Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/oXzoRU-4unjjawSP-etM8dK2NTY.roa
File: oXzoRU-4unjjawSP-etM8dK2NTY.roa (raw, json)
Hash identifier: lFp8sdog2tyojPLOha6F0Q9yQAujSF+3K7hyX82y/3c=
Subject key identifier: A1:7C:E8:45:4F:B8:BA:78:E3:6B:04:8F:F9:EB:4C:F1:D2:B6:35:36
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0185727A38839B4CB4DF4AFB21772D25D728
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/oXzoRU-4unjjawSP-etM8dK2NTY.roa
Signing time: Mon 02 Jan 2023 12:34:50 +0000
ROA not before: Mon 02 Jan 2023 12:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60021
IP address blocks: 185.148.12.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:38:83:9b:4c:b4:df:4a:fb:21:77:2d:25:d7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a17ce8454fb8ba78e36b048ff9eb4cf1d2b63536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9d:e5:cd:6b:2b:a2:7d:15:12:17:7e:3a:6a:
a9:8c:8d:30:4e:73:b6:ac:3d:a2:80:65:4c:25:3f:
84:e2:2d:c1:96:b5:2e:cd:1b:7c:18:91:f1:7d:7e:
41:9c:ad:66:25:6f:d8:e1:80:d5:4d:a2:c4:19:a8:
31:c8:19:65:9d:25:fd:72:b1:cb:44:6f:5c:50:40:
be:0e:4d:31:bc:68:d6:e5:84:81:6a:5b:cf:5a:16:
82:28:86:ff:a5:68:2d:79:02:4f:b7:cc:0f:a2:96:
53:23:be:bc:36:d8:e1:83:91:72:14:9b:8e:72:48:
92:8f:1d:d3:00:6f:c0:a0:66:f6:1f:c4:35:4e:fe:
b1:0b:e3:52:dd:3f:52:59:2a:31:e8:3f:98:c8:5d:
77:8b:db:ac:20:7e:b9:c7:ba:fc:bd:3f:03:3f:8c:
02:c6:71:4d:ec:38:20:da:43:ee:59:87:dd:6a:62:
24:b9:02:9d:61:ca:6a:a8:ae:3a:ad:29:6d:e9:7f:
76:24:79:fe:d8:71:83:4e:c8:b9:61:6d:2f:1e:71:
47:2d:5f:ac:5b:e9:8b:43:d3:02:e1:64:67:26:16:
29:ce:e7:96:53:6e:ee:d1:76:4d:22:5b:ad:d4:21:
1f:75:f4:27:cc:06:6a:03:6d:52:2f:2c:46:5d:e6:
ca:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7C:E8:45:4F:B8:BA:78:E3:6B:04:8F:F9:EB:4C:F1:D2:B6:35:36
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/oXzoRU-4unjjawSP-etM8dK2NTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.12.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:93:b0:b6:57:7f:f8:d8:50:39:1b:00:10:f7:81:89:0c:78:
9f:c8:35:69:f6:28:ab:fb:f7:10:d0:38:bb:54:e0:7f:9f:75:
c4:0f:4a:b0:1f:cf:7b:02:6f:af:df:4e:ef:76:04:5f:ee:eb:
da:ea:b4:73:bc:12:bd:48:78:10:b4:37:9d:c0:c5:0d:ac:33:
0a:25:d5:d4:c0:b0:05:5f:82:ab:28:5b:23:34:53:c2:d7:3c:
90:22:66:17:7a:bc:6d:11:40:0b:53:4e:ad:f0:0d:11:3e:d4:
39:1d:2c:b1:cf:05:a4:85:1a:f0:8b:da:60:a4:55:c2:56:44:
44:d0:21:0e:4e:96:48:b1:aa:ab:d0:8d:0c:a8:ae:55:24:98:
1c:e3:df:d3:cb:ec:5f:46:53:5e:a7:b9:c5:d1:f7:1c:85:86:
85:03:b1:06:6b:48:c3:b7:d3:dc:29:c4:ed:51:49:2e:e4:87:
ff:b8:fd:7c:19:eb:69:17:74:4e:a7:d0:45:b3:c6:70:92:dd:
eb:d1:70:b3:db:a8:41:63:4e:87:de:6c:84:2e:e2:c8:3b:96:
60:e0:27:f4:7f:5e:67:47:cb:c5:ad:01:78:ba:e1:70:b4:a7:
62:f3:d6:31:1d:56:10:21:d5:fa:c7:b5:b7:16:53:55:25:ba:
63:f7:6f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:24 2024 by rpki-client on console-ams.rpki-client.org