Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H6Xr2BkRvKtGEP_SdTTE672y82Y.roa
File: H6Xr2BkRvKtGEP_SdTTE672y82Y.roa (raw, json)
Hash identifier: ODSHpoWblBwBHrIx4wCx1lM5N3iE7zIxPDl5SyVbMpc=
Subject key identifier: 1F:A5:EB:D8:19:11:BC:AB:46:10:FF:D2:75:34:C4:EB:BD:B2:F3:66
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188AFACED50C6586E334E19A18273D8CA17
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H6Xr2BkRvKtGEP_SdTTE672y82Y.roa
Signing time: Mon 12 Jun 2023 12:55:25 +0000
ROA not before: Mon 12 Jun 2023 12:55:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198652
IP address blocks: 147.78.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:ac:ed:50:c6:58:6e:33:4e:19:a1:82:73:d8:ca:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 12 12:55:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fa5ebd81911bcab4610ffd27534c4ebbdb2f366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7a:26:01:16:1d:b7:f1:3a:bd:17:0a:ad:43:
6d:d2:e0:2a:1f:b7:f0:fb:59:e2:4b:07:dd:98:ad:
24:00:84:8f:73:1a:74:82:d5:eb:c6:f1:03:10:1c:
d7:35:41:c1:19:04:7b:c6:59:34:a8:1e:18:05:45:
86:83:0e:bd:ee:a9:6d:e0:69:a8:4d:db:b4:02:a9:
2c:be:d9:55:11:5a:fa:fd:e0:53:6b:23:d4:4b:12:
2e:bb:b4:e5:10:43:67:d3:97:6d:50:de:86:8d:66:
02:13:d6:23:a5:1a:f4:f1:fa:6e:28:9c:03:c5:b3:
d6:77:6d:ae:8b:40:6e:bc:ee:19:bc:0d:12:04:f1:
55:9e:eb:6b:7f:0a:74:fc:b1:79:59:0c:0c:be:f5:
61:1b:2f:9a:0c:70:07:5e:1b:4e:be:e3:a3:09:56:
03:fa:9b:a3:0f:3f:41:f4:f5:1e:71:78:ac:e6:3d:
03:30:a4:50:11:6b:60:4c:a9:b0:3b:21:1b:ed:67:
d4:9c:d6:4b:97:39:9a:ee:d8:88:90:c5:22:c6:61:
17:32:a4:b1:45:e8:54:08:56:67:2d:24:b3:cb:f4:
16:b7:70:a4:cb:7e:96:35:c1:e3:7f:a7:74:e6:52:
0b:cb:35:ec:f1:55:eb:e4:2a:90:62:1d:77:b7:73:
14:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A5:EB:D8:19:11:BC:AB:46:10:FF:D2:75:34:C4:EB:BD:B2:F3:66
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H6Xr2BkRvKtGEP_SdTTE672y82Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.102.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:95:36:3a:d9:c4:cc:d8:71:b3:4c:5c:7e:ee:92:25:18:4e:
14:ab:28:0f:32:da:db:16:16:38:72:df:3b:77:e2:02:36:93:
c2:21:f9:ca:df:09:f0:6d:b5:5b:11:b5:98:80:7c:0e:bf:31:
a2:65:97:93:ac:b1:ce:34:32:ed:a7:07:f5:3b:96:6c:25:64:
cb:5a:59:50:69:1e:7c:c2:4e:bf:f5:0c:32:79:60:52:cf:fa:
68:64:9c:f4:ae:12:67:75:67:5e:8f:c1:d8:58:f0:96:76:61:
42:97:13:71:94:10:fd:5d:7d:d7:5e:90:65:3e:51:56:97:16:
57:3c:e0:b3:b0:c3:0e:86:2c:9e:e6:36:cf:a9:a3:be:15:90:
fd:0d:b0:63:a2:1e:53:98:ac:5f:b5:b1:19:0d:fa:8c:b3:7a:
bc:14:ec:87:47:cb:83:db:17:1c:c5:ee:2f:17:d4:c4:6c:09:
b0:bc:ab:11:f8:cc:60:91:e4:9d:65:a3:b2:e2:51:9d:02:15:
b1:a0:e5:2e:24:6e:3f:57:19:48:86:ad:2f:43:62:ab:a9:09:
3b:f3:d6:ac:6a:1d:cb:40:90:c7:db:ad:19:82:58:fd:7a:4f:
0c:be:94:d3:f9:06:53:36:9c:43:de:37:45:aa:bc:4d:ae:cc:
f7:52:1f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org