Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/CSSbW7H2qRKeBLfdYVsbwo7Z4lc.roa
File: CSSbW7H2qRKeBLfdYVsbwo7Z4lc.roa (raw, json)
Hash identifier: BBycLMn9ad9SGfvFJafceRI2NmVBHngPAEz2ry1PpRo=
Subject key identifier: 09:24:9B:5B:B1:F6:A9:12:9E:04:B7:DD:61:5B:1B:C2:8E:D9:E2:57
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 0185AA6AD08117AABF8D10E128040A47C582
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/CSSbW7H2qRKeBLfdYVsbwo7Z4lc.roa
Signing time: Fri 13 Jan 2023 09:16:44 +0000
ROA not before: Fri 13 Jan 2023 09:16:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202279
IP address blocks: 128.0.80.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:6a:d0:81:17:aa:bf:8d:10:e1:28:04:0a:47:c5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jan 13 09:16:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09249b5bb1f6a9129e04b7dd615b1bc28ed9e257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6d:84:99:38:71:40:de:f3:c4:5c:20:28:ab:
98:67:5c:f6:a9:44:88:02:02:2f:67:6d:f6:65:3e:
94:b1:9d:8a:8a:56:0b:5f:6f:63:10:5a:4b:32:2f:
04:51:98:31:e3:07:b7:04:24:18:9a:f8:8d:d6:2c:
4c:6d:69:b8:f4:07:54:d4:33:9d:ed:60:0e:a8:35:
72:47:cd:4c:d3:58:60:4a:1c:88:d9:fe:89:58:7d:
4d:6a:74:90:0b:f5:7d:a5:00:87:19:8d:bf:1b:d7:
33:51:c7:cc:b9:e7:6a:a8:62:4b:79:a1:99:4b:8c:
4e:b7:c4:80:3d:fe:ee:87:db:38:4c:19:7a:39:98:
ba:65:ba:c0:ce:c6:cb:5c:bf:a3:f8:43:79:ec:11:
4f:51:a2:55:a7:9a:7b:3e:2c:67:04:57:d4:82:14:
04:4a:ed:19:76:0d:73:38:66:e1:e6:11:83:f8:f4:
60:7b:01:9f:0c:9b:e9:59:7f:a7:96:a6:18:5e:37:
37:4c:04:9d:f5:d9:9c:5e:66:f6:7c:94:8a:3a:b9:
18:9d:a2:80:27:71:fc:93:63:9d:7e:7d:de:41:c8:
88:dd:d2:1a:a0:ae:2b:f1:5b:cb:27:ab:32:a4:0b:
69:4d:f7:b8:76:f0:5d:df:18:17:a9:85:5d:85:9d:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:24:9B:5B:B1:F6:A9:12:9E:04:B7:DD:61:5B:1B:C2:8E:D9:E2:57
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/CSSbW7H2qRKeBLfdYVsbwo7Z4lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.80.0/22
Signature Algorithm: sha256WithRSAEncryption
23:b9:dd:0c:67:f9:fd:85:e0:dc:0c:b1:cf:cc:68:29:c3:e5:
df:ba:71:4c:84:51:79:51:7b:9d:38:d2:63:e3:46:ce:e0:70:
51:75:31:33:e7:d0:00:6e:06:8f:e8:af:17:da:d5:54:2d:7e:
3e:c4:c5:4a:44:8e:06:af:91:f6:7e:90:84:14:c4:7d:fc:e3:
ba:a8:8b:c4:2e:e6:2a:79:4b:cf:a6:f0:9b:bf:31:a7:3b:32:
0a:37:7d:48:98:c1:ec:2f:f4:5c:67:9f:b8:08:c2:01:62:1b:
58:25:01:7d:b6:07:1d:ec:6d:9e:bb:cd:a4:61:15:c7:c7:d3:
26:39:3b:9e:73:47:3b:a8:0f:45:56:ac:7e:e3:7e:b3:d2:1a:
7d:4e:47:ce:f7:10:98:44:f6:ca:f4:ce:13:17:bb:53:24:13:
72:01:9b:11:a2:c0:79:f7:6b:23:52:9f:b4:d4:4b:90:bd:ac:
38:aa:18:05:9a:7c:3f:ac:94:59:bd:b1:4f:0b:00:06:c6:69:
28:e0:ee:d5:bf:2a:d1:c4:e5:fc:a3:0a:73:ef:d0:ec:11:83:
88:73:fd:af:20:8a:1b:f3:88:7a:78:9b:9a:af:48:f1:f8:06:
64:fb:46:dd:38:dc:47:b9:13:f3:40:f1:1c:80:f8:01:b5:f4:
35:f2:1e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:47 2023 by rpki-client on console-ams.rpki-client.org