Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PhS7PJLm9msNg-w5izApeB8JesQ.roa
File: PhS7PJLm9msNg-w5izApeB8JesQ.roa (raw, json)
Hash identifier: mOQFtjsmQd93tcjxeNXMMue742hx5WNwJIWfJ2ydML8=
Subject key identifier: 3E:14:BB:3C:92:E6:F6:6B:0D:83:EC:39:8B:30:29:78:1F:09:7A:C4
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7D92C4F422ED540F0EB19A2981582
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PhS7PJLm9msNg-w5izApeB8JesQ.roa
Signing time: Mon 02 Jan 2023 09:37:29 +0000
ROA not before: Mon 02 Jan 2023 09:37:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60800
IP address blocks: 188.255.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:d9:2c:4f:42:2e:d5:40:f0:eb:19:a2:98:15:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e14bb3c92e6f66b0d83ec398b3029781f097ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f4:af:30:45:56:8e:3b:69:40:7e:7f:6f:50:
8b:4f:e9:7c:ef:4f:bd:d4:4a:05:9b:36:7e:a8:dd:
7e:d0:7a:80:3d:7e:8e:76:b4:d7:6f:c8:3e:dd:43:
d2:1d:ce:06:99:c0:f2:ec:75:d2:bb:99:67:81:87:
63:60:0d:c7:a9:0b:fa:fc:0d:3c:53:8c:cc:af:7f:
4e:d2:b4:7a:f0:7a:45:f4:f5:c0:6e:63:ff:e9:27:
d4:d8:fa:2d:b1:ec:5a:98:9f:9f:95:f6:11:18:8b:
f1:18:27:93:21:c6:3c:4f:3e:12:a0:5a:64:21:c6:
3c:bc:95:5a:87:3c:b3:18:81:3b:25:a6:93:46:e2:
42:a6:86:07:4a:b7:49:9d:84:07:0e:33:aa:17:21:
4e:5c:31:81:dc:a7:b0:17:3c:08:ac:0f:97:71:82:
75:25:6d:c7:a9:c5:23:09:c9:aa:42:c1:02:e5:37:
9e:0f:84:b5:6b:d3:ff:06:26:af:13:24:3e:40:2b:
8f:e8:a3:ce:95:bb:71:5e:09:64:80:71:2f:69:ec:
2e:6d:42:d2:40:b3:07:97:b1:84:33:f2:42:95:0c:
da:00:1c:94:ca:c4:2b:2d:06:9d:c3:96:06:08:6f:
06:f7:67:0d:34:3d:27:04:df:a3:04:73:0c:13:3e:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:14:BB:3C:92:E6:F6:6B:0D:83:EC:39:8B:30:29:78:1F:09:7A:C4
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PhS7PJLm9msNg-w5izApeB8JesQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.128.0/24
Signature Algorithm: sha256WithRSAEncryption
27:82:41:df:84:8c:cf:e5:53:b0:11:f8:48:42:f5:42:81:cb:
84:aa:09:62:32:4f:47:c9:7f:8f:fe:ed:5c:59:62:d2:10:a5:
00:87:16:99:a3:c2:23:85:92:0f:3e:c1:58:c1:46:a7:a2:b7:
ad:39:3f:ad:5a:7d:6f:ec:b7:bc:98:df:c8:23:11:ff:81:40:
c5:0d:bb:cf:5f:24:4a:c0:84:61:40:25:c2:0e:76:6a:00:3a:
22:6c:42:22:32:9e:03:2d:f6:de:da:86:9b:37:0c:c1:ea:dd:
20:70:90:d2:d7:a2:ec:d7:8f:66:e5:e5:b4:18:df:58:ea:d1:
b5:3a:2c:68:d3:e2:a2:80:59:c2:2c:c0:56:41:9d:ea:b5:2a:
ac:49:7d:46:f8:2a:2e:df:7f:ca:67:2c:37:fa:66:67:fb:1a:
59:4d:cb:2c:e4:03:ed:7d:75:29:2d:72:71:c2:99:8e:be:8c:
99:e8:c7:a6:94:1a:b9:ac:fb:58:be:d8:14:82:dc:ab:c2:a9:
90:e5:26:d4:45:ec:ee:27:ea:97:ee:2e:2b:c9:7b:36:cf:4f:
12:01:d5:48:83:5f:52:d4:59:c8:eb:e1:87:fa:18:e3:34:f2:
70:f9:d7:a9:a9:09:55:ed:74:81:05:eb:d2:8f:0b:18:0e:7d:
e9:d5:2d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org