Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/38zmYKSthUbe7Am9TfBxSYnF03Y.roa
File: 38zmYKSthUbe7Am9TfBxSYnF03Y.roa (raw, json)
Hash identifier: +g6O/DIqE4ClYpsa9yYhzFfmlBuG7NOjQQZQAB3JE3o=
Subject key identifier: DF:CC:E6:60:A4:AD:85:46:DE:EC:09:BD:4D:F0:71:49:89:C5:D3:76
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018A412DF1B935980D5D7FD87D4131F92313
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/38zmYKSthUbe7Am9TfBxSYnF03Y.roa
Signing time: Tue 29 Aug 2023 12:04:04 +0000
ROA not before: Tue 29 Aug 2023 12:04:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 159.148.148.0/24 maxlen: 24
159.148.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:2d:f1:b9:35:98:0d:5d:7f:d8:7d:41:31:f9:23:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 29 12:04:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfcce660a4ad8546deec09bd4df0714989c5d376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d4:0d:70:f4:29:32:53:77:5b:fa:85:3c:23:
f8:c9:55:f3:74:06:2f:d7:b7:51:83:b5:d1:78:dd:
7e:56:76:f0:50:8e:1e:5d:c9:a9:52:16:e1:e3:1f:
ce:1a:c5:55:c7:11:12:ca:74:c5:a4:8b:6f:e9:17:
3a:85:fd:51:2b:c9:a6:2b:f7:98:fa:c3:3d:8b:3d:
be:9b:65:d9:1b:75:bf:dc:fc:53:bb:31:30:db:53:
3c:e7:47:e1:64:91:cd:2a:57:27:c3:84:af:a6:25:
48:96:5a:d5:90:ea:8c:03:73:3a:0e:8b:77:40:dd:
28:50:3c:b1:9e:5c:a8:f7:3d:92:e6:bd:7d:8d:68:
89:b9:0b:8f:0d:59:67:e3:37:21:f4:30:46:83:1e:
40:3b:2f:03:b2:19:d5:6e:66:5d:dd:27:5f:b2:fb:
03:a0:19:bd:72:db:5b:e9:05:23:14:8b:c0:4c:9e:
10:67:8e:3d:89:de:a9:09:ae:20:7d:b5:10:e7:31:
4f:4a:6a:68:4d:e0:bf:29:a2:ae:d5:62:70:6a:1d:
a4:b3:13:8f:4a:34:14:35:13:97:5c:15:18:8e:7f:
16:53:d2:51:da:68:91:f6:14:64:9b:29:65:b7:0a:
54:2d:66:1e:a5:4a:9e:67:66:9b:c2:61:88:46:f0:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CC:E6:60:A4:AD:85:46:DE:EC:09:BD:4D:F0:71:49:89:C5:D3:76
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/38zmYKSthUbe7Am9TfBxSYnF03Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.58.0/24
159.148.148.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:86:71:87:16:f2:59:d8:41:df:bb:b2:9f:fa:37:56:02:b7:
c5:19:6b:4e:f9:47:93:fc:0d:71:c3:09:d0:63:0d:78:f0:68:
21:ea:49:f7:88:66:79:67:8d:9b:53:f8:bf:b0:03:7d:3b:23:
b6:34:9f:ab:d8:01:f6:15:d3:68:7b:61:78:c5:e6:3d:02:47:
a5:74:9b:e5:12:0b:48:82:bd:86:44:95:c7:86:28:2d:42:e7:
30:db:37:fb:ff:f7:00:c9:06:f1:5f:59:42:4e:eb:75:a3:94:
0c:3e:36:05:df:72:36:c8:9e:bd:19:7d:73:5b:4f:6c:97:88:
6f:73:bf:96:87:65:5d:a0:4a:ee:75:df:23:61:54:af:ca:39:
93:bb:c9:11:e8:aa:aa:ee:ce:b9:cc:26:d6:a0:28:8d:5a:ab:
1d:12:57:a9:c6:28:de:aa:39:6a:c6:f6:c7:c8:cf:33:4a:ff:
cc:50:f8:e1:9d:2a:c1:14:f6:5b:48:53:82:c3:6c:0e:69:8c:
7b:57:0a:11:7f:a8:ef:b4:52:11:8b:77:84:f5:95:ae:59:bc:
f7:f6:51:0c:f0:2e:a3:58:73:6e:58:3f:e5:81:36:69:e3:d9:
b3:af:f2:6e:8b:5b:81:74:03:ab:10:e0:d8:54:1a:8e:c5:dc:
4b:2e:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:48 2024 by rpki-client on console-ams.rpki-client.org