Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_kV5D4H5eaim9W4U383--xeboPw.roa
File: _kV5D4H5eaim9W4U383--xeboPw.roa (raw, json)
Hash identifier: bH3tgWbIFKhEQi5rrsBtbv53Xuw8Lb+REiFtt1O7rGM=
Subject key identifier: FE:45:79:0F:81:F9:79:A8:A6:F5:6E:14:DF:CD:FE:FB:17:9B:A0:FC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A892C3586B04651C9EC51791E57369E42
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_kV5D4H5eaim9W4U383--xeboPw.roa
Signing time: Tue 12 Sep 2023 11:34:50 +0000
ROA not before: Tue 12 Sep 2023 11:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 192.145.28.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:89:2c:35:86:b0:46:51:c9:ec:51:79:1e:57:36:9e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 12 11:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe45790f81f979a8a6f56e14dfcdfefb179ba0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:25:ba:e0:46:7b:eb:0b:3c:e5:2c:ca:ad:
0c:4d:5b:56:62:60:9b:ca:d1:f1:09:74:e3:ce:49:
11:37:2b:a8:e2:9e:8f:20:be:b3:7b:a2:28:e3:66:
14:80:96:96:36:bc:09:bb:7f:e5:0e:ce:4b:08:2e:
9d:b0:7f:6a:79:7b:43:4f:82:ed:f9:ad:27:7a:3d:
53:8d:d8:e3:2e:4e:68:07:d6:a7:63:5c:5a:29:5c:
ae:67:d8:b5:70:6c:4a:a7:df:7f:10:b3:3c:66:f7:
c8:81:a6:77:fb:ff:3b:ad:b8:70:2f:78:25:f3:35:
3a:27:89:00:2d:5f:a3:b8:90:5e:57:ee:a9:8b:4e:
b8:cb:0f:e9:f6:c7:de:74:74:79:70:d1:ac:50:f6:
37:a7:dc:06:87:90:40:4e:0d:7a:4b:60:0b:0f:cc:
a5:df:67:30:d1:bd:60:80:c7:48:60:38:b2:2c:4d:
e3:33:cf:32:d2:fe:7b:b5:aa:98:c9:9f:8e:0f:f3:
32:64:d0:fb:51:b8:d3:1a:16:0c:32:38:de:f0:55:
c9:71:2f:42:a5:bc:0c:00:d4:ea:79:b9:b7:3a:91:
9f:34:89:ff:8b:8d:a9:6e:b4:d7:2b:76:18:55:df:
70:89:cb:0f:f5:81:a9:37:a2:c4:e9:b8:4c:ca:7f:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:45:79:0F:81:F9:79:A8:A6:F5:6E:14:DF:CD:FE:FB:17:9B:A0:FC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_kV5D4H5eaim9W4U383--xeboPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:1a:1b:3f:50:f7:c5:59:4c:66:db:ac:c7:31:13:f7:32:76:
57:3c:44:d8:57:01:90:87:72:d0:fc:c1:a0:fd:3a:b3:b0:b5:
14:71:10:c0:9a:cd:a5:39:16:ad:c6:41:91:03:79:18:e1:37:
3c:57:28:0b:d5:ec:82:55:e7:11:fd:15:68:3c:ee:16:d2:11:
f1:c4:b2:dc:da:de:a0:d7:84:1a:2e:99:d1:d9:9e:57:9f:d4:
11:c2:bf:09:58:83:cb:42:2f:20:82:7d:4f:8b:72:44:2f:2c:
ba:42:40:91:f1:0f:b8:b0:84:9f:a5:ee:1d:03:38:37:1d:30:
6a:d9:88:6c:58:2f:3b:c2:d5:1b:b6:c7:d8:c2:c4:8c:e2:77:
74:73:18:cd:96:cd:05:24:71:6d:aa:45:21:27:f9:0d:a8:df:
a3:12:a3:85:cd:cc:f2:79:b7:d6:44:53:aa:68:ab:d1:37:8a:
b7:6a:2e:11:47:7e:3e:8f:fd:ea:59:82:69:c8:84:75:d8:ae:
f6:9f:52:09:a4:b0:f1:bb:0e:b6:d7:6f:a0:c6:18:08:b2:ea:
44:a0:87:8f:d7:84:a2:8d:3f:af:cb:80:a7:10:1f:16:62:16:
4c:03:1d:27:6f:70:52:3f:79:99:14:48:5b:ab:0a:0d:68:81:
bd:a9:35:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 09:35:40 2023 by rpki-client on console-ams.rpki-client.org