Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/e2saB4d1d-NUv7hwuRN2Umf3UYY.roa
File: e2saB4d1d-NUv7hwuRN2Umf3UYY.roa (raw, json)
Hash identifier: gc7pf8uLRwBQs3c+BjTxMzzE9w2aPHkaNhpXZnQYQNs=
Subject key identifier: 7B:6B:1A:07:87:75:77:E3:54:BF:B8:70:B9:13:76:52:67:F7:51:86
Certificate issuer: /CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Certificate serial: 0185723A4053793C2DC13CBF441CDB7A2222
Authority key identifier: 37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/e2saB4d1d-NUv7hwuRN2Umf3UYY.roa
Signing time: Mon 02 Jan 2023 11:24:58 +0000
ROA not before: Mon 02 Jan 2023 11:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40513
IP address blocks: 147.78.60.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:40:53:79:3c:2d:c1:3c:bf:44:1c:db:7a:22:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Validity
Not Before: Jan 2 11:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b6b1a07877577e354bfb870b913765267f75186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ee:50:ae:53:2d:89:5c:00:dd:6b:d0:62:35:
b9:c1:4f:e3:76:97:02:01:c6:c9:ac:29:6b:bf:50:
d4:79:e7:4b:39:76:6b:0c:bf:1b:1f:8b:41:2f:7c:
6c:67:aa:cc:21:fc:41:52:a8:18:85:fd:ff:9c:c5:
98:2e:b5:9b:9a:9f:13:1f:3c:d6:38:d2:93:a4:d5:
8c:1a:e5:a1:2c:05:bd:4d:0d:54:40:2d:06:0d:9b:
1b:74:6e:e9:e5:19:82:f2:15:7a:ae:40:90:a1:dc:
c1:36:fa:2d:f2:f2:e4:64:39:5c:63:4a:b6:73:cc:
c0:4d:18:a5:e6:a7:44:7d:df:28:43:7f:8b:1b:5a:
a6:d5:ca:55:f4:58:a4:71:20:fc:e7:4e:e2:ab:a8:
ac:a7:b8:95:9c:f4:77:4b:53:e7:34:8f:a6:0b:d7:
33:3c:0e:0a:23:11:fd:00:55:47:ed:3f:5b:51:90:
4b:7c:af:bb:90:39:be:e8:4f:de:1f:72:56:5b:1c:
b9:58:79:30:a4:f8:a6:8f:18:63:cc:30:57:5f:89:
e8:c3:da:0c:24:b2:5b:e8:14:34:f9:cc:15:23:92:
ce:ca:16:06:b5:b8:69:ee:98:87:52:18:39:1f:65:
7e:6a:98:c0:06:db:03:d7:a3:0c:da:b0:1e:61:a2:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6B:1A:07:87:75:77:E3:54:BF:B8:70:B9:13:76:52:67:F7:51:86
X509v3 Authority Key Identifier:
keyid:37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/e2saB4d1d-NUv7hwuRN2Umf3UYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.60.0/22
Signature Algorithm: sha256WithRSAEncryption
31:f3:a2:f3:6a:9c:a3:73:5d:79:2b:3a:1b:60:51:f8:ce:82:
80:7d:60:bd:8a:99:33:03:42:5f:02:01:5a:a6:26:e5:e2:95:
b8:59:dd:eb:82:06:5c:85:41:25:b9:80:a4:84:a0:1f:ac:36:
07:d1:df:f9:a4:b0:72:54:de:73:39:8d:e1:52:fa:4c:ed:4f:
ec:ef:47:e0:69:49:fa:4c:c9:53:8c:5f:4b:54:74:f8:5e:43:
b0:fb:42:aa:65:2c:40:c8:99:41:c1:81:da:cc:9c:25:eb:5d:
dd:55:60:d5:98:b7:91:af:36:bd:30:e3:53:ed:43:b9:19:1f:
87:fb:f6:b2:11:3c:b7:fb:5e:74:e0:07:d0:fb:b2:89:2d:10:
4b:fa:14:3e:d0:9a:5d:64:39:90:66:50:04:8a:b2:7d:44:24:
f5:14:23:4e:f1:5d:58:c3:08:68:1b:16:3b:c5:a4:d1:77:84:
57:fb:74:c9:ce:4e:1b:3d:49:a8:d2:e4:1f:70:d4:2d:92:1d:
f8:ad:91:01:67:ea:2b:37:e3:db:73:db:25:55:54:e9:c5:99:
11:42:45:7c:61:7c:4f:4a:6e:34:91:0f:d5:d6:49:97:87:2a:
ae:b2:26:76:0c:67:a7:0c:c2:96:20:cf:e4:3f:8a:10:9b:78:
96:e4:82:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:05 2024 by rpki-client on console-ams.rpki-client.org