Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/SH2uk5u8Tc6MVH0slL1JkvEnl7k.roa
File: SH2uk5u8Tc6MVH0slL1JkvEnl7k.roa (raw, json)
Hash identifier: AXlRTB3I56+GF2EHMkc8r7br2rA5+yVV0tUk8mxDoyQ=
Subject key identifier: 48:7D:AE:93:9B:BC:4D:CE:8C:54:7D:2C:94:BD:49:92:F1:27:97:B9
Certificate issuer: /CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Certificate serial: 0188F666A119EDAADBF54CDA03A7B6918631
Authority key identifier: 35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/SH2uk5u8Tc6MVH0slL1JkvEnl7k.roa
Signing time: Mon 26 Jun 2023 06:31:41 +0000
ROA not before: Mon 26 Jun 2023 06:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208308
IP address blocks: 198.14.16.0/20 maxlen: 24
77.223.192.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:66:a1:19:ed:aa:db:f5:4c:da:03:a7:b6:91:86:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Validity
Not Before: Jun 26 06:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=487dae939bbc4dce8c547d2c94bd4992f12797b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:4b:b5:8b:4a:ab:f0:d3:2a:35:1c:2e:f3:
d8:78:ba:2c:79:e0:1d:06:24:f9:8a:95:9a:33:20:
a0:8b:d5:7b:2a:c8:bb:b1:ea:74:b1:27:f9:b3:a0:
79:4d:69:92:34:08:e2:af:48:df:44:e6:00:d4:60:
37:f4:f7:77:d9:61:38:ff:06:9f:e9:cb:55:5f:9c:
a9:d0:93:2a:05:d7:27:b3:92:02:09:41:b6:4c:43:
69:5d:c6:8f:13:28:5d:d4:45:02:68:bb:4a:d7:0c:
ce:e2:36:76:af:2f:38:95:36:e4:66:78:e7:6b:3c:
f0:38:2b:97:77:8e:31:eb:98:88:ac:56:d5:9a:39:
e2:81:9e:63:3c:ce:e8:f8:61:21:a3:2f:ea:f1:ad:
28:e5:05:20:ba:f4:a3:9e:0a:ad:84:59:df:fa:44:
8d:62:66:5e:ca:f8:ab:ad:b5:e2:6b:fa:e0:b3:62:
86:c2:4d:ed:45:0b:83:12:41:66:2a:2f:6b:fd:9f:
1f:f2:aa:bc:8e:87:39:84:94:7e:9a:ac:ad:b7:2c:
95:19:28:c9:d3:0c:00:39:cb:eb:46:94:21:0f:89:
87:9f:e6:3f:78:f8:e1:dc:fb:c5:36:db:7b:92:ab:
5b:67:d6:9a:d8:1d:a8:be:6f:be:41:e4:8c:cc:5b:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7D:AE:93:9B:BC:4D:CE:8C:54:7D:2C:94:BD:49:92:F1:27:97:B9
X509v3 Authority Key Identifier:
keyid:35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/SH2uk5u8Tc6MVH0slL1JkvEnl7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.192.0/21
198.14.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:8f:b6:81:86:85:4d:66:35:f5:85:c9:e8:08:a5:07:52:60:
0b:c6:5c:d6:a2:d1:d5:25:2e:4f:8f:34:6f:41:a0:12:80:3f:
b9:f8:8e:88:68:35:87:8c:bb:81:98:59:53:11:35:4c:27:7c:
9b:19:03:06:d4:f7:7d:74:02:65:76:a8:c3:94:1f:6e:0e:d1:
d8:f6:da:cb:3d:52:67:6e:c0:d3:3b:46:e9:af:6a:b6:f3:17:
6b:44:35:7a:b8:6f:15:e7:1b:7b:00:4e:68:be:a3:82:10:9b:
46:d7:10:2f:b1:70:f2:5d:a8:2f:14:25:11:28:81:95:ab:ba:
d4:06:f9:65:83:85:4c:9f:47:7f:fc:20:03:89:b2:46:12:11:
ff:d0:d5:8b:0f:14:ab:6d:5c:7b:21:77:6d:0c:11:67:7a:15:
f5:d2:ae:1d:bb:e2:19:ad:83:d3:12:0d:62:18:24:56:45:ac:
81:f0:cd:0e:fb:a8:5d:f3:7e:0b:ec:7d:94:ae:26:97:ea:83:
32:f1:cc:d5:8c:58:61:40:11:d7:35:ec:ff:ba:8a:d9:d3:04:
83:94:35:fa:d7:c8:24:c1:12:76:16:0f:f3:b8:a7:9c:1d:bc:
47:85:3f:20:b5:16:3e:7d:a6:c0:5f:f4:a3:8e:03:f3:56:23:
a8:f8:84:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 22:52:42 2023 by rpki-client on console-ams.rpki-client.org