Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/IAisX2RBlvVypfuhprwM5k_izcE.roa
File: IAisX2RBlvVypfuhprwM5k_izcE.roa (raw, json)
Hash identifier: Tx+FVUsL3wuCADw6WY25rX+GR5v+3cbRn+mWfFgAnuQ=
Subject key identifier: 20:08:AC:5F:64:41:96:F5:72:A5:FB:A1:A6:BC:0C:E6:4F:E2:CD:C1
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 0185810EB1EA4E3C80367FCAD67809BE9E0D
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/IAisX2RBlvVypfuhprwM5k_izcE.roa
Signing time: Thu 05 Jan 2023 08:31:41 +0000
ROA not before: Thu 05 Jan 2023 08:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 37.143.4.0/22 maxlen: 24
46.28.40.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:0e:b1:ea:4e:3c:80:36:7f:ca:d6:78:09:be:9e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Jan 5 08:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2008ac5f644196f572a5fba1a6bc0ce64fe2cdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4c:8c:d0:d0:77:09:81:5c:42:49:5e:6f:19:
0e:d8:c8:ed:8a:17:37:3f:1f:11:a0:43:9a:11:f4:
2f:9f:45:68:a7:5a:32:af:4b:cb:65:12:aa:22:2e:
3f:02:48:2a:19:35:63:c5:5d:a1:99:7a:64:f3:3d:
81:6a:55:b0:81:fe:b9:1e:b6:94:96:4e:2c:32:aa:
86:1b:c2:e3:57:b5:7e:31:1c:ac:64:b0:bf:d0:47:
68:fe:92:ba:0a:00:f2:60:cb:db:59:1b:17:70:9b:
42:48:9b:22:7e:9a:39:44:2e:73:98:a4:84:1d:c5:
36:bf:73:cd:ba:32:83:4c:20:43:31:ae:fd:5e:de:
7a:91:e3:53:cd:9a:4d:77:26:da:76:16:b6:1d:82:
bc:fe:c2:15:68:a5:3e:d3:b8:58:5c:06:57:7c:97:
f7:19:f8:1b:83:3c:84:5c:cb:37:1e:d2:40:49:dd:
11:99:ba:b0:2c:30:cb:20:2b:8a:f4:43:f1:1c:e2:
d0:dd:a1:f2:da:b0:6b:b3:80:6d:9d:f6:10:f0:27:
7f:d3:25:0f:38:07:f1:2d:fc:50:34:86:02:33:7b:
98:9c:5d:26:5f:2a:15:0b:7c:8e:4e:ea:90:cb:d8:
22:94:87:5a:52:ff:c3:7e:14:18:3f:13:0a:b0:f1:
da:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:08:AC:5F:64:41:96:F5:72:A5:FB:A1:A6:BC:0C:E6:4F:E2:CD:C1
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/IAisX2RBlvVypfuhprwM5k_izcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.4.0/22
46.28.40.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:73:cb:12:e7:0a:a4:88:2c:08:a8:07:2e:a7:a1:e2:9e:2b:
db:0c:b8:20:ac:5b:82:a6:74:19:06:56:f1:f3:16:e9:85:de:
62:ec:a4:bc:67:54:43:d4:18:6d:c8:03:bc:17:91:c1:2a:35:
d4:09:12:f7:74:76:11:52:c6:53:fc:db:c8:04:e2:3e:71:c9:
25:d3:f8:9e:d0:68:61:e8:1e:68:10:34:9c:cf:6f:a1:3b:a1:
b2:fe:db:41:11:cf:69:79:94:65:b4:c1:43:6b:79:c6:e7:2b:
37:cb:c3:18:ac:8b:ad:b7:f4:4b:5c:f7:82:9a:cd:ec:52:29:
ce:2a:20:42:2b:19:cb:1c:5e:d8:66:fa:57:fe:9b:22:a3:1e:
e6:f9:a4:f3:02:53:0f:b1:94:68:e6:1d:42:1b:67:b5:d9:20:
73:3a:a8:c1:c1:31:3c:f2:ea:6b:01:8c:cd:83:11:2e:6f:fd:
4f:3d:9d:33:2a:2e:00:a4:c7:61:e0:09:06:d6:88:43:a2:a8:
c2:6f:26:e6:43:35:82:46:dd:91:6c:f5:6e:33:91:63:1f:19:
3f:58:c0:be:90:0d:e5:5d:92:6a:d2:95:bd:ae:44:40:78:85:
17:72:87:82:bc:e5:14:a6:f3:8d:37:4e:41:ee:9e:e4:19:df:
89:be:2f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:33 2023 by rpki-client on console-ams.rpki-client.org