Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/IUBUKtOCNzdmm44QozNbuv7hyZc.roa
File: IUBUKtOCNzdmm44QozNbuv7hyZc.roa (raw, json)
Hash identifier: QYutKcxyI9s2GumE3JxQlBTr42gmhkczgVHjYgl9Qm0=
Subject key identifier: 21:40:54:2A:D3:82:37:37:66:9B:8E:10:A3:33:5B:BA:FE:E1:C9:97
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 018570703D04A93B29A20E1B9A795F925941
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/IUBUKtOCNzdmm44QozNbuv7hyZc.roa
Signing time: Mon 02 Jan 2023 03:04:41 +0000
ROA not before: Mon 02 Jan 2023 03:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 157.239.128.0/24 maxlen: 24
157.239.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:3d:04:a9:3b:29:a2:0e:1b:9a:79:5f:92:59:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Jan 2 03:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2140542ad3823737669b8e10a3335bbafee1c997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2a:2f:c8:0d:85:96:6d:7d:09:db:6e:32:fc:
08:a4:30:7c:06:12:ad:c4:4d:3a:75:6d:1c:82:14:
5c:8e:8e:9b:ee:6c:d4:21:df:37:e9:16:17:9d:69:
dc:c7:d4:7b:9f:c8:b0:86:53:56:61:ed:63:f9:b8:
29:39:16:17:f2:3f:20:66:4a:76:93:a1:5c:ff:73:
e6:c5:15:75:5d:d8:56:73:b2:c5:63:b7:1c:33:87:
8d:a9:50:c7:f0:01:0b:76:58:e6:40:67:cb:74:3c:
d3:8f:28:ff:85:ef:f1:89:2b:fb:98:55:6b:31:e1:
77:ab:19:f3:36:7c:b6:0f:de:e5:b8:1a:de:2f:d1:
ab:b9:d3:1f:c6:fb:78:d9:75:e9:1e:73:97:8b:3d:
4f:77:cd:a3:85:a0:ba:26:d3:5d:49:4e:b1:7f:09:
88:21:b7:61:18:c4:da:ad:f5:5a:47:2e:74:5e:83:
08:ff:6d:b0:24:a4:ae:d9:e4:2a:4f:64:86:2a:6b:
03:87:fd:3f:4f:ad:3f:fd:1a:9a:f6:a3:b7:96:93:
ec:3d:18:f1:2b:0c:40:5e:56:6d:40:94:10:ed:5e:
67:3b:45:6e:1d:d3:4b:a6:2e:81:73:73:ae:ac:bc:
80:6c:7f:75:a7:7a:80:b1:cf:c9:a8:73:98:84:bf:
c1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:40:54:2A:D3:82:37:37:66:9B:8E:10:A3:33:5B:BA:FE:E1:C9:97
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/IUBUKtOCNzdmm44QozNbuv7hyZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.239.128.0/23
Signature Algorithm: sha256WithRSAEncryption
19:bc:ca:35:a3:a1:3b:8a:cc:44:f9:1e:3b:51:d8:7e:70:fe:
8b:c4:88:1d:bf:37:79:a5:70:e4:23:c0:7e:f5:1b:f9:56:f3:
66:70:66:d3:57:0f:1a:f5:77:c6:8a:e6:de:a1:18:00:3d:33:
48:28:ec:77:a2:95:b8:32:7b:20:f7:61:29:0a:82:ca:4f:d3:
a9:4c:1c:6e:3c:a6:b7:1a:2f:3d:46:46:5e:5b:a5:df:36:36:
e8:45:7f:e7:20:f2:f4:5a:fc:78:6b:84:73:4d:3e:31:e3:0a:
67:be:ea:58:b2:1b:4a:3a:93:3e:d9:28:25:2d:e7:ec:b7:0f:
59:2b:99:aa:61:82:b8:53:a4:67:3e:3d:bd:f1:94:1f:61:3e:
6f:44:70:3f:ce:fd:c5:59:a2:d6:d7:74:c4:a2:f1:84:bc:eb:
d2:c5:80:c4:37:1d:07:b9:2a:0b:d7:2b:ec:bc:1c:9e:70:58:
46:ba:61:34:6e:51:49:b9:ad:96:25:42:a2:6e:d2:71:b3:e9:
a9:f4:74:35:31:97:ba:71:cb:e2:79:67:c0:ac:b3:0d:a9:6f:
fd:79:c3:ff:3e:6d:03:71:6b:6f:e5:c5:34:b8:75:01:c2:d2:
d6:76:22:b7:07:34:af:4b:b8:67:22:b6:e6:f1:52:a3:9d:b3:
69:bb:47:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:22 2024 by rpki-client on console-ams.rpki-client.org