Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SQWkmur64L_nuf7KSu_KJSpADtk.roa
File: SQWkmur64L_nuf7KSu_KJSpADtk.roa (raw, json)
Hash identifier: ES2l94lVO6gLLCti1NsCLs0GkkFK/bG+eidRa9KObGE=
Subject key identifier: 49:05:A4:9A:EA:FA:E0:BF:E7:B9:FE:CA:4A:EF:CA:25:2A:40:0E:D9
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FE7F19D662E560F0546A9F70A1596
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SQWkmur64L_nuf7KSu_KJSpADtk.roa
Signing time: Mon 02 Jan 2023 17:38:08 +0000
ROA not before: Mon 02 Jan 2023 17:38:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 212.107.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:e7:f1:9d:66:2e:56:0f:05:46:a9:f7:0a:15:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4905a49aeafae0bfe7b9feca4aefca252a400ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:52:29:de:ba:98:53:52:93:56:ae:8a:65:cb:
f3:fa:65:f2:27:ad:d1:b5:19:c4:d0:4f:b1:4b:51:
71:3d:10:58:9c:f2:2c:a7:bc:7e:e0:fe:04:f7:91:
46:8d:1e:82:8f:01:44:cf:52:fd:85:07:b4:a2:42:
fa:9a:56:ce:b8:64:c7:1b:1c:a0:3e:42:12:3f:ac:
24:99:34:d8:fe:5a:9d:4f:73:b9:a1:a5:93:d3:0e:
94:71:ef:f7:83:5c:69:54:6f:7b:61:02:34:50:be:
28:a1:b5:33:84:57:51:61:53:f2:c2:f2:20:20:2f:
a0:b2:f9:8a:d7:d4:36:ee:79:c9:b9:74:85:4a:18:
a1:e8:c1:01:22:90:53:ca:1f:1d:84:c9:1b:45:75:
00:bb:75:54:b1:e2:d0:fd:04:87:cc:66:06:37:3f:
bb:7a:ba:f7:1e:b9:d3:a6:d1:f9:b2:72:51:59:72:
03:91:40:50:9b:6f:8a:2b:d1:5d:b8:9e:3b:d4:41:
87:a0:c8:05:bf:72:ee:1e:eb:03:b1:00:09:78:df:
de:c9:4e:99:43:e5:01:11:6e:8d:22:32:29:29:ac:
43:c9:02:37:b7:a6:d0:dd:3e:65:74:23:f1:7a:5b:
d8:9b:7b:15:26:ae:fe:4b:d7:10:06:6e:20:04:9b:
11:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:05:A4:9A:EA:FA:E0:BF:E7:B9:FE:CA:4A:EF:CA:25:2A:40:0E:D9
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SQWkmur64L_nuf7KSu_KJSpADtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fb:5f:1b:1b:f6:e6:af:ab:31:d6:34:65:22:ab:8e:89:c3:
da:4d:21:82:91:32:1a:99:0f:6a:e1:dc:49:ad:d3:5a:19:f6:
b6:9e:94:2e:3a:3f:7e:58:c9:bf:df:94:58:ef:96:d5:ba:d7:
bd:9a:24:cc:f2:d2:cc:c4:14:f7:5d:d0:bf:76:56:c4:03:11:
a0:45:f9:fb:ac:dd:b1:f2:38:19:bf:8e:4b:56:04:98:bf:d3:
bc:b8:5b:37:63:d8:34:a5:b6:3a:8a:45:45:a8:de:8b:59:20:
3d:25:a2:ca:8d:be:0b:e5:ba:b9:4a:09:94:f2:87:9d:ae:f6:
88:ef:e4:ef:7b:bf:97:94:29:a3:03:e2:66:4e:e9:2f:cc:70:
12:b3:66:98:d0:72:bf:ed:4c:60:07:13:30:60:d6:d8:08:77:
64:ce:4e:e2:99:35:e3:5f:d8:3d:97:9a:4a:86:36:0d:65:bf:
c3:0e:19:72:bd:ae:c1:d4:de:24:05:b5:9f:d1:31:7d:2d:ec:
53:87:30:af:22:e6:76:58:ea:79:d3:da:a9:c7:d2:d6:94:d2:
b5:7a:c9:e0:76:cc:74:f6:37:ee:44:29:89:4a:bd:11:63:06:
69:b4:1d:a3:db:00:62:9f:b9:f0:fa:69:d5:82:2f:75:fa:9e:
12:52:17:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:34 2024 by rpki-client on console-ams.rpki-client.org