Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/OKcbLdM3hHR8dlnFb_8RpjfExi8.roa
File: OKcbLdM3hHR8dlnFb_8RpjfExi8.roa (raw, json)
Hash identifier: cHLgrvKe+fqwTfzNa69e7o2FYMHiI6ssA454zvfRU54=
Subject key identifier: 38:A7:1B:2D:D3:37:84:74:7C:76:59:C5:6F:FF:11:A6:37:C4:C6:2F
Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d
Certificate serial: 0185730CA475E327ADE400327D679F568DE4
Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/OKcbLdM3hHR8dlnFb_8RpjfExi8.roa
Signing time: Mon 02 Jan 2023 15:14:46 +0000
ROA not before: Mon 02 Jan 2023 15:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 143.55.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:a4:75:e3:27:ad:e4:00:32:7d:67:9f:56:8d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d
Validity
Not Before: Jan 2 15:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38a71b2dd33784747c7659c56fff11a637c4c62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:8c:f7:08:91:7a:46:b1:55:d6:d5:02:af:
8d:5f:ab:ae:71:10:9e:b8:95:b1:66:e0:52:f8:ab:
e9:9c:c9:1d:8f:9e:97:be:fc:e0:d9:49:0e:37:69:
4b:65:7b:cc:57:c6:cc:d7:d6:c0:39:5d:7c:54:31:
a5:00:4a:89:71:b0:89:96:e1:ea:af:13:54:40:f6:
0c:4d:b5:a9:cd:0c:05:a7:50:6d:56:32:9a:db:1f:
3c:c4:18:a1:77:16:f7:2e:fb:35:3e:45:7b:71:f6:
55:fa:bd:ae:2c:5d:c8:42:83:00:79:e9:3c:1e:22:
3c:b4:e2:88:0d:fd:72:07:a7:f5:c6:ee:89:25:0f:
d9:45:96:ba:2b:e9:4a:5f:5e:9e:4e:50:0c:72:c4:
7b:6c:11:f5:ed:ed:8e:84:34:05:48:06:ce:37:3d:
76:ed:3f:f8:5d:0b:70:2c:89:3d:5c:4c:c8:87:ec:
87:67:3a:f1:84:c5:bd:1d:e3:05:ac:f2:63:5d:be:
4b:51:4b:26:52:98:46:be:65:29:4c:91:6c:a4:5b:
46:39:6a:f7:52:51:a4:fb:39:64:e7:fb:d4:36:1e:
67:36:fc:7c:40:62:58:74:de:30:0d:43:19:48:e4:
83:fd:f5:96:5a:d4:b6:14:93:a4:4d:81:24:ab:c7:
26:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A7:1B:2D:D3:37:84:74:7C:76:59:C5:6F:FF:11:A6:37:C4:C6:2F
X509v3 Authority Key Identifier:
keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/OKcbLdM3hHR8dlnFb_8RpjfExi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.55.151.0/24
Signature Algorithm: sha256WithRSAEncryption
15:8f:d4:89:21:a6:a1:87:04:94:d1:25:c2:10:71:fb:63:e5:
2f:9e:7b:5f:f4:8a:2e:ff:cc:d8:7b:5c:6c:d2:8e:85:81:68:
c9:4c:96:7b:67:81:f4:bc:97:f3:5c:47:e8:df:56:2d:66:46:
dc:07:5e:94:99:a4:95:3e:cd:b0:b3:9f:8d:d2:c3:ce:6a:50:
9b:a5:78:3e:0c:76:4a:19:96:e8:60:a0:87:8f:ec:5a:73:0a:
76:a4:7c:db:60:78:d1:e2:b6:f9:44:0b:7b:a6:05:bc:e0:c9:
b1:f5:29:6e:81:df:44:d5:7b:81:c7:dc:33:9c:bb:71:70:bf:
8d:8a:48:5f:ae:9c:92:c5:03:dd:de:e8:1e:c5:5f:1c:40:be:
5b:60:35:42:1c:2f:a1:cd:95:b2:49:9f:64:c9:a3:e3:2d:ed:
37:4f:ea:f7:4b:77:1d:b1:59:76:89:fe:46:0a:2a:f6:35:2f:
39:e0:96:a7:7d:6e:dc:31:39:89:37:11:c3:ca:13:d1:c0:b4:
30:6a:57:2e:e8:26:08:6c:0e:c5:74:c5:ac:e0:35:fa:9a:2e:
53:48:4d:d9:47:c4:ad:7e:f6:47:06:e4:34:62:5c:4f:64:c8:
da:ec:48:47:04:f0:f1:6a:aa:23:88:40:86:80:70:e3:4d:c0:
06:74:97:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:55 2024 by rpki-client on console-ams.rpki-client.org