Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/SK9bWQ-jZlFPXJ4DdxrtUVkbdGU.roa
File: SK9bWQ-jZlFPXJ4DdxrtUVkbdGU.roa (raw, json)
Hash identifier: NE8COdPbiHBDk+HnJVgUsldUp1vWvwn5zy/Ve/6lJ44=
Subject key identifier: 48:AF:5B:59:0F:A3:66:51:4F:5C:9E:03:77:1A:ED:51:59:1B:74:65
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 018570FBD465CCE0E10D79EDE22F5CC9C558
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/SK9bWQ-jZlFPXJ4DdxrtUVkbdGU.roa
Signing time: Mon 02 Jan 2023 05:37:10 +0000
ROA not before: Mon 02 Jan 2023 05:37:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28920
IP address blocks: 155.193.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:d4:65:cc:e0:e1:0d:79:ed:e2:2f:5c:c9:c5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jan 2 05:37:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48af5b590fa366514f5c9e03771aed51591b7465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:70:50:50:40:98:00:c5:2c:70:4f:cd:d2:
14:ab:b8:a2:15:3e:74:29:b0:34:b0:68:c0:14:ab:
72:2e:53:b4:79:b8:47:99:ad:ef:39:e2:18:61:97:
ea:a7:ca:bc:b6:1c:7a:76:13:c5:7b:e2:c8:49:77:
2c:55:5d:6b:31:f6:fb:58:11:a1:47:08:44:30:66:
47:b0:2b:1d:19:ec:6b:df:13:3f:d2:64:1d:fe:38:
f8:f1:0a:a2:98:c9:74:3c:32:15:50:9b:81:51:3c:
ed:5b:ba:17:25:06:7b:fc:34:09:78:46:ad:30:49:
1e:20:87:de:c9:cc:ce:8c:83:7b:76:46:b5:3c:6c:
56:38:87:4e:b8:7a:f9:75:bf:43:c6:da:8d:38:e3:
16:d9:5a:68:cc:b2:33:27:be:54:d0:35:4f:73:f3:
9d:fe:26:da:c6:a1:6b:b3:9e:b8:64:5d:a6:1c:a0:
b8:ac:6d:a1:c6:91:17:c5:58:11:4a:ce:f6:29:d3:
88:ff:80:1d:31:41:15:88:28:ad:25:fc:0c:ac:66:
08:5a:f3:ff:70:1d:5b:0a:7f:a5:3f:b5:3e:77:2a:
79:55:47:f3:7f:7a:1a:97:70:9d:19:2d:06:91:13:
6a:ca:f0:14:0e:ca:2e:00:dd:04:52:a2:72:9e:e6:
2c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AF:5B:59:0F:A3:66:51:4F:5C:9E:03:77:1A:ED:51:59:1B:74:65
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/SK9bWQ-jZlFPXJ4DdxrtUVkbdGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
92:63:a1:e6:91:93:42:c7:df:41:27:a8:9e:fd:f3:ee:59:3a:
85:a4:14:61:9f:de:7f:83:dd:77:6c:90:35:9b:68:e9:71:1c:
3c:18:c2:bc:5f:66:a4:c8:e9:8c:94:d4:17:97:32:03:af:ac:
5e:fd:9b:25:ea:e1:06:55:d6:ee:15:2e:ae:f6:55:e0:f1:97:
dc:4f:fd:90:1b:ee:75:7d:c3:d5:ba:f5:03:2d:33:65:82:e4:
e8:16:4b:f8:53:ed:cd:74:2a:3d:8f:96:11:ba:27:1b:00:3c:
b1:2d:83:09:7e:f4:7b:fe:f8:1a:0b:2d:fa:83:97:a0:1c:6a:
5f:94:f7:db:ba:4d:26:34:1d:a2:96:ee:7a:dd:90:af:d5:cc:
f8:62:37:ec:cb:77:6c:7c:26:b1:0b:8c:d4:63:2b:a0:e3:cd:
70:0e:22:25:e8:a3:a1:2e:c0:3e:37:43:16:d9:9e:54:f2:a1:
e0:eb:2b:dd:1f:e3:a9:45:1a:1d:70:3f:cd:a0:b0:fa:78:c8:
54:b3:95:21:43:c6:65:dd:9e:05:c8:ce:31:f2:26:d9:7a:8d:
17:f0:c5:6d:50:7b:03:e0:c1:fc:b3:50:27:9d:8b:fe:68:64:
c4:3b:7d:4d:e5:f3:b0:84:a1:16:9f:34:ac:1a:27:ab:01:e8:
6d:8e:21:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:02 2023 by rpki-client on console-fra.rpki-client.org