Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/rkUacXeVUqGrM22fdgKFgm_djhU.roa
File: rkUacXeVUqGrM22fdgKFgm_djhU.roa (raw, json)
Hash identifier: Osh4WxX8e+VQ7kbOavAxU95jXX9DYhd6SJNv1Bhwji0=
Subject key identifier: AE:45:1A:71:77:95:52:A1:AB:33:6D:9F:76:02:85:82:6F:DD:8E:15
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0185710C2B5BCFC087973A11382FBD703348
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/rkUacXeVUqGrM22fdgKFgm_djhU.roa
Signing time: Mon 02 Jan 2023 05:55:00 +0000
ROA not before: Mon 02 Jan 2023 05:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 63.246.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:2b:5b:cf:c0:87:97:3a:11:38:2f:bd:70:33:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 05:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae451a71779552a1ab336d9f760285826fdd8e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:6e:69:b1:58:11:39:96:14:92:bb:5d:ea:
5c:84:22:f4:bf:a8:50:8b:21:66:29:e5:14:6b:f1:
bb:c0:44:ec:c5:a2:75:e8:25:af:c3:5a:3f:b1:5c:
76:ba:f1:59:28:2c:8e:04:41:95:a2:28:56:cc:75:
e1:49:84:fc:b5:c4:a3:23:12:91:ff:f0:7f:53:e1:
93:0c:2e:60:cb:59:16:ff:92:f1:1a:1a:25:20:5c:
97:fc:ef:33:61:d1:fc:d2:9f:cc:85:f1:97:9d:43:
b9:35:60:98:14:d1:b1:d4:e5:80:e8:1c:0e:42:ca:
92:b8:43:66:51:c8:a2:0b:7c:78:e8:01:62:13:3b:
a0:ee:5e:cb:75:42:ca:6a:f4:3e:92:22:55:f8:7f:
d0:a1:07:a1:8c:cb:a6:1e:75:9e:81:5f:e3:e8:0a:
b6:ff:27:d7:5b:25:3c:8c:d3:58:51:a3:a6:93:d8:
61:0a:66:4b:bb:bb:51:e9:e4:a9:5c:33:a6:7b:1a:
77:ef:8e:b1:b2:ce:d7:34:7e:c1:2a:9b:7a:44:3d:
27:38:da:2d:97:30:40:9b:32:a3:01:7b:08:5f:ac:
45:d8:8d:9c:cd:c6:9a:89:53:61:b2:82:ee:ce:76:
11:ee:d2:68:25:06:a0:07:51:d8:41:03:7a:fc:97:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:45:1A:71:77:95:52:A1:AB:33:6D:9F:76:02:85:82:6F:DD:8E:15
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/rkUacXeVUqGrM22fdgKFgm_djhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.144.0/24
Signature Algorithm: sha256WithRSAEncryption
63:71:cb:16:63:c5:45:54:9e:61:3b:dc:7e:5a:6d:87:44:b9:
a3:f6:46:64:a2:a6:c1:b1:e1:02:ab:37:91:28:5c:80:45:8c:
11:53:53:be:db:ca:63:90:b3:1e:b4:f1:bd:f0:68:66:c4:92:
5f:69:f0:48:17:52:00:c5:a2:02:3e:64:63:14:d6:9f:d3:ad:
e4:76:c1:21:76:00:40:9d:58:6b:41:79:2c:35:f9:11:bf:f4:
db:bf:e7:4d:a2:fe:03:b2:97:a9:42:59:64:84:f1:c6:50:ba:
7c:63:df:ef:d7:84:bb:44:f2:2b:5b:ec:3b:fc:9d:ae:af:9a:
6a:19:84:22:28:5e:76:48:27:79:6c:43:4f:af:d0:37:da:c5:
01:97:3a:7e:3c:45:fa:91:d7:82:4e:ea:c3:6c:0a:f3:48:0c:
77:10:ca:45:9f:17:6c:4d:36:eb:13:a2:9d:b7:1f:6d:27:14:
d8:77:25:e1:be:fd:bc:00:ee:49:1d:7d:a7:79:dd:d1:08:d2:
fd:f8:90:af:6c:a4:9f:ae:27:e8:57:fe:a6:ea:c5:b7:81:ef:
c6:76:d4:75:3e:85:66:9d:fa:df:cb:1f:d2:64:39:56:cf:bc:
4f:c4:0a:3d:4a:38:9c:22:cf:16:df:0d:d3:be:b8:9a:bf:9b:
31:dd:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:39 2024 by rpki-client on console-ams.rpki-client.org