Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ce69ca-ca64-4e2e-9c08-b5f405946d4f/1/SE-D6h5riHXuEF5p9XDTg4jcAaA.roa
File: SE-D6h5riHXuEF5p9XDTg4jcAaA.roa (raw, json)
Hash identifier: +GjcguEr3ppCNIfCS/VkINZutxFASEuwiUx1vjybOwo=
Subject key identifier: 48:4F:83:EA:1E:6B:88:75:EE:10:5E:69:F5:70:D3:83:88:DC:01:A0
Certificate issuer: /CN=05592d788f179cc11ae11580225aebfef5bd8858
Certificate serial: 01856E78D3830AFD804D11B5EDF249077CBA
Authority key identifier: 05:59:2D:78:8F:17:9C:C1:1A:E1:15:80:22:5A:EB:FE:F5:BD:88:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVkteI8XnMEa4RWAIlrr_vW9iFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ce69ca-ca64-4e2e-9c08-b5f405946d4f/1/SE-D6h5riHXuEF5p9XDTg4jcAaA.roa
Signing time: Sun 01 Jan 2023 17:54:50 +0000
ROA not before: Sun 01 Jan 2023 17:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15626
IP address blocks: 171.33.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:d3:83:0a:fd:80:4d:11:b5:ed:f2:49:07:7c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05592d788f179cc11ae11580225aebfef5bd8858
Validity
Not Before: Jan 1 17:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=484f83ea1e6b8875ee105e69f570d38388dc01a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:66:d1:b7:04:6b:1f:fd:b9:c0:31:81:f0:
5e:d1:d1:33:6a:35:f2:21:23:81:7b:df:12:e6:7e:
66:31:06:bb:e2:68:9b:7b:51:a3:a0:0a:ec:3f:f4:
97:46:c8:e9:46:b8:bc:cc:66:9c:25:c6:13:76:12:
e1:76:59:7a:96:41:ca:42:e1:94:a3:ee:f7:32:02:
df:9b:fa:97:7b:df:10:13:43:d6:28:b3:55:1b:f8:
66:bd:43:54:01:7d:26:0c:7b:d0:d7:0f:f3:83:29:
37:78:a3:2c:4e:ab:43:0f:cb:43:be:aa:5b:62:7d:
4e:52:df:56:99:43:d6:3d:ca:03:aa:1f:97:63:24:
44:a4:ca:4b:5c:44:28:bb:d3:38:a7:68:5a:ae:83:
dd:ee:9f:ae:79:8d:fc:7a:70:3c:5a:ab:00:45:af:
31:83:21:96:92:96:77:c7:46:19:ed:9c:fa:6e:1f:
75:42:6d:e4:d5:ce:be:01:d8:24:d4:e5:98:69:64:
ff:fa:b6:5c:c2:2d:01:25:f6:30:40:e0:68:c3:cb:
a2:c0:f2:2b:67:e4:33:17:97:6c:8d:39:12:17:ef:
01:82:be:0c:c4:ed:2f:53:6e:9f:e8:83:92:a3:af:
93:27:ce:ee:72:a9:d3:a4:ad:91:35:71:fc:fe:31:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:83:EA:1E:6B:88:75:EE:10:5E:69:F5:70:D3:83:88:DC:01:A0
X509v3 Authority Key Identifier:
keyid:05:59:2D:78:8F:17:9C:C1:1A:E1:15:80:22:5A:EB:FE:F5:BD:88:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVkteI8XnMEa4RWAIlrr_vW9iFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ce69ca-ca64-4e2e-9c08-b5f405946d4f/1/SE-D6h5riHXuEF5p9XDTg4jcAaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ce69ca-ca64-4e2e-9c08-b5f405946d4f/1/BVkteI8XnMEa4RWAIlrr_vW9iFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.33.241.0/24
Signature Algorithm: sha256WithRSAEncryption
28:81:62:88:19:04:79:43:9b:f2:c8:e4:c1:da:e4:1d:59:7f:
50:83:e1:b6:45:3e:8f:f1:7c:67:93:9f:71:ac:db:1c:fe:0c:
0a:c0:3e:ea:5b:81:d5:93:46:2c:72:0b:77:68:8b:8a:95:33:
b7:74:64:db:81:ba:99:58:2f:73:16:4d:6c:00:e2:52:4a:35:
39:b6:b8:05:ab:f3:35:c9:34:ae:ca:5a:a6:c1:ca:9a:0b:f3:
b7:5e:d2:ba:e7:8d:5e:79:59:b6:68:67:0a:8e:9d:ef:8b:b3:
e0:56:b7:71:1b:6d:6e:01:45:52:06:26:5e:3d:20:3e:35:da:
32:fc:c8:56:84:57:de:04:29:1a:27:b1:29:2c:fe:89:82:24:
6d:04:95:08:7d:43:aa:d6:85:d2:a5:65:dc:3c:22:fb:a3:ba:
1b:19:69:4e:f1:55:18:62:86:29:a1:1f:0a:9c:b3:9b:4c:91:
7c:eb:fc:2b:90:c1:d4:1d:bf:84:88:03:e8:f5:58:e5:60:9a:
f8:6a:ad:77:c2:18:74:93:5d:8a:62:d4:47:ff:4b:61:d3:6a:
a2:a4:fd:bb:6d:4f:f7:86:e5:1a:c3:26:f3:6b:f9:18:90:88:
83:d2:7a:9d:2d:80:a6:62:71:49:58:d5:c0:dd:99:4f:c3:54:
04:a3:4b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:20 2024 by rpki-client on console-fra.rpki-client.org