Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/fGPRsRZgeqsZcWLfqJ6DVIsxPm8.roa
File: fGPRsRZgeqsZcWLfqJ6DVIsxPm8.roa (raw, json)
Hash identifier: Ae2fSXp6uCpQdfGNzY5x/UgQr4vcs9I+wyuU8YSw0eM=
Subject key identifier: 7C:63:D1:B1:16:60:7A:AB:19:71:62:DF:A8:9E:83:54:8B:31:3E:6F
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018C87DDA232BE29DB152C091F3E0B5AF6DD
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/fGPRsRZgeqsZcWLfqJ6DVIsxPm8.roa
Signing time: Wed 20 Dec 2023 15:34:58 +0000
ROA not before: Wed 20 Dec 2023 15:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5650
IP address blocks: 148.222.244.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:dd:a2:32:be:29:db:15:2c:09:1f:3e:0b:5a:f6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Dec 20 15:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c63d1b116607aab197162dfa89e83548b313e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:8e:67:15:a9:b5:14:42:43:fa:c0:6e:69:
ce:21:d5:3e:e5:04:0c:4d:fb:a4:ed:85:da:4a:bb:
67:9f:f5:7b:1f:9e:18:35:72:f3:31:77:82:ee:f3:
fb:a3:8b:00:65:b1:ee:de:fb:f0:d5:d2:11:00:82:
f7:2a:61:15:a7:3c:ea:cf:52:84:71:71:89:33:7b:
75:29:de:ec:70:b6:ab:ef:63:74:35:a8:fd:71:74:
42:98:24:3a:aa:e5:51:d3:43:20:42:c4:9a:11:65:
35:ce:df:79:c2:96:e8:b4:1d:9a:d0:94:25:9c:46:
77:ee:ef:4d:25:98:4a:06:4d:cf:91:55:18:9e:30:
63:75:19:53:43:e6:da:d1:c8:d9:8d:69:d4:9b:1c:
cd:f8:7b:96:f0:55:d4:2e:f7:6c:a3:c8:bd:84:1f:
b2:28:a4:05:44:12:12:7c:de:74:76:28:1c:c8:f4:
ca:43:1a:8c:00:2a:26:bf:06:09:7f:16:a6:28:fe:
47:26:54:ca:32:73:db:7e:33:b1:47:75:88:2a:b8:
67:aa:c8:9b:93:44:6d:bf:13:6a:65:23:7a:6e:01:
73:e9:92:22:98:d4:09:d7:6f:b7:a0:a1:74:df:74:
bd:47:49:ba:69:c1:ff:75:59:d9:40:4f:a1:61:61:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:63:D1:B1:16:60:7A:AB:19:71:62:DF:A8:9E:83:54:8B:31:3E:6F
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/fGPRsRZgeqsZcWLfqJ6DVIsxPm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.244.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:b5:6b:e8:ad:f2:d1:3a:23:3c:79:38:1d:fd:28:16:54:3e:
9f:fc:33:df:54:6f:0b:d3:5c:bb:4d:f2:79:56:2d:44:a3:f4:
04:39:6e:e6:d9:b2:09:91:41:0c:14:2b:0c:4d:d8:83:45:bc:
03:18:91:c5:3f:38:3a:55:49:9a:8a:73:dd:77:5d:21:85:9a:
37:d2:a3:b8:05:1b:3a:74:54:91:7e:e4:75:e8:18:f4:fc:a0:
c1:93:62:aa:b2:1f:d9:fb:ce:08:ee:01:ad:2e:78:af:f7:30:
bd:4c:f4:9c:f8:53:8e:6b:2a:0e:66:e8:ae:a3:ff:6f:53:00:
2d:07:d5:81:f3:ef:df:43:f1:88:73:db:c6:51:eb:27:cb:55:
15:ac:4d:f9:ea:6f:6a:cb:2f:1b:b2:f0:00:af:31:3d:26:4d:
36:ae:5f:05:f7:90:b6:1b:5b:d6:4c:a8:4e:8c:d5:c4:96:5c:
20:95:16:fe:d6:4a:c6:0f:fa:24:40:6e:13:68:7d:45:7e:99:
c8:69:a2:39:83:cb:03:e0:d1:da:dd:bf:18:c0:dc:36:2c:42:
67:4e:9f:0c:1b:b9:d5:34:54:fd:f7:66:a3:88:e4:06:5f:0b:
b9:ee:8d:b1:a9:4e:fc:ea:6d:c3:cc:e2:e7:05:62:4c:ec:88:
b2:2e:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:38 2024 by rpki-client on console-ams.rpki-client.org