Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/sGaanaJ48zMh8VVpYNavgWkAPsE.roa
File: sGaanaJ48zMh8VVpYNavgWkAPsE.roa (raw, json)
Hash identifier: BJwi+0zeC55k8MS9hz0cNtUjcNM+sANJRG3NPcHCqrI=
Subject key identifier: B0:66:9A:9D:A2:78:F3:33:21:F1:55:69:60:D6:AF:81:69:00:3E:C1
Certificate issuer: /CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9
Certificate serial: 01866B2A951C44CBCD91CAF082686A5FD8FA
Authority key identifier: 13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/sGaanaJ48zMh8VVpYNavgWkAPsE.roa
Signing time: Sun 19 Feb 2023 19:33:18 +0000
ROA not before: Sun 19 Feb 2023 19:33:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8456
IP address blocks: 161.9.144.0/21 maxlen: 21
161.9.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6b:2a:95:1c:44:cb:cd:91:ca:f0:82:68:6a:5f:d8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9
Validity
Not Before: Feb 19 19:33:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0669a9da278f33321f1556960d6af8169003ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:90:b8:91:f8:f4:c3:8b:80:41:ee:27:83:0e:
da:95:33:e1:51:04:5c:7c:08:6d:bb:d7:58:ca:49:
b8:d8:ea:8c:39:8b:46:21:34:65:d0:46:3c:c8:74:
ee:6f:40:8a:0d:b8:37:5b:d7:f1:4b:a9:7d:d8:b9:
55:c1:41:96:d7:d6:f1:3c:32:a2:d3:2d:bf:88:05:
89:d0:be:16:96:da:6b:21:a6:bf:14:70:44:53:1b:
dc:60:94:95:7f:71:36:bc:9a:28:6f:71:f6:0c:f1:
8f:05:04:e4:d8:8b:aa:56:fb:3f:4e:b4:f1:41:bf:
a5:ab:45:ba:95:03:6e:18:f5:e8:40:53:b4:a2:3e:
c8:2c:a4:9b:89:1c:1c:f7:64:b0:a4:a2:1a:56:42:
2d:f7:5b:04:07:8a:e1:d0:ef:ce:bc:ff:13:cb:ff:
3b:f7:ad:94:9f:35:fb:51:87:71:c7:05:c8:4e:5b:
0d:85:69:f1:9e:51:e3:2a:80:13:a4:23:c0:71:37:
41:97:08:11:91:e8:a4:f6:7e:2d:8e:c9:be:fb:57:
7e:2b:24:d6:4b:16:88:59:83:9a:ba:22:bd:71:d6:
3d:f2:dd:3a:63:8c:ac:c1:95:e1:ed:82:ec:d9:ad:
04:33:82:5f:23:52:ca:b9:84:3f:60:93:8b:9a:f5:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:66:9A:9D:A2:78:F3:33:21:F1:55:69:60:D6:AF:81:69:00:3E:C1
X509v3 Authority Key Identifier:
keyid:13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/sGaanaJ48zMh8VVpYNavgWkAPsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.9.144.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:8d:54:ef:e0:2b:91:48:cd:61:62:49:01:0c:a5:58:65:43:
7d:b4:5c:65:6e:a9:28:5c:34:8c:9a:a5:1a:83:db:76:d5:30:
57:ad:d4:c4:eb:03:9b:12:6c:a2:12:9d:ef:96:9f:80:39:b8:
0e:2b:53:9f:af:7d:0d:33:46:a9:43:f5:90:c7:03:ee:93:7f:
ff:7d:75:cd:ae:1a:f4:66:6c:5e:34:52:14:7a:f7:ba:19:21:
7d:af:bc:b5:fd:d5:7d:6f:3a:0d:44:92:00:cf:7c:fc:24:ad:
e0:d9:dc:2b:54:3c:4d:aa:a1:77:2a:98:97:49:23:90:1e:53:
fa:aa:e9:0f:a4:b9:39:87:36:af:d2:e1:98:bd:1b:6a:0e:d8:
60:44:2f:0a:68:27:83:a8:fa:b4:91:36:55:30:39:61:7d:f8:
ee:a8:c8:2d:be:be:a8:98:36:6d:db:6f:43:84:e8:ea:a3:c6:
9f:3b:72:ec:37:4c:6e:8a:e0:3b:8f:1c:e8:d7:f7:8a:bd:0c:
9e:84:65:73:e6:3e:bc:03:d9:87:cd:2f:60:63:fa:cc:2d:79:
56:a3:fc:98:fb:85:57:c7:d0:86:68:a7:ec:ee:07:13:b4:a1:
56:7b:15:90:88:7e:96:c2:38:43:b6:60:fd:52:b2:d4:23:e8:
38:56:fa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:26 2023 by rpki-client on console-fra.rpki-client.org