Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/70wFzY_vLo1W3s11ZxFs3_dkrD8.roa
File: 70wFzY_vLo1W3s11ZxFs3_dkrD8.roa (raw, json)
Hash identifier: B+RKrLF4KQQamhBiHxVZPmnOhDIUMRDytQKQN1z2tWQ=
Subject key identifier: EF:4C:05:CD:8F:EF:2E:8D:56:DE:CD:75:67:11:6C:DF:F7:64:AC:3F
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F02559511360A845249B6B1FDF2B7DC
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/70wFzY_vLo1W3s11ZxFs3_dkrD8.roa
Signing time: Sun 01 Jan 2023 20:25:01 +0000
ROA not before: Sun 01 Jan 2023 20:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212496
IP address blocks: 159.148.38.0/24 maxlen: 24
159.148.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:55:95:11:36:0a:84:52:49:b6:b1:fd:f2:b7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef4c05cd8fef2e8d56decd7567116cdff764ac3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:35:78:cf:96:6e:95:86:52:e9:a2:fa:4a:06:
7c:7a:2f:04:2f:15:a8:75:66:f2:ba:5f:69:4e:40:
32:a6:94:c9:1d:b0:9a:85:ca:5a:35:3a:69:26:ef:
35:3a:b4:23:28:22:61:4f:ce:47:0a:89:49:9d:1c:
f6:72:54:67:a4:b2:8e:f6:54:26:06:4a:e8:3d:b7:
21:13:13:01:02:05:23:6c:58:14:3a:ea:1a:89:98:
2d:b1:a0:42:6c:1d:e5:70:b1:72:09:00:93:d8:81:
5f:64:a5:73:22:a8:b3:e9:52:31:d5:cf:c2:2e:82:
64:5a:d6:21:ce:96:81:e2:f6:70:f2:83:c8:73:7d:
b1:7a:c8:90:04:d3:c5:b2:5e:0b:fe:71:8e:20:d0:
10:db:8c:38:27:d5:0a:63:4f:a1:b9:ea:d7:8b:59:
0c:fd:51:e6:21:4e:e9:59:67:84:cf:ba:db:b3:1d:
ce:1c:ed:31:bb:ca:9a:6f:e7:15:64:37:35:78:35:
4d:46:79:73:f1:32:09:cf:62:d7:2f:bf:29:7d:b2:
9a:74:79:2a:30:d5:46:34:9f:8f:a4:23:24:c8:7c:
77:67:84:9c:df:ba:c3:62:6c:a4:8b:69:dd:49:8d:
cf:93:94:06:ba:ba:ce:bf:f3:42:14:fc:85:c4:5c:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4C:05:CD:8F:EF:2E:8D:56:DE:CD:75:67:11:6C:DF:F7:64:AC:3F
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/70wFzY_vLo1W3s11ZxFs3_dkrD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.38.0/24
159.148.88.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:1b:e2:3f:a2:51:95:99:98:85:21:83:06:1e:72:9d:0d:56:
f5:c6:31:90:9b:ec:7c:d8:4f:71:4e:2f:89:5e:54:6e:90:8b:
47:c1:a6:76:54:bb:d4:c2:64:80:a9:33:ec:19:3d:e5:b5:87:
40:5d:dd:08:30:72:62:86:6e:87:7d:07:1d:bd:fd:3e:a8:dc:
0f:8d:91:c2:64:e7:e4:51:a4:90:f6:d9:89:c0:84:84:7a:c0:
ab:54:7a:33:d5:0c:6b:0e:7d:6c:1f:1d:da:ba:ea:51:ea:28:
dd:10:ea:02:ad:df:70:b4:9c:08:69:76:d6:3a:70:8e:f7:4f:
1d:9a:c7:df:92:85:98:66:a6:73:47:bf:a5:1b:22:55:14:da:
83:13:ed:b6:df:8d:d2:e9:6c:38:09:53:b1:70:30:78:ef:85:
3a:21:27:31:31:bc:94:17:66:f9:bf:b1:e5:f1:d2:7a:a9:81:
9b:11:16:86:9a:18:43:48:9c:45:cc:09:70:5b:f4:42:d7:b9:
f2:8c:39:45:e6:ec:f1:7c:d4:40:e0:94:5d:81:34:b1:90:e7:
73:59:a6:ef:bd:9e:c2:b8:0a:bb:0b:f3:42:b6:47:35:77:41:
f8:27:f3:b0:da:48:b8:32:ed:bd:85:32:dc:8e:7c:fc:00:7a:
be:32:aa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:48 2024 by rpki-client on console-ams.rpki-client.org