Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/8lnGk6Um8GAW_p7TZmGFhesJgIU.roa
File: 8lnGk6Um8GAW_p7TZmGFhesJgIU.roa (raw, json)
Hash identifier: LvreUb5rpgha4q47sqCwvSJPDvW0Q8jopZEfrw3mzUE=
Subject key identifier: F2:59:C6:93:A5:26:F0:60:16:FE:9E:D3:66:61:85:85:EB:09:80:85
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01856F26D6AC59A150E9B4C445E80D0B8694
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/8lnGk6Um8GAW_p7TZmGFhesJgIU.roa
Signing time: Sun 01 Jan 2023 21:04:54 +0000
ROA not before: Sun 01 Jan 2023 21:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15626
IP address blocks: 130.0.232.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:d6:ac:59:a1:50:e9:b4:c4:45:e8:0d:0b:86:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 21:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f259c693a526f06016fe9ed366618585eb098085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:53:79:d6:85:88:ca:4c:c2:48:00:3c:5a:
ec:26:fc:67:18:35:3d:e3:ec:d8:e2:b5:1c:79:bc:
d0:ef:a5:97:f5:64:0d:82:36:06:31:98:ee:97:be:
b9:94:a2:39:17:13:82:40:b4:c6:8b:43:9f:79:29:
73:43:93:38:e2:6f:14:0e:ec:1c:c4:24:42:25:62:
49:61:75:3c:69:7d:a7:ca:dd:4c:7c:20:a7:41:f9:
0f:da:59:2e:c9:1a:42:2b:3b:83:fe:80:d4:4c:1f:
42:4f:d6:57:50:4e:8f:f9:43:b9:15:e9:94:70:6c:
e9:28:27:f0:97:3a:c0:8f:77:20:a0:65:41:c0:29:
4f:97:95:d3:44:85:83:8c:6a:10:38:8f:aa:d3:d6:
43:b1:60:67:18:cf:0e:3a:98:03:7d:dc:6a:8c:c6:
8f:b2:1a:68:a7:88:bb:f3:3e:67:32:b0:30:78:46:
ff:6d:5b:29:09:a1:30:39:63:cb:9b:02:5f:cd:c8:
f6:a2:18:08:0b:e1:30:14:5c:91:2d:4d:12:20:f3:
5f:c5:09:22:13:2b:76:38:54:4e:a4:b9:e0:95:20:
38:c3:0e:d6:f2:82:74:34:3d:11:31:d6:be:cc:69:
6d:c8:24:8f:5f:4e:7e:ad:11:02:74:f4:78:98:cd:
a0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:59:C6:93:A5:26:F0:60:16:FE:9E:D3:66:61:85:85:EB:09:80:85
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/8lnGk6Um8GAW_p7TZmGFhesJgIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.0.232.0/21
Signature Algorithm: sha256WithRSAEncryption
65:81:16:34:87:db:02:2f:29:d2:6b:05:d2:d1:17:5f:fc:38:
a8:03:e7:b9:94:af:50:1b:2a:e0:44:fb:8a:c2:4b:91:15:fa:
71:37:1a:91:81:cf:56:61:07:9c:30:c6:f1:f8:1f:4a:29:aa:
87:f1:0c:71:80:dc:c6:7e:ed:bd:d0:da:3c:cc:e8:10:66:92:
e7:f0:2d:45:d8:be:9e:6e:d3:ed:dc:9a:5f:a4:5e:fe:7b:fb:
53:bb:cc:f5:ca:44:2a:1d:fc:95:cf:2d:d8:e4:03:17:5e:65:
6e:a3:e7:af:82:e6:29:77:48:82:78:cf:87:26:be:57:75:4e:
70:1b:cf:be:b0:ca:cb:88:a0:5b:de:0c:ef:b8:45:c1:9e:f2:
ec:95:70:d3:d1:ba:0c:9e:a1:cf:93:7c:d0:10:11:3c:33:e8:
c3:45:94:47:e9:c1:23:75:1a:2f:83:63:d1:32:2a:e3:61:d5:
e1:7a:35:79:53:2b:9b:91:62:52:08:64:ff:03:b8:e6:ea:66:
c9:28:f0:f0:03:8b:23:a2:ae:f9:f5:d2:2e:52:63:7c:31:48:
e3:81:cf:89:aa:90:64:22:0e:93:fe:d9:f8:2a:f9:88:45:ad:
46:ee:43:7e:d6:a4:1d:0d:76:19:22:73:f6:38:f0:72:ae:47:
c2:98:a2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:11 2024 by rpki-client on console-ams.rpki-client.org