Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/4nGubeh9v7Kxh-CQJ9fYTO4-Ius.roa
File: 4nGubeh9v7Kxh-CQJ9fYTO4-Ius.roa (raw, json)
Hash identifier: KDFsAJNgFybovx/4YNVAtxuwN6PRZICEV1J/pxBtSR0=
Subject key identifier: E2:71:AE:6D:E8:7D:BF:B2:B1:87:E0:90:27:D7:D8:4C:EE:3E:22:EB
Certificate issuer: /CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Certificate serial: 01857315F459313DBB851506D0E4F26C5837
Authority key identifier: 48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/4nGubeh9v7Kxh-CQJ9fYTO4-Ius.roa
Signing time: Mon 02 Jan 2023 15:24:56 +0000
ROA not before: Mon 02 Jan 2023 15:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200981
IP address blocks: 148.64.57.0/24 maxlen: 24
148.64.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:f4:59:31:3d:bb:85:15:06:d0:e4:f2:6c:58:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Validity
Not Before: Jan 2 15:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e271ae6de87dbfb2b187e09027d7d84cee3e22eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:47:d2:ed:4b:2e:02:9b:7f:16:a7:ac:c3:aa:
4d:18:ab:24:c3:96:5f:b1:56:06:b2:36:0a:8d:fa:
bf:cf:f4:2a:b0:9d:d9:dd:e2:29:48:1c:3c:10:d9:
b9:69:02:7f:a8:74:70:67:2e:93:1d:b9:70:a8:dd:
d6:0a:2e:c3:6f:18:0d:42:24:80:d2:8c:f4:b8:27:
35:58:02:9e:35:c2:e7:58:2b:cb:d8:1f:8f:2b:5e:
2a:78:76:47:e2:e5:9b:ac:3d:9c:a4:8b:ef:25:2c:
dc:e1:d3:d1:bc:6d:35:0a:98:ea:a6:2b:25:41:f4:
ee:44:0c:c9:5a:c9:f4:1d:98:c1:35:2d:df:28:f3:
93:60:66:d0:e7:ee:b5:de:db:75:5d:7c:0f:87:9d:
f0:b9:81:4a:69:0e:ba:c6:4b:5a:0e:f8:1c:12:57:
e8:5e:8a:fe:3d:91:97:1c:67:ce:48:60:86:20:c0:
37:28:b2:4a:29:ac:ff:2a:0f:0a:b6:e7:4b:df:1a:
2b:b6:e5:13:fa:a3:5c:fd:2e:5a:6c:e3:7c:82:79:
3e:af:42:08:e7:8b:f2:66:c2:56:5d:9b:d6:57:00:
01:ae:ae:db:dc:09:b6:3e:1e:b0:2d:4d:70:35:8b:
5e:12:44:2f:12:dc:da:12:ab:15:69:dd:23:d7:df:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:71:AE:6D:E8:7D:BF:B2:B1:87:E0:90:27:D7:D8:4C:EE:3E:22:EB
X509v3 Authority Key Identifier:
keyid:48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/4nGubeh9v7Kxh-CQJ9fYTO4-Ius.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.64.56.0/23
Signature Algorithm: sha256WithRSAEncryption
10:49:fc:a5:05:b7:0a:ae:20:20:b8:f5:83:a7:fd:4b:99:06:
4f:78:31:c6:7b:2b:42:c7:e8:dc:b7:4a:32:0c:5f:6a:a1:3f:
81:1d:ad:c2:a3:87:13:4b:39:0a:37:5f:10:5d:c4:4d:cd:ea:
96:aa:04:8a:2f:8a:bb:ea:c8:49:f1:97:90:b9:a1:ad:10:34:
43:57:88:ad:d1:c8:4d:ca:c5:57:fe:31:76:b9:1c:2d:c5:d3:
5a:96:b5:f4:68:42:02:59:ff:6e:71:83:8c:28:69:e0:15:d6:
b9:d7:55:53:55:0d:a5:9e:ed:b9:34:14:04:22:58:5e:83:50:
e3:f4:da:42:09:fb:5b:da:1c:49:59:ae:10:47:36:ed:33:a8:
52:c8:a5:8c:c1:6e:6c:f5:92:8f:a2:28:aa:d6:23:25:5d:f7:
be:4c:5f:4e:c6:d2:b1:e4:40:5b:4d:15:92:6f:90:28:c3:4f:
e6:03:40:eb:3f:a4:ee:d0:5c:3d:6b:fc:9b:0b:c0:b5:27:eb:
98:36:8a:e9:f7:9c:0c:d1:6a:03:97:b1:55:8e:74:cf:e5:cd:
06:07:9e:37:a5:e2:2b:53:0c:c7:ee:46:f6:7c:2a:3e:52:56:
5a:12:5a:89:4c:c8:eb:1e:0a:a4:04:9d:c1:81:4e:65:0a:a8:
11:cb:90:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:40 2024 by rpki-client on console-fra.rpki-client.org