Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/px-evj4XWwlqO224dTwkUUi-fFA.roa
File: px-evj4XWwlqO224dTwkUUi-fFA.roa (raw, json)
Hash identifier: 6Ke9dCOnJra/mYown/ocIMfXLpO0a9b3piqGPxQnHAc=
Subject key identifier: A7:1F:9E:BE:3E:17:5B:09:6A:3B:6D:B8:75:3C:24:51:48:BE:7C:50
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018616A04D88D17286FE426C78F06CCC5AC8
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/px-evj4XWwlqO224dTwkUUi-fFA.roa
Signing time: Fri 03 Feb 2023 09:34:09 +0000
ROA not before: Fri 03 Feb 2023 09:34:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57770
IP address blocks: 148.222.240.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:16:a0:4d:88:d1:72:86:fe:42:6c:78:f0:6c:cc:5a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Feb 3 09:34:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a71f9ebe3e175b096a3b6db8753c245148be7c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:4a:0a:d6:d8:fb:30:63:de:8a:10:f4:34:
4a:88:5f:a9:23:bf:99:01:fc:32:42:b7:23:cf:f8:
6c:be:ff:8a:22:41:72:4f:2a:34:68:7e:19:97:55:
c8:3a:cf:93:4e:fc:ca:21:8d:0e:2a:02:5b:96:7b:
7d:62:05:1e:83:93:c5:49:74:90:15:f9:e3:c7:54:
b7:b9:fa:6d:fe:d9:4c:20:ca:67:02:91:c4:7c:76:
1e:b8:b1:74:4b:46:39:1f:cb:93:6b:e5:6c:a7:ee:
3e:fb:ab:66:55:98:31:59:50:ac:9b:0e:02:78:da:
a8:83:ba:0a:04:15:31:a2:b1:07:7a:19:11:7a:f2:
ef:c1:6f:de:27:88:1e:ee:55:84:91:13:7e:44:72:
1c:85:8e:80:03:f4:27:33:84:e4:49:e9:3a:ed:ef:
e3:a7:74:00:f7:0d:55:c5:38:6b:fe:97:9f:8e:32:
a3:8f:e8:d5:84:02:4f:29:fe:a8:06:d0:10:21:ec:
76:3e:d5:75:dd:00:b0:38:c2:13:d8:80:28:bb:db:
68:cc:c7:cd:62:cb:64:bc:9b:53:b1:8d:70:7b:88:
22:a8:4f:e7:b4:bb:84:c9:d3:b5:79:5c:cb:49:ef:
48:c9:f6:68:9b:9b:c2:52:b1:6b:ad:ae:aa:15:b7:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1F:9E:BE:3E:17:5B:09:6A:3B:6D:B8:75:3C:24:51:48:BE:7C:50
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/px-evj4XWwlqO224dTwkUUi-fFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.240.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:7b:e8:7d:91:02:fa:a5:07:95:6d:cf:b4:48:fb:f3:23:5f:
34:1e:14:ef:91:05:ce:0e:2d:b8:20:82:8c:0b:6c:7c:a2:d9:
76:a8:78:7e:13:5b:33:ac:f9:86:0e:9e:83:58:c5:db:8d:40:
b0:2c:55:08:f7:72:cb:09:fd:70:e6:cf:6e:c7:e9:64:e4:6e:
3f:90:2f:88:f5:2e:31:9b:f8:bf:73:20:47:d1:9e:18:5a:15:
26:9c:ad:ab:41:f7:9c:93:24:06:4f:47:e4:94:b8:f3:60:19:
d7:5f:48:d1:11:ea:8c:57:43:e7:4e:26:8f:6d:03:b8:da:fb:
b0:92:f7:ad:56:73:5e:c9:71:03:8b:86:f8:bf:9a:11:75:3a:
03:1d:f9:cc:5a:64:77:2c:40:2f:ed:5c:3c:43:1d:78:14:54:
aa:6c:cc:2f:61:f1:92:f4:46:59:42:55:3a:47:f0:2b:d5:bf:
5b:83:0a:6e:2d:a9:4e:30:70:7f:f1:1c:5b:80:18:0a:e2:3c:
a8:af:b2:df:14:c7:0f:e3:fa:1d:03:f7:7f:b5:dd:da:36:e2:
7e:d1:6a:3a:1a:1f:52:8f:92:b6:66:d7:8e:c4:ce:56:f0:8e:
c9:ca:c2:2c:8d:dc:bd:a1:4c:0c:13:36:b7:56:c9:87:d7:c0:
ab:9e:33:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-ams.rpki-client.org