Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/HO0Xktf8POAaY-x7by4g4pWvJ1o.roa
File: HO0Xktf8POAaY-x7by4g4pWvJ1o.roa (raw, json)
Hash identifier: LLzzM+3BSZNAknK9TH0n39tsTd/qcF3GatcRBiPeEb0=
Subject key identifier: 1C:ED:17:92:D7:FC:3C:E0:1A:63:EC:7B:6F:2E:20:E2:95:AF:27:5A
Certificate issuer: /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial: 01856F4B8DFDE97D37CE79B3FD4BE4BD3795
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/HO0Xktf8POAaY-x7by4g4pWvJ1o.roa
Signing time: Sun 01 Jan 2023 21:45:00 +0000
ROA not before: Sun 01 Jan 2023 21:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15681
IP address blocks: 83.150.208.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:8d:fd:e9:7d:37:ce:79:b3:fd:4b:e4:bd:37:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Validity
Not Before: Jan 1 21:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ced1792d7fc3ce01a63ec7b6f2e20e295af275a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:99:64:84:f7:88:c4:1b:58:a7:66:dd:c5:
97:be:ae:4f:84:1f:dc:dd:2e:fc:51:b7:cf:3c:52:
3d:c0:78:65:48:bc:79:c9:ed:10:74:3a:33:c1:51:
9c:4c:c3:e4:f0:ad:fb:a3:51:3c:02:40:15:81:7d:
7b:a8:e1:c8:28:80:32:ea:fd:5e:02:ac:af:00:b1:
1d:f1:cd:57:79:f7:af:b8:23:28:b7:a1:e9:c3:c5:
b6:53:b4:be:6e:cc:45:3f:6c:93:05:61:39:83:0e:
15:18:3b:df:30:19:bc:4b:a8:ca:1d:15:de:60:05:
17:32:b1:b9:02:9b:99:89:b4:26:4d:04:17:ad:ba:
04:40:5a:91:35:41:2b:52:80:d6:89:bd:3d:36:ef:
52:46:54:72:f2:0d:87:7f:4f:83:65:53:ca:2d:75:
a6:86:f0:09:dc:77:dd:04:11:50:11:3f:5f:0c:e1:
fc:27:04:e0:2a:04:9e:f7:ff:79:b9:5f:ea:64:6a:
35:37:22:10:85:1b:4d:71:ba:35:18:0a:29:13:78:
30:59:bd:63:e4:9b:78:58:a0:0d:5e:37:cc:b3:91:
2f:b5:b8:3c:ec:3e:82:e9:3e:ab:ce:1a:03:81:3d:
d2:21:9d:b2:d8:27:56:94:91:a7:6d:94:4f:0b:92:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:ED:17:92:D7:FC:3C:E0:1A:63:EC:7B:6F:2E:20:E2:95:AF:27:5A
X509v3 Authority Key Identifier:
keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/HO0Xktf8POAaY-x7by4g4pWvJ1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.208.0/22
Signature Algorithm: sha256WithRSAEncryption
55:45:71:06:af:c6:25:31:d1:e4:d7:60:d1:79:69:85:70:73:
75:cf:f6:a3:1b:6e:ad:e1:6a:6f:9b:70:64:3a:4c:e5:43:b4:
b1:70:54:7c:2a:59:e6:50:82:29:25:6d:f3:ce:98:0f:c1:c0:
08:cb:06:5d:2e:d8:05:05:b9:ce:11:db:c0:19:7c:b9:f2:79:
56:e9:7e:7d:aa:42:af:26:87:8f:b5:9a:b5:48:4c:84:04:d5:
cd:8b:80:c6:11:4f:74:3e:a0:5d:f8:90:e5:29:77:5c:da:31:
94:e9:91:e7:9c:44:77:a9:0e:bc:3d:ec:95:13:cc:1d:5a:0b:
49:92:b9:e5:cb:85:32:6d:39:8f:de:97:78:4d:e3:6e:b1:ef:
54:45:27:4b:dd:46:c8:9e:7a:db:a8:df:28:05:4d:d8:1f:fd:
f2:00:f6:8b:9a:97:97:32:de:c1:fe:ce:2f:33:7b:f7:60:5e:
38:52:05:16:98:e0:58:43:52:ea:19:96:ed:32:ff:03:3b:d8:
67:67:c6:5f:77:98:47:51:e6:8a:44:86:f9:da:46:0b:4b:60:
bd:72:34:0d:cb:1a:68:49:21:7f:32:a2:e5:da:98:fe:58:92:
e5:72:dc:d0:84:ad:d3:82:45:3c:f2:0b:1a:0e:db:6d:cd:82:
fe:cd:97:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:15 2024 by rpki-client on console-ams.rpki-client.org