Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ROiLXyWor8XGiZBuc24uC5wxEzE.roa
File: ROiLXyWor8XGiZBuc24uC5wxEzE.roa (raw, json)
Hash identifier: djbi1/FBglwHqOd8Dw7Mc6bJuC8dL1dHizMuB1JE9vA=
Subject key identifier: 44:E8:8B:5F:25:A8:AF:C5:C6:89:90:6E:73:6E:2E:0B:9C:31:13:31
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0185719557F4D811FF38736C6DC338C2F57C
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ROiLXyWor8XGiZBuc24uC5wxEzE.roa
Signing time: Mon 02 Jan 2023 08:24:50 +0000
ROA not before: Mon 02 Jan 2023 08:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13259
IP address blocks: 149.126.240.0/20 maxlen: 20
149.126.192.0/20 maxlen: 20
149.126.208.0/20 maxlen: 20
149.126.224.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:57:f4:d8:11:ff:38:73:6c:6d:c3:38:c2:f5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44e88b5f25a8afc5c689906e736e2e0b9c311331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:d9:63:6b:84:4b:9b:ad:29:04:2a:72:fe:
e5:83:17:97:68:a9:48:e7:28:71:87:1f:bf:61:d4:
e1:09:7a:0d:6d:a7:10:cc:24:bd:7a:03:fc:45:1b:
52:91:db:aa:47:10:bf:e1:be:36:31:a0:75:9c:8a:
a8:66:df:4c:8e:76:91:a2:55:3f:b5:73:06:83:84:
65:3f:37:18:7e:ad:1b:b2:32:12:8a:b3:88:7a:33:
50:b4:b5:a3:19:c3:cd:86:29:8d:be:d6:ee:50:b0:
e8:1f:c7:c4:fe:9e:15:43:58:d7:cf:2a:7a:d3:1b:
70:2b:cd:2a:54:9c:62:f3:9b:39:0e:b8:50:db:5c:
82:5e:0d:9c:f7:00:56:a9:dd:e7:50:6e:94:b2:76:
a3:14:e2:41:0d:28:89:5b:e6:ec:e4:bf:66:bd:7a:
3d:14:95:c6:90:dc:bc:7b:78:a9:44:bb:3e:57:ef:
1d:48:6a:c5:70:7b:ea:4b:79:3e:be:06:fc:46:09:
60:35:4d:ae:2e:0b:20:71:28:eb:26:8b:a9:15:9c:
14:ec:e4:80:82:22:65:83:e4:0e:6e:46:dd:75:c6:
52:05:6d:c5:f6:48:32:ad:eb:48:97:5d:6c:b8:f4:
8d:46:f8:c6:1c:2f:dc:e6:02:7e:1c:83:2f:f0:01:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E8:8B:5F:25:A8:AF:C5:C6:89:90:6E:73:6E:2E:0B:9C:31:13:31
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ROiLXyWor8XGiZBuc24uC5wxEzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
02:6d:9c:2b:1d:ba:3b:d7:5d:95:57:2a:b2:01:19:7d:5a:9f:
ff:e7:6d:0c:45:92:04:5e:6d:46:d9:d9:8f:cb:b8:17:23:9b:
18:ec:6a:c7:97:1d:d2:2a:aa:19:ad:3a:0f:45:e1:c7:8f:c7:
9c:ab:6e:b0:ef:e7:cc:92:ff:dc:d6:3e:03:99:e3:6c:d8:1a:
d7:c2:b0:7e:d6:54:d4:5e:b3:28:85:ef:dd:6b:a6:11:ac:a2:
cb:f5:96:e0:16:1a:60:f3:1a:06:ae:e3:ea:a3:1e:e3:8c:de:
fd:ce:30:5b:75:aa:1b:b2:4a:c2:be:c7:22:dd:35:1f:d0:22:
4c:07:b9:c8:77:b6:08:e8:91:97:ef:86:50:e6:09:ea:e9:31:
75:83:4c:c6:38:61:62:4d:22:c6:1d:27:a9:c1:6e:47:1e:cf:
d6:61:16:7f:3e:d7:91:15:97:d7:dc:37:85:3d:e8:b0:0e:17:
2f:eb:b9:e6:02:5c:b1:10:00:eb:15:65:7b:43:f1:57:8e:7b:
70:54:d5:34:8e:63:03:c9:ae:52:ef:e3:af:64:eb:1b:a4:9a:
90:51:d7:cf:ee:63:ec:f5:5f:bb:2a:84:67:45:bb:c1:b9:4f:
47:bc:ae:5c:e6:ae:a1:8b:bf:41:71:47:be:fe:cf:b8:21:50:
51:6f:91:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org