Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/osT062OF7awZg_XcjAjJvzC7qvc.roa
File: osT062OF7awZg_XcjAjJvzC7qvc.roa (raw, json)
Hash identifier: 5D6S1C9XXaiM5AwcheQJbZp+Ab0OjnCuRUUObWI0ZcY=
Subject key identifier: A2:C4:F4:EB:63:85:ED:AC:19:83:F5:DC:8C:08:C9:BF:30:BB:AA:F7
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 0189D56C9D3711DA8957C90D0FAAE8B92861
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/osT062OF7awZg_XcjAjJvzC7qvc.roa
Signing time: Tue 08 Aug 2023 13:53:32 +0000
ROA not before: Tue 08 Aug 2023 13:53:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137502
IP address blocks: 213.248.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:6c:9d:37:11:da:89:57:c9:0d:0f:aa:e8:b9:28:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Aug 8 13:53:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2c4f4eb6385edac1983f5dc8c08c9bf30bbaaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:43:ce:fe:f6:bb:ad:dc:fc:3e:8c:68:cc:
11:fd:82:d8:b2:9e:f2:a8:d5:5f:a9:74:b1:f4:de:
f2:70:50:35:32:0c:24:74:32:36:24:29:c2:1d:6e:
bc:3d:f1:de:4a:c2:fc:eb:02:0b:0e:67:f4:f0:8c:
79:f4:ad:b4:02:97:30:d6:34:99:48:a7:b4:7d:2d:
6c:84:91:a9:39:96:a4:0d:95:7f:eb:0b:3f:04:87:
dc:57:3d:d3:ba:c4:68:96:73:d5:cc:7c:9f:65:c0:
1a:b6:9e:0e:ae:91:ac:a9:43:20:55:8e:82:41:13:
b6:89:aa:df:32:15:d4:9c:03:42:43:37:5d:dd:33:
be:43:8c:b8:87:c0:2d:c3:51:10:c9:0b:03:73:56:
c3:3c:3a:45:c0:34:6c:5e:e4:3e:cc:25:41:55:ed:
e7:ae:1a:e5:9c:f8:b2:43:f9:04:06:10:33:be:4a:
d8:ec:48:eb:d6:6f:b0:8d:37:0f:8f:74:e9:48:fb:
fa:3a:2b:bb:a9:10:a4:c3:8f:89:ed:a2:52:88:4e:
75:78:ce:3b:37:70:3b:b3:b4:ac:10:97:4b:a4:6a:
2b:cf:78:81:8b:ad:bc:71:13:6f:bc:e8:9c:42:ee:
35:1c:44:6c:28:fc:8d:3a:e6:97:2a:57:1b:0d:62:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C4:F4:EB:63:85:ED:AC:19:83:F5:DC:8C:08:C9:BF:30:BB:AA:F7
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/osT062OF7awZg_XcjAjJvzC7qvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.248.254.0/24
Signature Algorithm: sha256WithRSAEncryption
41:30:12:aa:a4:37:f2:14:f8:5d:67:82:91:81:95:29:1e:8d:
5d:b3:91:60:f4:96:88:0e:0b:b2:ba:e3:d0:37:7a:82:d3:86:
f9:4b:7b:51:f1:ff:d6:9e:c6:c7:3d:41:fe:3b:07:01:29:bd:
6d:6e:97:e2:19:ea:3a:4d:bf:58:21:5d:67:ec:ec:f1:08:88:
7c:9d:93:b1:30:e7:ff:0c:43:13:7a:a5:91:ed:17:ab:97:fb:
16:f4:22:d5:7d:de:65:0e:08:5a:a1:1b:80:fd:c8:3a:d6:2c:
00:71:91:7c:f6:bb:fa:29:23:cd:a1:cb:bc:95:cc:54:83:e4:
55:f1:6a:fe:a9:e2:d1:11:d1:14:10:10:4b:c6:14:a9:a5:d1:
08:f0:b1:c4:09:5c:c3:a3:33:a9:42:c1:e5:ab:b6:74:7e:04:
f3:18:8f:b6:c3:55:2a:19:bb:88:10:70:40:92:cf:08:34:73:
dd:3e:e1:da:58:ca:63:c7:be:52:de:f4:c9:bb:07:c6:b3:66:
bb:f9:73:9f:b9:77:58:e6:cf:2a:38:ac:c0:84:62:85:b3:52:
f9:4f:9a:df:fa:d8:a1:3b:e6:72:09:47:66:67:8d:84:c3:c8:
c2:13:e2:c1:8b:eb:80:32:72:6a:fe:e7:5f:28:20:7b:2a:12:
4b:28:8d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 15:00:57 2023 by rpki-client on console-ams.rpki-client.org