Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/15aLN4CPzeaUGwJkqYOwkqvnWAg.roa
File: 15aLN4CPzeaUGwJkqYOwkqvnWAg.roa (raw, json)
Hash identifier: 1swwnlrwDIUga4qSwHw6px/JS2NtmxdZoAEuf7TC4Rw=
Subject key identifier: D7:96:8B:37:80:8F:CD:E6:94:1B:02:64:A9:83:B0:92:AB:E7:58:08
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F023EC08545750792FD3A81A7D0D9C1
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/15aLN4CPzeaUGwJkqYOwkqvnWAg.roa
Signing time: Sun 01 Jan 2023 20:24:56 +0000
ROA not before: Sun 01 Jan 2023 20:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35478
IP address blocks: 159.148.216.0/24 maxlen: 24
159.148.218.0/24 maxlen: 24
159.148.222.0/24 maxlen: 24
159.148.195.0/24 maxlen: 24
159.148.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:3e:c0:85:45:75:07:92:fd:3a:81:a7:d0:d9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7968b37808fcde6941b0264a983b092abe75808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:68:eb:ca:b4:7b:1a:80:d8:70:2d:0e:be:
cf:dc:76:ef:7e:63:6c:bb:83:20:6e:ce:a4:d6:e3:
6a:8e:f6:e4:5c:22:4b:f4:f2:69:74:e8:39:94:49:
2a:34:85:e1:57:fb:97:34:5a:e6:68:8c:c9:f7:02:
ad:68:9e:9d:be:1b:f1:5d:cf:f6:63:64:30:f2:85:
ee:9f:ba:34:95:50:e0:f2:18:bc:22:67:e2:60:67:
4c:5a:9b:8d:d1:3d:03:72:27:80:d3:56:41:9d:44:
59:89:dc:d9:5e:b0:64:e5:c4:51:66:c4:a8:7a:7a:
0a:c1:ea:5b:33:b7:58:c6:ad:aa:64:5c:fb:c6:08:
c7:1c:d2:9c:8d:3b:46:91:53:4d:a2:6a:42:7c:d7:
3a:70:b5:8b:83:b7:8e:23:df:85:26:ba:bf:1c:05:
86:a8:df:13:ed:9f:b2:d3:dd:5b:20:41:31:d3:b5:
e8:37:23:2a:15:d3:d3:61:14:8e:63:38:e1:10:6a:
2b:88:e6:35:cd:0d:39:dd:f3:b2:fd:11:df:29:08:
07:a7:d0:21:79:32:50:e4:f2:1a:0f:63:bf:b7:98:
27:cc:de:62:df:9c:54:92:dc:a4:bb:52:a5:a3:cd:
82:07:07:54:5a:5b:af:17:7e:5c:dd:09:66:68:b2:
56:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:96:8B:37:80:8F:CD:E6:94:1B:02:64:A9:83:B0:92:AB:E7:58:08
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/15aLN4CPzeaUGwJkqYOwkqvnWAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.195.0/24
159.148.204.0/24
159.148.216.0/24
159.148.218.0/24
159.148.222.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:dd:59:6f:7f:4e:b6:e8:fc:bc:89:97:e7:d4:c1:52:8a:46:
c5:37:b2:92:69:ec:e9:75:a3:6b:93:d7:50:b8:f9:ff:b9:ab:
90:01:fb:16:5a:8a:f3:eb:46:76:a3:e4:16:82:39:a1:43:91:
79:7d:db:f9:64:27:a6:c9:69:a9:09:87:36:f7:3b:86:44:49:
e9:b1:48:14:1d:45:0a:fa:15:0b:05:a6:ac:32:7a:01:68:36:
9e:54:e4:fa:cc:cf:f5:7a:6a:f0:62:14:e5:3d:51:d7:d0:66:
ef:b4:dc:c7:18:9c:b8:0a:a4:a1:9f:c8:63:67:56:b0:9b:1f:
9c:d8:b4:b1:4f:aa:88:cf:94:13:06:27:70:bd:dc:b6:e5:b8:
ce:97:80:08:da:92:e5:c1:c2:95:e0:ea:f0:e2:e1:d4:1d:14:
cb:5a:24:65:9b:c3:c0:4b:0a:28:11:32:90:19:63:bc:0e:b4:
82:12:d7:55:78:53:a3:fb:35:16:f0:28:7f:72:43:49:e7:11:
35:fd:41:b1:2e:51:4f:60:a9:5d:21:48:8d:4f:3c:0f:82:1e:
d9:63:8c:77:45:53:77:69:bb:f3:e2:20:3a:f8:23:ab:12:cb:
76:4a:64:d2:9b:a1:94:5a:52:79:d9:d1:fe:3d:b9:57:33:c1:
d2:ae:c2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-ams.rpki-client.org