Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/okIKlsTqSHH6WqTqTUka8BqPobM.roa
File: okIKlsTqSHH6WqTqTUka8BqPobM.roa (raw, json)
Hash identifier: f5ZmHbwCUH3B9MmPYBmXMO7dw1cOR3+CURhx1Wxbf0Q=
Subject key identifier: A2:42:0A:96:C4:EA:48:71:FA:5A:A4:EA:4D:49:1A:F0:1A:8F:A1:B3
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018752875AC52986A90B5BF9AA577C054207
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/okIKlsTqSHH6WqTqTUka8BqPobM.roa
Signing time: Wed 05 Apr 2023 17:46:54 +0000
ROA not before: Wed 05 Apr 2023 17:46:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 148.222.240.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:87:5a:c5:29:86:a9:0b:5b:f9:aa:57:7c:05:42:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Apr 5 17:46:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2420a96c4ea4871fa5aa4ea4d491af01a8fa1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:af:e9:54:a0:2f:27:8f:dc:b6:49:eb:af:
f7:f4:ff:f1:94:fb:17:7c:87:4d:cf:85:27:c6:8b:
0d:1a:21:e7:91:a2:3f:50:42:28:79:2e:0b:db:91:
1a:02:09:98:e2:d1:59:5b:f9:29:95:d2:1f:c1:1c:
8d:f2:73:f1:2e:47:51:36:d6:56:21:d7:63:ef:7d:
f5:16:5a:40:38:8b:8e:e8:24:22:9d:2a:c7:27:c7:
e8:d4:ad:ae:01:c5:2c:e6:f7:15:8e:8f:91:be:ff:
bb:72:2a:cb:12:81:87:61:a0:0c:51:e2:53:34:e0:
fc:a6:c7:81:c9:d5:0d:20:5f:8f:9d:c0:87:aa:5c:
0a:b0:6c:7d:f6:e3:09:77:1d:da:b7:93:a8:4f:0a:
a5:51:07:b4:1c:27:95:6e:a7:80:5e:cb:52:63:be:
9d:02:ad:59:c8:f3:ee:12:6e:37:06:60:6c:13:c8:
5a:16:91:0a:e1:fa:48:fd:63:8a:7d:ff:95:54:ba:
00:24:b6:f0:f2:47:fc:98:24:73:21:d5:41:b7:e9:
42:f3:80:aa:e2:a3:79:38:d7:c9:ce:77:af:37:90:
4c:78:31:0b:11:48:9b:5d:6a:e0:be:86:70:32:47:
55:2d:6e:4c:10:3f:2a:29:b7:60:0f:d7:d6:d3:c6:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:42:0A:96:C4:EA:48:71:FA:5A:A4:EA:4D:49:1A:F0:1A:8F:A1:B3
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/okIKlsTqSHH6WqTqTUka8BqPobM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.240.0/22
Signature Algorithm: sha256WithRSAEncryption
36:22:a9:f6:3b:b6:30:2b:98:5f:b2:a0:93:26:4e:4d:fe:8f:
6a:20:89:92:37:e8:fe:3b:66:57:1a:9f:95:e0:20:10:51:1e:
7c:c8:89:e4:06:2d:24:26:cf:95:85:b0:44:ec:7a:79:d3:70:
95:c2:61:a9:86:93:7b:4c:4d:12:be:94:26:df:06:67:ea:14:
a2:46:7c:66:49:a7:82:40:a2:ee:87:d7:b9:6a:a2:c6:d2:6a:
7a:1d:59:40:75:c5:f0:a9:b7:63:e0:2e:bb:b5:a4:04:7c:0a:
ba:01:7d:37:be:84:36:03:43:5d:03:78:0f:fe:1f:6e:30:e2:
94:9a:87:67:7d:16:3c:32:a0:fa:6f:56:65:27:c8:11:40:cf:
69:8e:c8:4a:bf:1f:41:dd:9e:bb:3e:85:63:75:24:f8:7e:62:
a6:2e:c6:16:0e:9f:21:92:7c:47:76:3d:74:c0:d1:ce:c2:23:
63:bf:de:04:25:fc:91:10:d5:49:c0:22:d2:f0:03:7a:43:ee:
6d:bc:50:9b:bb:d9:1d:48:ab:78:f7:d3:75:16:89:25:64:72:
18:a7:45:be:a1:78:c8:da:bb:d4:de:65:01:98:7b:09:08:ce:
bd:f7:5c:1d:53:67:29:a1:ef:bd:45:56:b2:7d:4b:3f:72:7e:
b5:90:c3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-ams.rpki-client.org