Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/nODDifijwZWp07ptDrm5xezdaMQ.roa
File: nODDifijwZWp07ptDrm5xezdaMQ.roa (raw, json)
Hash identifier: CZHJLHR4riK76MZhCqUjJPSGusKhIMhCTQU1dVo5Ouw=
Subject key identifier: 9C:E0:C3:89:F8:A3:C1:95:A9:D3:BA:6D:0E:B9:B9:C5:EC:DD:68:C4
Certificate issuer: /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial: 0185724C8FCA30CFFB93CA5B498BFAD796F0
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/nODDifijwZWp07ptDrm5xezdaMQ.roa
Signing time: Mon 02 Jan 2023 11:44:58 +0000
ROA not before: Mon 02 Jan 2023 11:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13287
IP address blocks: 155.133.195.0/24 maxlen: 24
153.92.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:8f:ca:30:cf:fb:93:ca:5b:49:8b:fa:d7:96:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
Validity
Not Before: Jan 2 11:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ce0c389f8a3c195a9d3ba6d0eb9b9c5ecdd68c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d1:e9:c8:20:fe:4c:5f:e1:70:a1:5d:d7:ce:
e4:54:a8:f9:8c:18:d7:d4:5f:a2:cf:fa:21:d6:22:
72:71:e8:53:3b:a0:b5:31:fd:6c:bf:0e:a1:55:f7:
b5:12:af:1b:37:1a:e1:b1:57:15:77:85:ee:67:ff:
85:60:c1:6b:5c:b4:ed:fe:10:01:de:1a:3a:55:a2:
c8:ca:20:ad:79:ec:00:34:1b:6c:1f:b9:78:1a:a5:
4c:63:cd:4d:3a:f6:85:f0:2b:f7:26:41:1a:84:87:
2d:6d:54:e0:8a:19:1b:2b:9a:0a:14:e0:37:9b:6f:
b8:27:44:8a:87:6b:dc:69:42:98:a9:5a:6c:16:5b:
9d:6e:b6:10:f4:52:28:b4:68:74:fc:65:33:fe:3e:
8e:2c:01:c8:8b:92:4f:fc:34:ae:f2:21:17:1c:79:
4d:57:87:21:9f:9c:73:0c:54:fa:2b:f9:35:70:81:
9a:dc:5e:ac:0c:14:bb:4d:4b:b2:40:34:85:8a:2b:
c0:e4:79:9d:23:0f:fa:52:d1:ba:e8:a2:45:68:29:
02:9b:77:eb:cb:46:b9:e6:68:78:b0:e8:fb:00:79:
df:f1:da:8c:53:16:5e:ef:6d:0b:a7:c4:2f:13:4f:
8d:19:8f:00:c0:6a:fa:45:61:48:01:85:6e:2d:e5:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E0:C3:89:F8:A3:C1:95:A9:D3:BA:6D:0E:B9:B9:C5:EC:DD:68:C4
X509v3 Authority Key Identifier:
keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/nODDifijwZWp07ptDrm5xezdaMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.42.0/24
155.133.195.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e1:bb:b6:31:87:3d:8e:83:8e:e9:b1:ff:ef:b2:36:fd:b5:
8d:f6:5a:9f:57:88:da:fc:d9:7a:06:8a:86:17:0b:b8:42:2f:
10:97:d0:b8:18:91:fc:5c:9b:e4:d2:e5:d2:ca:5c:e0:85:7c:
64:55:a6:1a:ce:1b:db:d2:dd:0b:45:c4:11:a5:0b:31:76:da:
ff:9a:bb:99:e0:02:3d:78:98:c0:72:ff:66:f1:63:2e:de:9b:
0a:fc:08:e7:75:44:84:14:21:b2:50:30:d9:84:c8:8f:e7:91:
de:44:b6:e0:bc:d4:7e:f7:6c:ba:0c:68:1b:d1:cf:5f:1b:18:
ac:e2:dd:0e:67:b3:d4:a3:fd:e6:c0:1e:03:3a:35:b4:fd:b1:
dd:a3:29:a6:72:47:89:3f:cb:f4:47:bc:62:e0:da:71:82:fe:
e4:ce:21:de:22:c7:07:c0:00:b7:a4:51:97:12:57:70:ad:59:
dc:25:7c:b1:6a:d7:d1:4c:3e:64:4c:6a:a5:90:b3:f9:e0:b3:
f1:4d:c7:f4:6a:9b:d2:d1:58:4c:40:e9:f7:d6:e6:ac:07:af:
d6:70:ad:a2:0f:70:90:70:c9:c6:f9:0a:8e:e5:ea:48:8f:fb:
b2:cd:f1:d9:2c:4a:f2:06:66:85:d5:a4:85:01:1d:79:76:d7:
1e:72:b7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:14 2024 by rpki-client on console-ams.rpki-client.org