Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/fQdwb6K9AjEyZQAhFY92bvD-Zf4.roa
File: fQdwb6K9AjEyZQAhFY92bvD-Zf4.roa (raw, json)
Hash identifier: 4NWCH0rL4gqoQ6QTPFVr1QeiOueJd+wOUePTIR1pEP0=
Subject key identifier: 7D:07:70:6F:A2:BD:02:31:32:65:00:21:15:8F:76:6E:F0:FE:65:FE
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 01856F54AAD8D95CA577EF8BA11EE2462154
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/fQdwb6K9AjEyZQAhFY92bvD-Zf4.roa
Signing time: Sun 01 Jan 2023 21:54:57 +0000
ROA not before: Sun 01 Jan 2023 21:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21413
IP address blocks: 192.44.4.0/24 maxlen: 24
153.96.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:aa:d8:d9:5c:a5:77:ef:8b:a1:1e:e2:46:21:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 1 21:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d07706fa2bd023132650021158f766ef0fe65fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:73:72:f2:c2:75:12:21:7e:c3:8e:10:e9:0a:
ca:3f:e2:a8:b1:d7:01:77:59:6f:ef:5b:99:25:5b:
a2:1a:4d:8b:3f:23:56:82:61:4d:d0:fb:91:79:ab:
99:77:f5:1b:c2:1a:c6:a7:20:f0:13:7d:78:9f:b9:
28:0e:a4:b3:54:2f:50:a2:45:e9:6a:ab:ec:94:a0:
c4:11:e5:0f:a6:4c:73:c3:5d:09:4c:35:c7:34:65:
8d:53:51:07:14:df:86:cd:40:a8:01:43:58:62:a5:
8a:57:df:9c:8a:f8:ba:d7:b9:40:a7:d0:4e:2b:25:
f2:bb:d1:f7:48:7c:58:a5:61:51:ae:37:50:a7:10:
26:d9:a0:de:7b:95:51:e7:93:1b:d4:b8:31:41:26:
1e:57:ef:e4:ce:58:6d:2d:87:6b:69:29:7a:c2:1a:
d0:56:00:7b:08:72:1c:7a:9a:75:74:66:d4:16:dd:
39:ed:b5:54:5f:5e:e4:eb:9c:22:6e:d1:41:39:56:
b0:3c:a5:7f:d9:65:f6:1c:7b:8b:97:68:42:e1:23:
a7:98:da:a4:10:d4:40:90:be:a5:e4:f7:ab:9f:4c:
9e:9e:20:ac:6b:79:7a:5b:ea:8d:9e:59:e2:b3:fc:
2c:05:cf:19:b9:22:c4:92:14:2a:5a:61:ff:59:61:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:07:70:6F:A2:BD:02:31:32:65:00:21:15:8F:76:6E:F0:FE:65:FE
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/fQdwb6K9AjEyZQAhFY92bvD-Zf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.96.26.0/24
192.44.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:cf:37:ba:2e:eb:7f:11:92:35:94:e8:7c:ff:72:1b:62:10:
f9:fc:cc:84:26:25:81:4b:a5:49:83:34:46:21:30:db:f8:ff:
48:9e:71:00:66:3c:52:15:f7:40:c2:63:c4:f7:09:e8:6f:c0:
1e:b3:b4:68:17:1a:f8:38:8f:36:62:85:0e:f3:66:6c:5e:65:
56:cb:3f:2d:91:d6:0e:10:a1:22:e2:1a:56:04:b4:67:14:3f:
c4:a6:45:fc:0c:bb:88:e0:2c:e6:38:39:a4:0c:c9:f8:4a:3f:
be:d2:4f:b6:dd:29:0d:c8:25:8f:05:f5:03:9a:a1:ef:b0:2e:
97:a8:97:58:83:df:15:21:13:11:98:df:e5:70:8c:a9:c8:bc:
4f:9e:34:96:07:d9:3e:21:c9:73:b4:94:84:d5:f0:9e:40:16:
4d:2a:37:0e:45:86:a4:0f:96:be:88:9a:34:bd:1a:ad:b2:4f:
6a:09:79:dc:58:e9:85:25:dd:51:de:93:8c:ce:8a:2e:9e:2f:
fa:75:c9:fc:4b:ba:cd:ab:02:4d:71:a7:6c:dc:d7:e9:1c:8c:
02:5d:e4:9b:68:4c:9e:21:16:88:8b:de:48:25:64:5c:4a:90:
ba:d7:5f:9e:27:88:9a:e2:21:8c:a5:ac:be:4c:fb:d2:0b:d3:
dc:d0:97:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:15 2024 by rpki-client on console-ams.rpki-client.org