Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/D4UmCX6Kc9QhrNu598HwRVPW4kg.roa
File: D4UmCX6Kc9QhrNu598HwRVPW4kg.roa (raw, json)
Hash identifier: kIJVtcwviHI1WiSsVzegsTwpQDcxJY8jziARQLR1EJo=
Subject key identifier: 0F:85:26:09:7E:8A:73:D4:21:AC:DB:B9:F7:C1:F0:45:53:D6:E2:48
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 0185701ED7F77C6140CA0F4212EEBBC09DFC
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/D4UmCX6Kc9QhrNu598HwRVPW4kg.roa
Signing time: Mon 02 Jan 2023 01:35:47 +0000
ROA not before: Mon 02 Jan 2023 01:35:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22616
IP address blocks: 147.161.253.0/24 maxlen: 24
147.161.255.0/24 maxlen: 24
147.161.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:d7:f7:7c:61:40:ca:0f:42:12:ee:bb:c0:9d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Jan 2 01:35:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f8526097e8a73d421acdbb9f7c1f04553d6e248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c5:bb:62:1c:ba:65:69:95:f7:c9:39:c3:32:
9f:67:b2:20:44:0f:bd:12:ff:47:ff:fe:f5:c8:12:
8c:e7:da:d4:99:d4:de:a4:1f:46:df:e0:84:9f:29:
f9:bc:c2:3d:dc:12:9e:08:21:38:ef:e5:bf:44:97:
78:c4:51:f5:b6:f7:c8:4e:5f:b2:1c:cb:b4:77:4f:
dd:a5:7e:26:f0:26:ea:32:19:24:f7:ea:b1:b8:4d:
59:de:38:fd:0f:70:6a:b5:4b:b4:57:77:aa:a6:13:
f7:41:50:8a:0c:4a:f1:60:ae:2f:64:ea:b6:b6:1b:
18:44:41:7e:8f:fd:06:26:d8:4c:23:5f:33:38:bd:
e4:b0:0f:c5:02:fb:37:d0:64:48:a5:f2:da:c5:f0:
1c:a4:0a:f5:04:a9:68:84:b2:c0:0b:56:ce:8f:1d:
af:d6:b0:55:73:8c:48:f7:ff:3e:03:2d:1b:6a:8d:
19:eb:4e:42:7c:5a:b5:ab:33:1f:e2:6c:c3:62:3a:
e6:19:b8:0e:ed:96:1c:86:86:75:4b:bc:ce:e9:0b:
0b:dd:8d:3a:d9:fa:34:55:c2:d9:24:24:cd:a7:c0:
10:45:74:33:90:2c:d9:3b:7c:6e:4a:81:fa:0a:0b:
e9:0c:e4:d6:df:60:9e:dd:fe:04:35:89:07:a8:6a:
9f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:85:26:09:7E:8A:73:D4:21:AC:DB:B9:F7:C1:F0:45:53:D6:E2:48
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/D4UmCX6Kc9QhrNu598HwRVPW4kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.253.0-147.161.255.255
Signature Algorithm: sha256WithRSAEncryption
07:80:87:c8:9f:ce:f0:e4:81:de:a5:df:55:5b:71:dd:a9:53:
4b:5a:91:43:85:6a:c0:b6:5b:ad:8f:09:04:fc:4d:b0:49:0b:
ab:d6:45:1d:3b:e4:57:91:b0:b6:c3:7c:e1:88:15:76:b6:e4:
79:2d:7d:c8:e7:d3:56:fc:5f:f0:ba:21:7a:4b:1e:8c:77:18:
81:5f:79:72:57:c2:27:c2:f9:83:31:fa:a5:f9:99:26:72:9c:
c3:02:01:41:d3:71:bd:84:30:60:be:73:1d:c7:98:2b:4a:b0:
4f:52:dc:5d:49:d5:16:cf:fd:dd:d8:5b:4f:e7:48:45:51:73:
0f:11:35:90:74:da:58:cc:1b:01:27:b2:70:ce:d3:5e:76:a3:
0e:42:53:58:54:d7:dc:f0:25:c7:49:b6:6f:77:4d:51:87:45:
c5:a7:74:ff:6a:62:7a:10:ea:5c:df:c8:69:7b:00:68:f7:6f:
77:94:d4:11:4a:c6:dc:05:f9:7d:40:fd:46:3e:e2:e8:86:78:
d7:4f:ba:42:27:24:58:f9:f4:05:3b:48:52:3b:af:f4:39:8a:
60:a0:71:4e:d0:72:de:bf:06:1f:8d:6b:fb:0c:4c:da:21:e5:
e8:04:a0:87:f6:a2:e7:43:01:6a:e4:40:b6:9c:3a:17:a4:7b:
ed:9a:f8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 18 00:04:37 2023 by rpki-client on console-fra.rpki-client.org