Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/8juYFwQ93P4Avv_g2oJxi6i5J6U.roa
File: 8juYFwQ93P4Avv_g2oJxi6i5J6U.roa (raw, json)
Hash identifier: TLmw/R/YXIkqt4Mt0sum3Hg//FURAJqxGmHGQn2uXGk=
Subject key identifier: F2:3B:98:17:04:3D:DC:FE:00:BE:FF:E0:DA:82:71:8B:A8:B9:27:A5
Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial: 01856D01739722EB494CE747D7B1C1AF4401
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/8juYFwQ93P4Avv_g2oJxi6i5J6U.roa
Signing time: Sun 01 Jan 2023 11:04:49 +0000
ROA not before: Sun 01 Jan 2023 11:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9890
IP address blocks: 155.45.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:73:97:22:eb:49:4c:e7:47:d7:b1:c1:af:44:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Validity
Not Before: Jan 1 11:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f23b9817043ddcfe00beffe0da82718ba8b927a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:85:20:49:b7:14:cb:4b:5e:7e:15:6f:b1:
5c:33:6b:ed:b4:b3:ca:d2:ea:88:30:98:d2:c4:d7:
ff:9e:22:2c:66:d3:28:43:14:5d:05:da:d0:43:db:
2b:97:ce:29:81:71:4f:e6:5a:e5:65:8c:f4:ab:5e:
a4:6f:2f:d1:66:c0:a3:b4:ed:3b:e1:73:31:fa:c2:
cb:70:38:59:6f:1c:a5:b7:a7:63:8a:50:8a:94:0e:
02:3b:ed:41:71:62:9a:eb:39:11:f7:40:67:ba:b4:
9c:3a:f1:c2:57:e7:a2:eb:92:6c:0c:91:64:8f:1e:
f5:03:78:05:c3:09:83:b0:12:f8:75:4d:37:84:fe:
b2:93:8c:5b:3c:e5:0a:0a:03:46:97:07:02:73:93:
22:2d:27:ff:b7:e6:d0:5c:dd:1c:84:62:22:84:98:
51:d1:82:72:af:31:7a:ff:07:cb:33:3e:c9:fe:40:
13:e3:f2:a6:0b:25:1e:0d:e1:4f:ed:43:b8:17:c1:
81:4d:c4:9d:4e:e9:c2:91:16:a6:69:47:cc:de:31:
85:26:43:97:6d:a9:24:55:ae:03:7d:2e:3d:de:e7:
c1:bf:f5:4c:9a:c1:f1:e5:a8:cd:58:f5:9a:0b:05:
59:31:d7:c0:0b:6b:09:bd:85:48:77:a1:9a:91:15:
60:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3B:98:17:04:3D:DC:FE:00:BE:FF:E0:DA:82:71:8B:A8:B9:27:A5
X509v3 Authority Key Identifier:
keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/8juYFwQ93P4Avv_g2oJxi6i5J6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.45.130.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5e:ef:eb:99:dc:e5:98:c7:d5:42:87:88:09:e6:19:44:88:
f2:4c:56:ba:6b:06:11:0c:3c:d5:36:7a:f2:b1:18:4f:c1:b5:
63:53:13:a4:49:12:fa:49:26:50:95:aa:d8:0b:fd:91:ad:e8:
e2:4d:a8:47:95:f1:5c:46:fd:f6:6c:6b:10:18:d2:98:ed:4c:
de:b6:dd:a5:ae:3d:89:33:1d:0d:80:97:fc:49:59:55:b3:4f:
73:c7:20:17:cc:17:b3:36:73:21:21:da:83:ef:82:ea:f7:09:
02:3b:1d:17:dc:0f:83:ae:e8:b6:76:72:b6:0f:5d:d9:b9:ae:
8f:e1:c4:76:1e:ff:af:35:15:03:b4:64:72:54:95:17:01:fb:
b5:6b:e4:02:2a:78:aa:80:40:02:d4:98:3d:84:ed:b7:41:75:
07:fb:c6:4a:d8:de:9d:28:9b:eb:8d:e5:19:56:dd:86:d2:ef:
86:71:96:40:e3:8e:91:c0:27:d3:53:df:47:f4:3f:90:01:67:
d1:80:a5:24:54:95:74:2d:7b:58:be:4d:22:5b:9c:e0:eb:6e:
5f:fb:ae:f2:ad:16:93:99:ba:16:21:f4:52:c8:f4:bf:04:b8:
5b:6e:71:b3:03:39:92:6f:29:0c:4e:d7:42:20:2c:38:b8:c7:
65:71:b9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:22 2024 by rpki-client on console-ams.rpki-client.org