Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/k2e72QXp1TNceXelR0bFHcW5O00.roa
File: k2e72QXp1TNceXelR0bFHcW5O00.roa (raw, json)
Hash identifier: SGhUp7Dag8uu2XWKLoBsUp1i71DSXAgvDk8S07XE1lc=
Subject key identifier: 93:67:BB:D9:05:E9:D5:33:5C:79:77:A5:47:46:C5:1D:C5:B9:3B:4D
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 01894B07D68C13CC8DBE76B9D010C47E624C
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/k2e72QXp1TNceXelR0bFHcW5O00.roa
Signing time: Wed 12 Jul 2023 16:55:52 +0000
ROA not before: Wed 12 Jul 2023 16:55:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14670
IP address blocks: 65.181.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4b:07:d6:8c:13:cc:8d:be:76:b9:d0:10:c4:7e:62:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jul 12 16:55:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9367bbd905e9d5335c7977a54746c51dc5b93b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:58:ba:b6:2c:29:df:50:9e:ff:0e:54:29:4e:
2c:00:ac:9c:81:c5:e2:12:2d:12:41:ad:23:52:e3:
4d:16:23:a6:0a:4a:89:0d:89:16:1d:67:c2:20:c5:
cc:3e:b8:e4:d3:f9:ed:71:29:3c:38:12:23:bf:2a:
45:c3:ea:7b:88:b8:b7:7e:2c:51:79:52:08:13:37:
38:75:f8:e5:77:d7:88:67:b3:4f:b2:2e:dd:85:ea:
a5:c0:f4:ba:8a:95:68:14:d1:26:f1:2b:6f:86:be:
ef:96:e7:eb:2e:e1:f2:6b:c5:b2:2e:90:61:22:d9:
3b:26:33:06:4b:f4:7c:06:5e:25:e0:5b:d1:03:05:
ec:bb:fd:f2:1b:77:35:2e:0f:da:c4:5d:b1:d5:34:
ea:03:19:5b:a3:7e:0f:92:8e:24:03:02:47:d7:f1:
71:21:11:78:5a:e4:9f:58:39:ec:ca:5b:30:cf:c3:
a8:e3:27:ed:d6:62:9b:65:37:b0:bb:67:d2:c0:0c:
4c:c3:4d:c0:6c:5f:d0:7e:83:eb:51:7a:03:88:69:
fc:dc:32:be:85:51:4e:a4:ab:41:20:45:7c:d2:5a:
d7:d3:80:f5:c4:64:b5:36:47:da:8e:b3:e2:eb:76:
5a:9d:6d:54:13:b1:be:a2:e3:0c:78:34:1d:b8:29:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:67:BB:D9:05:E9:D5:33:5C:79:77:A5:47:46:C5:1D:C5:B9:3B:4D
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/k2e72QXp1TNceXelR0bFHcW5O00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.181.111.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ae:f5:08:8c:3c:f8:c8:86:0d:be:bc:c7:be:b7:ed:7f:fe:
ee:99:71:23:26:4e:c1:e6:fb:36:49:2c:02:49:8a:cb:6e:0a:
bf:a5:b8:dc:30:e4:63:5f:bc:d6:29:9c:e6:33:e0:3d:37:50:
a3:41:b2:43:0a:fb:3d:9c:8d:23:4f:9f:87:08:30:78:8f:8b:
5c:0b:0b:a7:eb:87:d5:f4:c1:55:1c:ee:61:3d:ea:03:e1:e9:
99:99:bf:87:2d:fb:49:fd:18:ff:20:60:96:7b:d3:73:3a:24:
89:cf:ea:d9:e7:07:4f:a6:1f:01:3c:8a:62:3d:75:92:b6:6b:
2e:5c:71:ae:48:c5:68:41:4f:e4:4f:d1:2d:77:d2:e8:5a:cf:
62:80:7e:0e:6b:ed:08:f4:7c:7a:da:d1:47:f9:eb:82:c3:7f:
b8:af:0f:df:ee:9b:04:64:37:94:fe:7a:0a:3e:2d:cf:d7:dc:
d6:34:bb:ec:86:ce:27:34:67:b5:94:29:2e:d6:5a:7f:3d:b0:
b0:fd:d7:be:c3:76:7d:0b:08:9c:ae:08:62:fc:09:8d:a1:e5:
d7:1e:e8:92:bd:7a:9a:7c:89:b8:08:40:34:24:3e:0a:1f:b8:
78:2a:63:4f:fa:70:31:6b:d4:d0:7f:a6:3f:52:fb:69:f8:8b:
ca:26:4a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 09:57:53 2023 by rpki-client on console-fra.rpki-client.org