Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/RHCJrLaLI0Y5PQcDdDHt1jjFzFQ.roa
File: RHCJrLaLI0Y5PQcDdDHt1jjFzFQ.roa (raw, json)
Hash identifier: FpQX9StmexMP//lOdnFbr/VRzA9SiR4zOlyu08zcElY=
Subject key identifier: 44:70:89:AC:B6:8B:23:46:39:3D:07:03:74:31:ED:D6:38:C5:CC:54
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018571154BC245FBD36660E33EF5CDE49F82
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/RHCJrLaLI0Y5PQcDdDHt1jjFzFQ.roa
Signing time: Mon 02 Jan 2023 06:04:59 +0000
ROA not before: Mon 02 Jan 2023 06:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33895
IP address blocks: 217.153.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:4b:c2:45:fb:d3:66:60:e3:3e:f5:cd:e4:9f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 2 06:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=447089acb68b2346393d07037431edd638c5cc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:39:a1:4a:14:db:76:a3:a6:46:07:9d:76:
78:b5:d6:4d:37:e6:cf:6c:92:30:4b:05:02:66:28:
d1:c6:97:e9:db:4e:d8:d1:b1:c9:3e:b0:fa:06:c0:
20:db:86:2e:87:04:8c:07:11:33:e8:1d:f8:1c:1c:
8d:aa:91:fd:0f:bd:ab:50:00:a4:2f:38:6e:10:57:
3b:f4:ab:0b:93:f6:09:9b:17:cf:c6:f1:b0:51:b5:
c5:cb:08:6f:c1:53:3a:ee:d6:9b:eb:8d:d9:e9:08:
5e:e9:ab:e3:b4:71:61:5e:b8:d0:2e:d6:10:ea:74:
10:2a:6f:61:6f:7e:11:60:69:a9:e6:d6:b0:bf:15:
21:36:af:3c:2d:84:d6:f3:7f:b0:e5:dd:21:54:8d:
ff:d4:43:18:d5:57:6d:31:5e:56:ec:31:54:35:d0:
70:20:91:35:10:d0:b8:d8:0d:cc:54:c6:c2:82:97:
88:7f:32:d5:2b:78:8d:b2:28:50:35:cb:10:9c:5a:
4d:67:6f:5a:c8:97:b9:49:db:ed:5f:41:b2:f3:83:
88:02:28:e2:3b:dd:75:f6:bf:7b:aa:16:ee:85:de:
6c:69:77:3c:f3:48:20:5c:e9:37:59:d3:b8:46:3d:
4b:6e:1e:52:b9:97:56:a8:3b:1b:3a:f2:70:9c:45:
61:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:70:89:AC:B6:8B:23:46:39:3D:07:03:74:31:ED:D6:38:C5:CC:54
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/RHCJrLaLI0Y5PQcDdDHt1jjFzFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.153.122.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:d8:87:d6:f3:51:ba:0d:84:3b:70:05:b4:72:8f:9f:92:73:
7e:87:bf:9e:85:51:8c:d1:3f:11:c7:91:e5:a0:45:dc:32:c2:
bd:52:ac:35:f5:ac:39:dc:42:96:5c:88:3b:65:64:45:73:59:
7d:7a:2a:8b:9b:9a:35:2c:5d:b3:fc:0a:7b:eb:25:0a:bd:8d:
88:88:9e:65:4e:88:3c:30:c8:be:4f:58:b0:20:d2:28:fa:39:
4d:97:0c:ac:ae:32:ae:11:33:65:25:ef:db:6a:e4:a4:c6:10:
31:32:3e:a4:c8:e2:d5:ea:47:d6:90:d9:7d:4a:c9:f6:49:be:
4e:09:e7:5f:0f:88:f7:18:24:27:8d:61:ac:d5:6c:80:3c:9e:
3e:97:10:62:e1:3f:b8:82:2c:5a:74:18:6f:d7:cc:5a:5c:0b:
00:27:87:08:33:6c:81:8c:9f:8d:e3:f0:08:bc:52:1c:a6:85:
60:04:93:b3:5c:75:7a:b7:9f:cc:93:4e:7f:0e:c5:5b:b3:a2:
83:3f:41:bd:b2:3f:5b:7a:1b:a1:11:2c:79:88:f8:62:5e:64:
bf:95:1e:dc:08:9f:26:3c:eb:3f:ca:ec:df:ba:80:da:3c:3e:
23:0c:f8:b4:1b:95:6f:1b:c6:13:f4:53:76:ff:9e:66:b3:4e:
67:8a:d8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:22 2024 by rpki-client on console-ams.rpki-client.org