Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/sgB-0pAqjpsaJ4GHBaxndJm0hQg.roa
File: sgB-0pAqjpsaJ4GHBaxndJm0hQg.roa (raw, json)
Hash identifier: oyToL0Vcp6UzX3UUGY1TU3ZwupQWKlC1e65GvRbDJKs=
Subject key identifier: B2:00:7E:D2:90:2A:8E:9B:1A:27:81:87:05:AC:67:74:99:B4:85:08
Certificate issuer: /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial: 01856F66D7A2C5DD2F2043A9012B28E036FF
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/sgB-0pAqjpsaJ4GHBaxndJm0hQg.roa
Signing time: Sun 01 Jan 2023 22:14:48 +0000
ROA not before: Sun 01 Jan 2023 22:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9136
IP address blocks: 143.163.64.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:d7:a2:c5:dd:2f:20:43:a9:01:2b:28:e0:36:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Validity
Not Before: Jan 1 22:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2007ed2902a8e9b1a27818705ac677499b48508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:65:b0:74:24:db:cc:24:06:c6:d8:d8:ea:03:
5a:8f:a6:ce:5f:4f:26:97:83:3a:b6:91:47:a7:63:
f7:69:43:83:80:48:26:31:0a:0d:28:49:92:b2:72:
64:c9:c7:f6:4c:92:57:36:d3:da:bf:34:71:9b:e4:
70:0d:7c:89:8f:a3:9a:82:85:2c:ca:7c:45:9e:fc:
40:c7:71:76:5c:2f:68:41:15:36:d8:d5:4c:7a:35:
6c:ba:f8:7a:38:d4:8b:a6:0a:cc:50:6c:e3:00:d5:
f2:5c:da:8b:ff:1c:ac:83:e6:9f:ab:1d:97:d3:b9:
27:f3:8c:56:21:30:fc:0e:2c:a9:46:a4:01:52:d5:
db:45:c3:7b:ca:7f:a8:6d:0a:fb:02:07:04:b5:e2:
a5:a8:67:51:bc:5e:0d:8b:5c:6e:33:01:11:68:ba:
aa:23:d1:47:36:8b:2c:72:35:c8:43:f7:d9:2c:3d:
53:1c:0e:f1:34:93:a9:dd:dc:05:31:e8:9d:dc:6f:
4e:58:46:b2:9c:fd:a5:c7:a4:e7:e4:8e:e9:14:86:
dd:5c:fd:e3:0a:d1:d2:b1:12:ea:12:ff:05:69:7d:
79:77:6a:23:09:37:80:0b:61:bc:cb:6a:7e:70:74:
4c:62:4c:8c:19:63:8a:e8:ea:52:b0:f8:95:1b:05:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:00:7E:D2:90:2A:8E:9B:1A:27:81:87:05:AC:67:74:99:B4:85:08
X509v3 Authority Key Identifier:
keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/sgB-0pAqjpsaJ4GHBaxndJm0hQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.163.64.0/23
Signature Algorithm: sha256WithRSAEncryption
71:24:31:0c:18:dd:dc:e5:81:68:69:49:8c:eb:78:13:eb:60:
9b:bd:d5:b4:7e:f6:ef:62:c5:ae:6b:91:63:ba:e1:4a:d4:57:
4b:d9:82:b9:58:ce:54:20:98:78:2c:9c:9b:3e:71:a2:c4:e5:
2d:ae:21:7d:5b:e5:2f:03:93:29:ad:16:26:fd:5a:32:30:64:
40:3c:9c:7a:7a:dd:27:78:13:60:82:ab:5d:fb:04:2a:4f:9f:
1d:a5:b8:c9:9d:49:b9:82:3c:3c:8e:ba:06:a0:94:d3:9d:ec:
75:04:51:88:ef:0d:3f:fa:39:a3:07:ac:fa:1b:fc:58:9d:48:
27:5b:b8:93:2e:9b:1e:fb:b0:8a:43:0c:b2:b0:1f:af:86:de:
2b:03:31:cd:8b:c0:5b:0c:7e:4a:8e:6f:4b:c8:69:56:6f:c8:
c1:7a:8d:2a:62:b4:a9:fa:05:42:ff:d4:a4:cb:8b:8e:26:3c:
91:ca:2e:3a:2f:4e:2b:04:f0:ea:64:de:46:e0:c6:a7:a7:99:
e8:ee:0f:20:bb:20:14:c2:28:05:3c:48:f7:2f:88:f1:64:9a:
33:fd:7f:9e:fd:af:6f:47:d3:16:e6:e7:97:46:be:f4:5f:35:
7d:fa:b8:9e:96:21:65:b1:5a:92:3e:0f:11:f2:ec:01:d5:32:
78:59:46:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:57 2024 by rpki-client on console-fra.rpki-client.org