Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/KAzIsIKj2tPoigc0WQpkWa9mag4.roa
File: KAzIsIKj2tPoigc0WQpkWa9mag4.roa (raw, json)
Hash identifier: aqwRxwqUgCw+Udb4P80ENVWvXrVoc3ETWeW3IbcjxFM=
Subject key identifier: 28:0C:C8:B0:82:A3:DA:D3:E8:8A:07:34:59:0A:64:59:AF:66:6A:0E
Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial: 01856B80F88F18E13C6DCC69C0B67C78958C
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/KAzIsIKj2tPoigc0WQpkWa9mag4.roa
Signing time: Sun 01 Jan 2023 04:04:52 +0000
ROA not before: Sun 01 Jan 2023 04:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10429
IP address blocks: 192.109.147.0/24 maxlen: 24
2a07:8143::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:80:f8:8f:18:e1:3c:6d:cc:69:c0:b6:7c:78:95:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Validity
Not Before: Jan 1 04:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=280cc8b082a3dad3e88a0734590a6459af666a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:d4:9b:f6:78:a8:a3:06:03:3c:60:5f:78:
47:1e:8d:16:30:b2:72:4e:07:2b:fd:b0:52:52:45:
50:03:c9:85:57:25:45:3d:ec:c8:56:0a:87:19:de:
fc:e3:16:08:23:2d:04:a7:e3:7a:2b:ac:d3:41:94:
48:fe:b9:48:41:a2:3b:02:99:d2:f9:2f:b8:de:7e:
a9:14:c5:93:5e:f3:94:2a:d2:ce:9a:e9:e4:23:80:
90:c8:e6:43:74:39:f6:63:7b:94:97:a8:28:cf:d6:
74:e4:f7:57:69:29:a7:c8:9c:fc:07:5d:e8:b9:04:
dc:6b:9c:db:24:d2:d1:ff:8c:b9:ab:07:97:be:34:
03:8e:da:94:7c:2a:79:ef:00:e7:ad:99:21:74:2b:
04:ec:4d:0e:bb:52:04:c5:f9:f0:6c:62:7e:cb:b2:
c8:15:48:91:33:02:d0:46:c2:b8:f4:52:83:fd:18:
5c:6e:57:9a:9d:57:a5:c5:20:c6:5d:c5:dd:df:68:
cf:ca:0f:f5:32:68:14:1b:eb:ce:67:ac:60:79:f2:
ff:ca:0b:f6:de:0f:98:8d:c8:a7:e7:7c:ee:35:15:
6f:74:39:f6:14:0d:72:5f:cc:6b:3a:99:ec:eb:f1:
d8:8a:8b:4c:aa:63:b4:be:be:91:8d:d5:25:11:07:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0C:C8:B0:82:A3:DA:D3:E8:8A:07:34:59:0A:64:59:AF:66:6A:0E
X509v3 Authority Key Identifier:
keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/KAzIsIKj2tPoigc0WQpkWa9mag4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.147.0/24
IPv6:
2a07:8143::/36
Signature Algorithm: sha256WithRSAEncryption
4d:d4:d6:2b:55:22:4b:19:ce:aa:14:3b:7f:ff:76:ee:19:87:
ad:74:f1:f2:1e:aa:5e:ed:b0:38:f7:bf:b1:c3:6b:44:37:e9:
cc:dc:05:c1:d0:4b:be:c6:1d:f7:11:ae:11:97:ca:69:f3:1a:
2b:5f:d4:0a:a1:49:bc:28:f6:e3:9a:0b:5d:a0:dd:f8:a5:59:
f4:af:6b:19:91:3d:a8:31:12:b6:66:d6:cb:21:d2:f0:4b:8a:
00:7f:72:30:58:55:b5:84:a4:53:d6:49:76:b8:77:1c:df:08:
d9:89:27:ef:fe:5b:e4:ee:87:98:b8:f8:72:72:46:d9:08:60:
4a:c0:c7:d9:77:e2:46:ad:04:d8:2f:3b:cd:22:f1:24:b1:8a:
82:4f:47:ba:fb:ee:ca:69:d9:b8:4e:cc:05:51:43:aa:11:ba:
21:2e:1b:83:f6:f7:c4:a4:d0:63:6e:e7:6f:5e:c2:89:67:13:
f1:0d:61:24:78:63:e5:f9:69:e8:60:c7:ca:70:d3:a2:b6:f0:
11:ac:26:5f:fd:fc:8e:fb:ee:29:82:26:c7:18:7f:2d:81:fc:
cd:01:df:3c:a4:58:fa:2b:60:9f:50:2f:75:be:0b:14:64:c6:
fa:0e:d5:b9:9d:61:78:1e:7b:cf:9b:e4:f8:73:dc:3b:5c:0d:
4a:79:64:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:10 2024 by rpki-client on console-fra.rpki-client.org