Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/dKWbRMZhD35cR0cF1vCBZWxoqCM.roa
File: dKWbRMZhD35cR0cF1vCBZWxoqCM.roa (raw, json)
Hash identifier: IyVlsiaXRyZDpg3hx8Et3aZqysAV48YtgiW5lA00KtY=
Subject key identifier: 74:A5:9B:44:C6:61:0F:7E:5C:47:47:05:D6:F0:81:65:6C:68:A8:23
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 018B445ED214E5362F723BC60971137AF59C
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/dKWbRMZhD35cR0cF1vCBZWxoqCM.roa
Signing time: Wed 18 Oct 2023 19:59:06 +0000
ROA not before: Wed 18 Oct 2023 19:59:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 152.89.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:44:5e:d2:14:e5:36:2f:72:3b:c6:09:71:13:7a:f5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Oct 18 19:59:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74a59b44c6610f7e5c474705d6f081656c68a823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:a7:0a:9e:e2:e6:00:b9:6c:a4:b6:ac:18:
0a:a3:cf:14:d2:c4:c0:a0:3d:74:3f:bb:69:03:ba:
b1:28:da:67:1f:3b:d3:03:44:57:85:56:22:ad:26:
3c:e9:27:79:a6:2e:95:a3:8c:71:ec:ab:b2:82:45:
94:1a:8f:af:18:c1:5d:49:60:28:27:1d:8d:64:49:
db:a7:a9:a9:50:82:80:a6:2c:27:a4:70:25:7b:8e:
ee:10:9d:1d:40:41:13:6f:f3:1c:b5:d6:1f:ff:7f:
48:7b:37:ad:57:50:a1:8b:88:8e:d2:be:94:f4:66:
a3:35:dc:a1:4f:b9:ef:9e:57:6b:e3:05:7c:0a:d3:
8d:5b:72:be:0d:26:11:a9:70:ff:2e:21:45:8b:f1:
83:35:e4:75:04:55:bb:53:29:cb:be:d3:63:ec:72:
7e:6f:ca:8c:e5:06:5a:3d:a8:33:73:b5:a8:b8:41:
c7:a9:d8:38:e5:ce:f3:cc:39:2e:63:4d:e5:c5:06:
c7:3b:aa:85:4d:49:31:2e:bd:9f:7e:f9:27:d2:e0:
d2:17:cf:ed:7b:88:45:30:d1:87:72:6c:fd:24:e9:
49:c6:8b:a2:65:ab:67:45:98:9d:bb:a3:98:c5:f4:
4e:53:92:26:57:37:9d:19:a6:42:fa:a3:a9:06:df:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A5:9B:44:C6:61:0F:7E:5C:47:47:05:D6:F0:81:65:6C:68:A8:23
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/dKWbRMZhD35cR0cF1vCBZWxoqCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.192.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:17:5a:1f:f4:ab:5e:c3:30:ed:ce:25:c4:ed:0e:1f:13:7b:
43:b3:7d:c9:b7:cf:3e:2e:d9:c1:c1:58:47:fd:e4:40:91:03:
71:1b:82:46:0d:e5:8f:55:93:0a:54:5b:84:d5:f6:cf:64:96:
53:9a:6f:06:42:a1:c4:b9:5b:d0:b0:60:23:64:7a:75:61:1a:
5b:15:57:2f:77:4c:d8:8d:bf:eb:1a:ed:3f:d9:01:cb:91:5e:
2f:c7:f1:cf:91:2c:b2:69:04:30:07:1a:6b:5b:a9:ac:f8:4a:
a4:9a:2a:05:76:e1:64:64:ab:3c:c8:fd:25:8b:80:9b:1a:23:
dd:7e:aa:05:7a:c4:53:21:46:78:67:7a:95:ef:1f:20:07:9e:
52:c0:04:10:3c:75:e8:7f:eb:40:d8:cf:d1:f4:91:5b:ef:62:
96:c8:4e:28:c1:4f:34:a7:9a:8f:3f:87:72:55:7b:2a:7f:d5:
89:19:2b:ef:c8:0d:00:04:f1:01:f9:2d:a6:78:89:27:41:90:
4f:d7:9a:d6:a5:b2:b0:9d:11:45:05:f4:31:fa:54:ca:4a:d4:
dc:55:08:f0:03:20:ce:8e:c5:fc:3f:97:69:3e:15:3e:b5:1f:
0e:78:1a:46:5c:00:d2:91:c3:fc:bc:16:91:ce:3b:6b:01:a5:
c5:8c:50:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 19:36:55 2023 by rpki-client on console-ams.rpki-client.org