Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/CcxuCNWrydFJDdneOCzSjEQ2Ms8.roa
File: CcxuCNWrydFJDdneOCzSjEQ2Ms8.roa (raw, json)
Hash identifier: 2UnLWYXlg6RDvYNSdHS/VT2rYo2SKK8odIfYRqbNa0E=
Subject key identifier: 09:CC:6E:08:D5:AB:C9:D1:49:0D:D9:DE:38:2C:D2:8C:44:36:32:CF
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F0242BCA90C42B0EDF2F631B158D3FB
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/CcxuCNWrydFJDdneOCzSjEQ2Ms8.roa
Signing time: Sun 01 Jan 2023 20:24:57 +0000
ROA not before: Sun 01 Jan 2023 20:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44242
IP address blocks: 159.148.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:42:bc:a9:0c:42:b0:ed:f2:f6:31:b1:58:d3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09cc6e08d5abc9d1490dd9de382cd28c443632cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a9:8f:db:df:2d:b9:2f:4d:7b:3a:df:f0:40:
b1:20:a7:f6:96:2d:11:83:3d:eb:2d:96:40:4f:fe:
bd:ba:d5:a4:7c:0a:90:ed:5b:e1:ae:4b:92:61:72:
6c:ce:ff:99:e0:0a:e8:ff:3b:54:f5:62:71:bf:ca:
d5:11:e6:f4:d5:c2:cb:9d:1e:9a:08:38:52:d0:40:
cb:8a:de:c1:3e:58:cf:05:15:9e:8f:8c:2e:bd:02:
0d:de:00:4f:b5:5b:67:21:a9:be:0c:08:fd:f2:55:
14:27:58:f8:a1:6f:cf:4b:4a:a7:be:19:ea:84:44:
c3:d7:9e:dc:4e:8b:d8:f1:93:5a:d7:2c:6a:7b:9a:
34:6d:ee:85:2d:81:27:07:64:e6:65:c5:e4:bf:6a:
53:72:16:4a:a8:84:c6:df:bd:c9:bf:39:40:d7:f6:
a4:d0:14:a1:67:f3:10:52:14:96:9d:b2:07:98:a7:
28:b5:5d:63:1e:77:50:40:1e:a4:3b:a8:e9:18:6b:
e3:cc:96:27:14:ea:d8:5e:be:0d:88:8f:c2:05:6e:
8a:e2:b4:69:d9:d6:b3:04:67:c4:3e:54:74:1e:5f:
19:4b:f4:80:2b:f5:50:81:c4:e7:6a:25:1b:13:e0:
8e:ff:28:44:3e:af:07:01:6c:75:12:33:f5:d7:46:
73:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CC:6E:08:D5:AB:C9:D1:49:0D:D9:DE:38:2C:D2:8C:44:36:32:CF
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/CcxuCNWrydFJDdneOCzSjEQ2Ms8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.30.0/24
Signature Algorithm: sha256WithRSAEncryption
30:9e:f9:cd:ec:8c:6c:ce:58:09:84:30:17:13:b1:4f:9a:6d:
45:db:18:0f:43:a3:8c:e1:1b:32:0a:59:e1:6d:40:67:ca:6e:
52:2d:6c:82:b0:90:dd:7a:b8:d9:60:6f:c9:88:65:19:d7:3a:
92:2e:c2:2e:1d:18:d1:46:4b:84:34:89:c6:e6:ab:ea:4e:fa:
2c:5c:0d:17:92:94:7f:3a:f4:e7:8b:43:28:fd:2e:84:b0:1f:
4f:61:1f:30:bc:56:98:a1:59:fb:c6:03:18:54:d0:ab:8f:7b:
64:05:8c:5f:80:01:50:f3:ef:d5:72:1e:d3:8a:50:ba:4f:7a:
c6:20:a1:3b:47:c7:1c:4b:26:44:db:0a:25:54:f6:3e:2f:cd:
ab:59:11:a4:89:a5:62:04:cf:44:9d:d0:d3:ed:6c:f5:d5:fe:
3c:4e:a2:82:aa:2b:0a:2b:be:c4:08:57:75:fd:af:7d:21:b1:
ae:b4:9e:b5:ca:c9:c3:57:1a:b6:88:bd:b1:97:0b:cb:f8:43:
b3:77:b1:de:f2:59:3b:d2:b3:b3:01:a4:5e:df:e8:29:50:bf:
b7:08:32:05:9b:3f:8a:28:8c:25:db:8b:00:e8:9c:16:40:ea:
4f:f3:3e:4c:cb:33:6a:f7:fb:32:f5:c1:59:e3:3d:9d:2a:82:
9b:84:ba:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:38 2024 by rpki-client on console-fra.rpki-client.org