32:71:dc:1c:5d:93:fd:08:f3:d6:9f:
de:4b:3d:11:e0:8e:2b:76:6f:85:bc:06:47:e0:4b:
11:ab:b0:5d:85:7c:74:53:b2:6a:6c:a2:17:62:69:
25:fe:ed:e4:2d:13:33:73:6b:ac:07:89:c6:92:fb:
96:3c:2a:cf:5d:4d:c9:9b:63:58:c0:83:0c:97:e9:
e6:2d:93:21:7d:9c:a8:3b:7f:23:4e:9b:4d:d5:56:
97:e8:26:fa:81:fa:67:68:c2:05:f9:23:12:c5:73:
27:2f:ee:88:eb:e7:c8:c9:0a:44:c9:76:0e:d2:7a:
cc:ab:0d:06:c4:10:3e:ae:6e:81:7d:67:93:5d:41:
c0:36:2f:70:6e:13:1a:d7:97:25:4a:cc:06:94:53:
f2:0d:e9:27:e7:bc:87:3f:20:0d:18:22:aa:e9:64:
11:62:de:49:00:dd:72:76:61:a6:58:f0:16:01:0d:
10:20:c2:a2:f9:c2:5c:24:72:02:2e:f3:76:ed:c8:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0E:0B:FB:17:7F:1C:15:E8:17:96:E0:D3:2D:1C:6B:94:A4:CE:FD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CA4L-xd_HBXoF5bg0y0ca5Skzv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.182.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1d:de:12:a5:0d:52:02:d5:5a:85:68:33:88:e0:32:c5:94:
97:6c:90:ac:06:e6:65:3c:ae:c4:94:75:69:43:9c:a6:d5:fd:
cc:5e:8b:b3:e8:70:ea:63:cb:fc:09:97:36:6c:c3:ae:cd:6d:
85:c3:43:d7:4b:6b:53:cf:be:ae:85:c9:06:1b:e4:bb:a5:b9:
91:61:89:1e:50:17:8e:b6:ad:94:6d:5f:54:3f:69:fd:e0:e8:
86:e5:90:3f:00:3b:65:49:04:c2:74:f0:3d:d5:c1:9d:49:86:
eb:25:e1:22:26:b9:d1:42:20:8d:30:c0:b1:c5:40:e6:3c:6c:
b7:0a:8c:58:6f:cc:dd:a0:aa:fa:f8:14:1d:4b:9e:b8:1f:3a:
91:e2:e1:49:1e:f7:27:a9:33:78:ee:21:88:5e:91:c9:30:00:
8a:ec:a8:c5:10:0d:8e:24:de:89:e4:03:53:d7:2a:84:6e:98:
19:99:ba:ca:04:0c:8f:db:73:13:3c:7a:11:61:31:e4:86:23:
4e:e9:e4:2b:c1:01:42:6e:36:28:a3:e7:16:fe:9e:eb:98:ed:
0f:0e:f5:8f:8d:4e:9c:63:6f:71:47:be:25:4d:71:10:3a:7c:
dc:4f:b4:6c:5e:b6:e9:9b:49:dd:e1:46:c2:94:3a:28:f4:39:
7e:8e:5c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 16:52:30 2023 by rpki-client on console-ams.rpki-client.org