Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/7wAWtPRofAbg-L15QJ7VCkt4DRs.roa
File: 7wAWtPRofAbg-L15QJ7VCkt4DRs.roa (raw, json)
Hash identifier: 132YW55D1SSeWG293wWhVs1fNgxLaOYh9cWq9Ccq7gM=
Subject key identifier: EF:00:16:B4:F4:68:7C:06:E0:F8:BD:79:40:9E:D5:0A:4B:78:0D:1B
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 01856DDD509690A64B54A0CEDA40A474117D
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/7wAWtPRofAbg-L15QJ7VCkt4DRs.roa
Signing time: Sun 01 Jan 2023 15:04:58 +0000
ROA not before: Sun 01 Jan 2023 15:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10991
IP address blocks: 192.113.68.0/24 maxlen: 24
192.113.67.0/24 maxlen: 24
192.113.66.0/24 maxlen: 24
192.113.65.0/24 maxlen: 24
192.113.71.0/24 maxlen: 24
192.113.70.0/24 maxlen: 24
192.113.69.0/24 maxlen: 24
192.113.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:50:96:90:a6:4b:54:a0:ce:da:40:a4:74:11:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Jan 1 15:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef0016b4f4687c06e0f8bd79409ed50a4b780d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:67:1c:76:33:3f:be:e2:cd:e0:30:e2:f8:8f:
2f:1b:a0:52:52:a5:c6:d6:ea:dd:cc:bc:f5:ec:81:
24:77:d0:5c:33:86:51:49:fe:23:93:3b:ab:ae:cb:
64:3d:ba:c6:f0:a3:f4:ce:53:72:71:d4:72:8e:45:
3e:5e:18:3e:90:cc:ea:c3:5f:f0:58:8e:30:27:82:
ea:20:68:a1:3e:55:69:02:ac:d8:6d:ca:d2:a9:14:
09:43:1b:48:03:b4:a3:4d:4c:ec:c2:dc:1d:e7:35:
74:55:f0:c8:09:9b:ce:dc:a7:33:ee:67:05:4f:7d:
a7:5b:51:e0:d6:05:cf:ff:17:49:3d:a1:7b:48:8a:
3a:f9:d7:a5:e4:ce:ad:71:86:99:cd:c7:38:c1:7f:
4d:f1:62:c6:9c:9d:c8:b3:41:7a:6f:38:59:78:3d:
b6:49:eb:87:f8:34:fa:96:a2:27:74:84:f2:c2:d4:
14:bf:8a:6c:a1:9e:61:04:c6:b6:b7:fc:05:d9:b0:
68:e0:fb:2b:aa:2b:ca:e6:a2:ab:b4:3f:73:54:04:
8a:a0:29:b9:8e:97:51:36:eb:8f:84:1e:0f:69:08:
18:15:ff:de:1c:19:8b:99:c1:45:66:2a:92:3f:0f:
7c:71:22:e9:e7:3b:0a:2c:de:cd:41:dd:32:c1:82:
b2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:00:16:B4:F4:68:7C:06:E0:F8:BD:79:40:9E:D5:0A:4B:78:0D:1B
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/7wAWtPRofAbg-L15QJ7VCkt4DRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.113.65.0-192.113.72.255
Signature Algorithm: sha256WithRSAEncryption
bf:0d:6a:45:7a:dc:10:f4:a4:16:29:a8:85:0f:f7:77:bf:cf:
e0:8a:ca:d0:09:56:08:7b:8e:cc:78:3b:6f:50:9e:57:3e:b7:
f1:1e:e9:ce:7d:47:f2:f9:62:36:95:92:e4:f1:0a:f2:cc:c0:
e9:98:3c:61:e7:f7:4e:f0:aa:f3:50:d4:bc:fc:01:df:71:76:
13:13:d7:b1:08:c3:83:d1:ab:13:9f:41:8f:0c:fd:69:4c:fa:
98:d5:a7:e7:70:5c:9f:66:d0:4f:45:e0:85:2e:f2:7a:de:99:
ca:73:d5:2f:66:34:00:01:5a:38:80:71:40:e6:ef:93:33:c8:
56:1c:23:b3:58:b3:53:8a:c8:95:ce:08:e4:96:5e:bd:ca:15:
80:27:2c:a9:ab:8a:8c:4e:96:12:cf:a7:83:79:a9:e4:f2:13:
43:16:f5:9f:11:08:bf:12:7a:ab:74:33:27:81:27:15:cb:2a:
fb:4b:f6:f0:9f:f4:ca:8d:72:8d:2c:b2:d7:d1:9f:25:f8:02:
0a:9e:5e:7b:05:7e:64:e7:19:55:ce:f9:f8:a9:9b:7c:0e:f0:
65:f8:1c:09:55:f8:51:2a:92:9b:5c:5a:ee:24:d1:79:29:bb:
2b:92:67:15:7b:0b:78:1a:11:45:33:d4:3e:22:53:b5:ab:e7:
70:b6:58:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:29 2024 by rpki-client on console-ams.rpki-client.org