Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/rN7wgDOfq8hLW3jc2xXGu-0dVhA.roa
File: rN7wgDOfq8hLW3jc2xXGu-0dVhA.roa (raw, json)
Hash identifier: ioJ7HgB1X4tpa1cLY82b6vI+vnvWTwONWxRuHWupXME=
Subject key identifier: AC:DE:F0:80:33:9F:AB:C8:4B:5B:78:DC:DB:15:C6:BB:ED:1D:56:10
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 01856D9D33F3ED3AF811F0EFD875F3EBF889
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/rN7wgDOfq8hLW3jc2xXGu-0dVhA.roa
Signing time: Sun 01 Jan 2023 13:54:56 +0000
ROA not before: Sun 01 Jan 2023 13:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 84.22.148.0/23 maxlen: 23
84.22.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:33:f3:ed:3a:f8:11:f0:ef:d8:75:f3:eb:f8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jan 1 13:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acdef080339fabc84b5b78dcdb15c6bbed1d5610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:9b:33:ea:cc:00:ca:c8:9d:80:65:82:9c:
6c:26:48:d0:e3:08:4a:25:55:cc:22:19:7a:51:3c:
3e:63:94:28:f7:d2:f6:99:9d:ff:91:1e:5d:be:38:
68:05:a1:5c:d1:6c:33:ab:d5:79:36:68:c2:2e:f7:
a9:3c:9f:7f:6e:80:a3:3f:21:c7:7d:e1:d4:31:fc:
8b:7a:ab:3b:82:2f:fe:91:27:0a:43:d3:b2:86:11:
02:e1:fa:08:fd:6b:b6:59:b1:b3:df:67:c1:0e:c9:
28:cb:8b:6d:9d:04:80:ea:70:45:bd:8f:9d:c7:0f:
de:45:0a:b4:c2:cd:a8:2c:cc:93:a1:21:7b:86:c2:
6b:a3:dd:25:c5:f2:20:b5:45:c9:27:82:a5:02:cd:
55:51:bf:64:11:c7:28:74:84:d6:1e:c8:87:85:8b:
30:83:6b:32:21:2e:db:1a:cc:6d:35:63:c1:83:85:
58:a1:d1:04:6f:a1:4c:cd:52:b8:69:b7:0d:0f:b8:
5d:d3:ca:ab:29:4f:ab:f0:0f:6c:33:53:fb:af:83:
9b:92:04:85:24:fe:75:71:cd:ba:53:be:6c:74:01:
56:48:71:43:6e:74:d6:9b:fd:7c:29:d4:5b:ad:bb:
ff:4d:bb:62:da:7a:6f:48:ba:58:a4:66:13:65:8d:
1b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DE:F0:80:33:9F:AB:C8:4B:5B:78:DC:DB:15:C6:BB:ED:1D:56:10
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/rN7wgDOfq8hLW3jc2xXGu-0dVhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.148.0-84.22.150.255
Signature Algorithm: sha256WithRSAEncryption
51:40:c4:c9:e6:f9:10:9f:11:79:ce:6d:e9:cb:6b:fa:ca:2c:
5e:12:e8:54:7c:b0:01:b5:37:f4:bd:06:3a:81:cd:ac:55:41:
b7:7c:6b:1e:77:58:11:8c:b8:1c:2f:fd:49:cc:30:2c:52:e4:
08:c0:e9:86:e4:7a:74:7d:5b:7a:9b:7e:ba:ff:65:f4:06:7a:
b0:8b:12:5d:59:56:db:ea:84:b6:9d:ab:77:02:1b:7a:e7:c0:
25:36:c9:13:a7:97:a9:4f:7e:2e:9d:06:5f:5e:ae:24:c7:c4:
53:ae:9d:e9:33:6b:66:e4:bc:cb:68:84:30:53:04:de:20:a2:
bd:53:08:12:bc:87:26:cc:af:be:46:36:d7:09:18:d6:19:c5:
5d:96:c1:45:3f:20:e8:49:0b:1c:01:5e:d4:29:fe:20:2b:99:
6f:68:21:4b:08:a8:04:35:3c:4e:e0:ff:f8:36:1b:1f:85:99:
c2:d5:0c:06:47:8a:b5:3a:22:68:1a:fd:a0:b1:49:1f:2e:5a:
d9:23:f1:08:1a:12:60:35:93:bb:0f:98:78:3c:b8:a0:14:56:
a9:6b:94:51:eb:d7:92:9a:97:90:6e:e8:e7:16:8d:ff:f9:59:
1b:de:f0:ff:39:2f:8e:78:cb:dc:1c:8b:01:34:a4:f5:0d:61:
f6:25:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:09 2024 by rpki-client on console-ams.rpki-client.org