Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/b0IEOkEYQzU1hYeCkXpVIGBasog.roa
File: b0IEOkEYQzU1hYeCkXpVIGBasog.roa (raw, json)
Hash identifier: MK1X4rXxg5qOd9JoMv6ZMO/fKOVxdjNViZKzEifpBB0=
Subject key identifier: 6F:42:04:3A:41:18:43:35:35:85:87:82:91:7A:55:20:60:5A:B2:88
Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial: 018571D7C9AE27AA845CE44BB67D55730FCF
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/b0IEOkEYQzU1hYeCkXpVIGBasog.roa
Signing time: Mon 02 Jan 2023 09:37:25 +0000
ROA not before: Mon 02 Jan 2023 09:37:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137
IP address blocks: 157.27.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c9:ae:27:aa:84:5c:e4:4b:b6:7d:55:73:0f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Validity
Not Before: Jan 2 09:37:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f42043a4118433535858782917a5520605ab288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:89:53:51:56:48:10:d1:07:b8:9f:64:c2:
04:af:2b:f5:c0:25:7b:c7:d5:b6:13:0a:ce:a9:e1:
92:cf:75:c3:e3:5c:9f:ef:5c:6c:1a:5a:1a:32:f3:
c2:60:d3:e9:a1:17:f1:1a:7f:8d:6c:5d:6b:a0:b5:
86:c6:5d:ca:2d:2c:70:28:b1:94:14:9f:ff:d2:5d:
56:78:54:45:a9:5a:d1:33:fd:79:5a:4c:77:db:b3:
22:f0:0a:9c:f1:ec:94:1e:89:de:45:50:29:77:a0:
18:39:f5:65:64:1c:35:aa:29:b8:a2:7f:a8:df:7a:
e6:e7:27:e8:b7:3a:8b:06:c0:a6:a5:39:05:99:a9:
4b:66:03:b2:6d:fc:1c:74:e7:22:64:c3:bc:69:44:
6f:20:82:c6:e2:0b:04:ed:d5:f1:c3:0b:71:ca:bf:
85:da:ec:8a:01:65:be:e5:bd:21:2a:d5:8f:06:6e:
10:6c:e6:0a:57:c0:75:40:d4:a2:36:a2:ae:c9:e1:
9a:74:d9:1a:dc:74:b4:c0:b2:9b:28:08:8b:95:96:
86:73:88:7c:eb:39:ce:4a:dc:a4:34:a9:3b:80:90:
f5:44:f4:49:6d:5c:c9:d1:51:3d:07:67:5a:17:95:
4c:85:3b:e3:89:be:5e:87:27:1c:89:eb:79:60:d4:
ab:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:42:04:3A:41:18:43:35:35:85:87:82:91:7A:55:20:60:5A:B2:88
X509v3 Authority Key Identifier:
keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/b0IEOkEYQzU1hYeCkXpVIGBasog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.27.0.0/16
Signature Algorithm: sha256WithRSAEncryption
69:c6:9c:ca:f4:ca:bb:4f:1f:34:ae:93:bf:24:ca:e8:6a:f4:
df:83:92:d6:17:94:e5:99:99:28:c1:1f:50:0d:41:2e:a0:7a:
ff:c2:16:5f:b1:3b:50:ad:87:ea:e3:b8:4c:ab:9a:71:66:ed:
49:55:b0:d9:e7:0e:36:ee:6e:e9:67:07:25:0f:a5:89:4d:0f:
96:47:93:64:a1:40:88:53:c5:a3:1d:b7:e4:eb:d5:56:1f:3d:
a7:6c:04:6c:31:f0:d4:f9:0b:44:22:d1:e6:f3:92:35:87:c6:
cf:12:1f:a1:4e:7e:b3:63:13:5e:eb:83:25:93:2e:11:80:8c:
c6:a7:d2:87:62:7e:9f:fa:39:96:5d:fb:8b:8b:b4:17:97:37:
51:39:bc:17:17:24:d7:00:a6:76:f6:0b:0d:d6:86:67:31:0b:
f8:07:b8:57:92:1a:5c:aa:1e:7e:85:05:1f:b4:12:a0:17:9b:
48:09:05:0b:88:3a:e0:0e:2f:a0:93:ec:a8:2a:02:03:b7:57:
8a:d5:85:7c:f4:44:20:70:14:2f:75:d7:4f:07:8c:f3:2e:29:
49:a0:19:5c:ea:9c:b2:a1:91:fe:67:79:95:da:68:99:f9:1e:
60:50:5d:5f:89:3a:fd:64:b8:ba:6f:7c:b4:0e:79:40:fa:a6:
1f:ba:a9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:53 2024 by rpki-client on console-ams.rpki-client.org