Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sKlGw01JT43bbs8BlbY_ZOgTHc0.roa
File: sKlGw01JT43bbs8BlbY_ZOgTHc0.roa (raw, json)
Hash identifier: N8qK2ljkgB2IGkW8fSpWW8RVRLB6PRPcvrFr3ymPHFM=
Subject key identifier: B0:A9:46:C3:4D:49:4F:8D:DB:6E:CF:01:95:B6:3F:64:E8:13:1D:CD
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0186C1812C58ABBAE48D15B9A410381646D5
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sKlGw01JT43bbs8BlbY_ZOgTHc0.roa
Signing time: Wed 08 Mar 2023 13:55:13 +0000
ROA not before: Wed 08 Mar 2023 13:55:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 329225
IP address blocks: 64.137.30.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:81:2c:58:ab:ba:e4:8d:15:b9:a4:10:38:16:46:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 8 13:55:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0a946c34d494f8ddb6ecf0195b63f64e8131dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:6a:11:3b:73:53:fb:21:22:3e:6e:86:ca:
ae:e6:11:72:b1:fa:31:77:67:72:2d:73:63:4d:80:
8e:54:06:0f:fc:53:31:91:bc:78:f7:77:4d:86:2a:
40:89:69:4f:b8:f0:12:1c:c0:21:21:a3:34:28:4e:
e2:75:6e:eb:1a:3b:23:19:8a:95:69:84:d0:16:a3:
f9:23:6c:5d:11:98:cc:12:d4:f8:10:b1:c8:1d:ad:
58:1b:63:24:6d:66:c4:03:da:21:a9:21:b1:79:5e:
84:08:b2:39:b4:7a:91:8f:2c:54:16:79:e1:64:92:
ea:35:00:80:f3:bb:29:20:ad:52:73:6a:94:88:4f:
a7:6a:04:fa:cf:31:c7:fb:36:e7:9e:e1:62:38:00:
fd:b8:af:bb:d4:49:64:48:bd:4b:20:36:e4:7e:95:
99:2d:e6:51:c3:e5:aa:42:c7:a1:2e:b3:cd:23:fc:
62:91:e6:fa:b3:82:c3:c7:ba:7b:57:52:b7:af:85:
c9:d7:d5:af:bb:91:6c:1d:d5:2e:37:e5:29:41:1a:
90:7b:69:1e:a5:56:ff:86:58:2e:ea:be:c0:f8:7f:
56:4d:3c:87:bf:10:b1:9b:e8:1a:92:e8:29:55:4a:
1a:16:67:3d:a6:22:00:a2:1c:6f:c4:4a:66:21:1e:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A9:46:C3:4D:49:4F:8D:DB:6E:CF:01:95:B6:3F:64:E8:13:1D:CD
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sKlGw01JT43bbs8BlbY_ZOgTHc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.30.0/23
Signature Algorithm: sha256WithRSAEncryption
12:3c:c5:e8:2c:52:7d:e5:50:78:2b:56:e4:99:18:dc:19:1e:
48:2d:8d:7a:6b:b3:f1:19:25:63:ba:98:56:ba:0d:4b:0f:0c:
2c:a7:63:aa:a6:85:16:cc:16:2a:85:44:72:ac:b8:91:4e:8f:
10:da:f6:62:fb:31:5f:23:f3:c3:ae:13:48:6b:c4:06:21:9e:
05:ce:e1:c1:97:6e:44:08:15:1f:90:00:db:16:cd:a4:7e:47:
c2:e4:84:33:84:37:70:9f:29:f1:d1:53:c3:70:ca:bf:32:2b:
fa:35:d2:d6:a2:86:25:07:93:dc:0f:2e:b4:72:1c:c2:26:2c:
cd:c9:ef:ff:8a:0a:88:2f:fa:61:6e:39:7b:24:cb:09:29:2d:
f8:d6:7a:7e:fe:89:67:61:75:30:fe:e5:c2:85:f1:0d:6e:da:
2b:ee:28:7c:50:fb:d9:2c:fa:4a:f1:dc:02:d2:77:bb:08:1f:
2c:30:43:3a:af:de:ef:6e:c0:f6:ad:2b:98:e5:01:f7:b6:d7:
08:31:ef:b9:86:1c:a4:a4:66:17:db:ce:da:65:23:db:17:dc:
18:50:bc:ca:92:03:1d:94:9d:60:66:b4:d5:56:48:d7:d6:05:
83:92:e4:d4:a5:7f:3f:08:16:fc:a9:a1:7e:77:d1:d6:b1:fc:
43:d1:4d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:54 2024 by rpki-client on console-ams.rpki-client.org