Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/Q6inpdiVr7tys4hRLLA4PSgPPgs.roa
File: Q6inpdiVr7tys4hRLLA4PSgPPgs.roa (raw, json)
Hash identifier: sb0xnFM5HZJeOEZZ3qQ3JZTjVlCNfmnRI7EdrFjX/gY=
Subject key identifier: 43:A8:A7:A5:D8:95:AF:BB:72:B3:88:51:2C:B0:38:3D:28:0F:3E:0B
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 01856FF941E32EC4FA76E361678F1890E437
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/Q6inpdiVr7tys4hRLLA4PSgPPgs.roa
Signing time: Mon 02 Jan 2023 00:54:43 +0000
ROA not before: Mon 02 Jan 2023 00:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1103
IP address blocks: 136.231.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:41:e3:2e:c4:fa:76:e3:61:67:8f:18:90:e4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: Jan 2 00:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43a8a7a5d895afbb72b388512cb0383d280f3e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:28:e4:c3:84:e9:00:7c:93:76:52:0c:db:
d3:c3:62:4b:a6:5b:43:c0:2f:8c:b9:18:34:ec:79:
35:5d:27:af:26:ff:60:06:ba:4e:2f:9c:5d:a8:0d:
9c:67:4d:03:5b:38:cd:b6:db:bb:f7:da:07:20:f5:
60:0b:a5:9a:a1:0e:92:c6:28:22:fd:6a:a9:74:e6:
ad:08:82:b3:20:95:b1:b2:ca:61:a8:87:d3:4a:ea:
29:f9:15:b3:6b:95:e6:08:0d:fe:6d:17:e1:a0:18:
de:9c:dc:41:db:5f:2b:c5:2f:59:73:e2:23:d2:1f:
5a:4b:c8:72:b7:2c:69:78:83:03:dc:42:73:23:61:
c0:3e:2b:15:5c:f0:11:c6:a8:44:b7:8e:b4:29:1a:
97:db:ba:b6:08:35:2d:a7:67:9e:27:0b:cf:76:4b:
a2:29:39:90:c0:0b:81:dd:56:32:87:3d:32:47:66:
75:19:97:d8:3d:e4:04:8b:6f:22:af:18:54:fa:f1:
47:bd:a2:a2:56:1f:9a:31:c9:5b:d7:b4:d5:b9:4b:
b2:fa:1b:d8:12:96:18:36:11:c5:7c:b6:70:e9:88:
6d:c7:9a:29:54:c3:4f:74:e3:88:fa:79:da:5a:3c:
3a:49:eb:44:55:9a:1f:f9:59:1b:48:e4:d9:7d:60:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A8:A7:A5:D8:95:AF:BB:72:B3:88:51:2C:B0:38:3D:28:0F:3E:0B
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/Q6inpdiVr7tys4hRLLA4PSgPPgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:dd:64:76:28:f5:1d:a0:34:67:db:f5:11:73:fb:5c:2c:4b:
1b:81:03:74:ec:09:de:7b:a6:42:77:2c:00:7e:08:ee:d5:9a:
46:2b:6d:bf:de:a5:a3:23:fc:62:90:ec:9c:ef:42:c5:7a:00:
7e:d0:71:86:cf:9a:7d:d8:f3:a0:16:48:7b:c3:e1:bb:01:49:
62:1f:c3:bc:c2:8e:37:e2:a7:0e:ba:1e:b9:55:d6:9c:2a:3f:
f8:de:28:90:ea:fd:24:6b:b8:21:12:7d:5b:e6:b2:6e:43:11:
ea:e4:81:a8:d9:d2:9b:26:73:bf:fa:f1:0d:1f:e7:56:c4:50:
d2:24:40:28:81:f1:cb:a8:0e:5d:7d:b4:d3:1f:3e:6a:c2:21:
45:58:d0:16:28:4b:ae:a4:c9:fd:71:58:8f:b2:9e:fe:f5:40:
63:6a:ba:62:67:03:0a:54:d0:bd:fc:af:a7:3d:a1:76:24:cf:
1e:da:53:f1:7f:25:8d:8f:08:12:d2:13:a7:36:1d:43:6e:52:
c6:6d:59:b6:df:77:d8:00:65:68:a6:ab:b6:a8:a9:6d:97:14:
a7:b4:a1:2d:dc:84:71:66:36:ed:c9:8c:01:49:10:70:1e:aa:
7c:c8:e6:d3:13:e8:ce:8f:42:8e:d3:8b:11:bb:d1:18:73:47:
b4:cf:b4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:14 2024 by rpki-client on console-ams.rpki-client.org