Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/4c79cWJ-tv4gNvLZ4wEev4v0KRA.roa
File: 4c79cWJ-tv4gNvLZ4wEev4v0KRA.roa (raw, json)
Hash identifier: CeE3Xm+ZNtiIzOp0hXVoMnSMWQ5/ERAxf+AA+8Vn/Qs=
Subject key identifier: E1:CE:FD:71:62:7E:B6:FE:20:36:F2:D9:E3:01:1E:BF:8B:F4:29:10
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0185BEB884F94E62D90AC9DA7B7D834FB8A2
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/4c79cWJ-tv4gNvLZ4wEev4v0KRA.roa
Signing time: Tue 17 Jan 2023 07:54:01 +0000
ROA not before: Tue 17 Jan 2023 07:54:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35478
IP address blocks: 159.148.216.0/24 maxlen: 24
159.148.218.0/24 maxlen: 24
159.148.195.0/24 maxlen: 24
159.148.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:be:b8:84:f9:4e:62:d9:0a:c9:da:7b:7d:83:4f:b8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 17 07:54:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1cefd71627eb6fe2036f2d9e3011ebf8bf42910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:51:ae:34:0e:51:4e:85:99:3e:ed:ab:b7:31:
e6:08:c1:2b:9f:9f:fc:87:e2:92:90:30:9e:74:61:
39:d7:51:31:2b:5d:ab:d2:a0:97:30:de:f1:6c:26:
ad:02:5e:5d:67:18:f5:87:37:ac:b3:be:78:6f:ef:
db:cf:c8:d6:81:10:fb:cc:5a:9a:a1:42:6d:ea:23:
f9:05:bb:bd:fe:96:9d:12:d3:db:fc:28:f4:53:13:
69:1b:5e:cd:ba:4f:79:f4:e1:23:ea:36:4d:0e:f9:
de:df:87:92:2f:7d:19:ac:af:74:c2:75:0d:2a:54:
dd:b8:ca:0a:13:96:e1:04:f5:ae:6e:aa:30:cb:e2:
f4:c6:5c:98:ca:7e:4e:e5:f6:cc:57:5e:71:a2:17:
34:ea:70:3e:cf:96:ba:26:e8:02:ac:9f:6c:a0:71:
6d:35:59:28:8d:f5:7a:e3:f9:ea:1c:43:f8:f2:81:
b7:52:80:a2:02:7c:61:55:06:d1:42:88:e2:67:d4:
47:ff:aa:de:19:5f:03:61:f4:c7:2c:5d:50:93:fc:
15:e6:bd:2a:c9:27:44:66:a4:91:be:ce:fa:66:b6:
e0:42:68:42:db:a9:e3:b3:50:1a:ff:40:e7:01:dd:
32:b8:ba:a3:94:24:0a:b9:60:a2:8d:ae:47:83:e9:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CE:FD:71:62:7E:B6:FE:20:36:F2:D9:E3:01:1E:BF:8B:F4:29:10
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/4c79cWJ-tv4gNvLZ4wEev4v0KRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.195.0/24
159.148.204.0/24
159.148.216.0/24
159.148.218.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f0:53:e6:af:2d:79:34:9d:9a:6a:89:52:82:8c:8c:70:55:
18:c1:59:00:8d:ff:a1:f5:9d:8f:e1:4f:48:40:71:7e:fc:eb:
a7:60:fb:0d:8c:c7:a8:98:51:47:e6:42:12:f5:26:d4:bf:c1:
5c:49:0e:f8:85:27:93:76:d9:7f:02:bb:74:15:4b:73:c9:33:
ed:90:9e:00:2d:60:2c:4d:f8:4f:e1:12:b8:62:13:b1:ea:11:
42:f9:e5:cf:b7:78:10:d6:28:a5:f2:2d:4c:93:93:85:3b:ad:
81:cd:60:ff:e6:a1:62:ea:0c:7f:88:37:f0:d2:00:d9:6b:06:
4f:44:d5:7f:93:48:f3:88:d7:ab:76:8c:1d:d8:5b:c0:af:9b:
35:18:2e:c7:d2:94:f4:2c:25:a3:d2:8f:b2:ba:1a:0e:68:d3:
4d:61:11:b6:35:9e:e5:76:b0:ba:7e:ef:d1:6f:35:ab:b3:d1:
92:b2:01:c4:a1:ae:93:0a:49:8a:1b:05:47:b3:e4:bb:d5:d4:
30:1d:31:0b:89:db:57:10:62:1d:68:da:12:52:48:18:bc:4e:
ca:08:fe:a1:99:72:0b:a5:cd:eb:76:75:e1:20:a3:92:5d:62:
eb:92:ce:7a:c1:6e:85:fe:37:ef:41:8e:a8:f7:b8:f3:eb:c7:
a1:46:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:48 2024 by rpki-client on console-ams.rpki-client.org