Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/cpGZaVgsyQTRSZKl9tMzdndiI7Q.roa
File: cpGZaVgsyQTRSZKl9tMzdndiI7Q.roa (raw, json)
Hash identifier: Lo/Woe3kInxTQa6YyNHQskrUKV1DLXfklbTc3wU3FCE=
Subject key identifier: 72:91:99:69:58:2C:C9:04:D1:49:92:A5:F6:D3:33:76:77:62:23:B4
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 0185726B75FFF7C9449A00B0F6751EA77222
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/cpGZaVgsyQTRSZKl9tMzdndiI7Q.roa
Signing time: Mon 02 Jan 2023 12:18:42 +0000
ROA not before: Mon 02 Jan 2023 12:18:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207959
IP address blocks: 152.89.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:6b:75:ff:f7:c9:44:9a:00:b0:f6:75:1e:a7:72:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 12:18:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72919969582cc904d14992a5f6d33376776223b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:bd:07:b2:e7:35:9f:45:01:cc:31:da:5b:
61:69:6c:ac:f6:7b:4d:61:49:53:e4:67:f5:71:f4:
b2:3a:25:8f:c4:a5:f5:cd:24:55:90:7e:10:6c:5d:
ec:87:c5:4f:22:66:9e:ad:24:fa:84:d7:1c:9f:bf:
e7:f2:84:d9:d9:52:78:62:4d:85:27:cd:83:41:c2:
71:87:ea:ac:5f:14:23:54:23:0f:a1:cf:2e:4b:76:
61:5c:0c:8e:c5:23:f3:90:de:76:28:e8:8d:10:7b:
93:0b:54:3e:e2:39:f3:33:d5:f0:ee:e6:eb:c6:c7:
98:5b:97:9c:5e:85:c3:41:6f:9d:f3:9a:41:c0:c1:
4f:cc:1a:da:a7:a0:e6:5f:9c:b4:55:5f:b3:58:5c:
19:e0:17:33:2c:d2:ca:8d:af:bc:60:0b:9a:9c:fd:
4c:15:3e:9f:b1:91:e5:ef:55:15:26:71:56:6a:c4:
be:cb:30:b7:02:ba:23:2b:ac:b5:a2:10:50:9d:05:
4c:d2:78:1b:ed:2f:e4:67:d3:7a:4f:51:6c:fe:9d:
c9:f6:61:d6:02:d5:01:fc:55:08:41:fe:5b:29:9b:
48:00:a4:f2:00:50:4b:bc:2d:f0:5d:1f:61:db:4d:
db:68:b3:38:a8:ec:b3:07:19:ea:73:67:ff:1f:d9:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:91:99:69:58:2C:C9:04:D1:49:92:A5:F6:D3:33:76:77:62:23:B4
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/cpGZaVgsyQTRSZKl9tMzdndiI7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.168.0/24
Signature Algorithm: sha256WithRSAEncryption
56:cf:d5:19:91:dc:02:5e:ad:12:4d:5f:d9:47:c0:c9:c8:5c:
98:f3:e6:ab:b8:17:9b:ee:19:8a:d9:08:86:a3:d3:11:a8:40:
9d:c6:5b:dc:fc:c1:93:ae:7f:7b:5f:a0:b0:70:9c:d1:b6:db:
fd:3d:c2:e0:4b:44:49:9b:2d:a2:1e:05:cd:e7:ef:10:26:e7:
49:4d:2b:e6:b8:dc:bd:be:fe:59:76:dc:50:ac:04:9e:ff:fc:
23:5a:c1:40:67:1d:5b:17:2f:5a:33:3c:79:51:12:a3:34:ff:
36:48:e5:d4:1f:e4:16:3a:c6:73:b4:c7:95:70:42:4c:8a:31:
f4:d6:6c:5a:6d:ea:4e:91:21:c3:21:33:5e:06:df:11:66:24:
37:54:40:fc:a8:84:7e:c4:1f:74:4c:23:35:71:12:fd:47:b6:
73:b9:56:54:d1:fa:3b:c5:0a:64:c3:8c:99:61:f2:39:26:f0:
de:bc:4c:05:49:d9:e8:eb:18:a9:db:35:a9:89:42:c7:08:a4:
6f:95:1b:10:d2:82:ca:25:e8:6f:2b:fb:02:71:9e:2e:db:96:
94:16:3f:c5:c1:14:dc:51:e0:10:ba:c9:38:40:c8:ce:ea:ec:
37:f8:64:53:9d:79:b2:80:b9:2b:04:53:e9:52:ed:e1:33:02:
c8:2b:f3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:53 2023 by rpki-client on console-ams.rpki-client.org