Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/xIme1yzjcFBLtkKTenuFDy1s-JA.roa
File: xIme1yzjcFBLtkKTenuFDy1s-JA.roa (raw, json)
Hash identifier: fu1sFBPj4JRo/SIhCljMeXGFVYzbgEwX9ap1ZmDvqVw=
Subject key identifier: C4:89:9E:D7:2C:E3:70:50:4B:B6:42:93:7A:7B:85:0F:2D:6C:F8:90
Certificate issuer: /CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Certificate serial: 01857321C5C74C1153A5297144802D9216A0
Authority key identifier: D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/xIme1yzjcFBLtkKTenuFDy1s-JA.roa
Signing time: Mon 02 Jan 2023 15:37:51 +0000
ROA not before: Mon 02 Jan 2023 15:37:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 137.248.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:c5:c7:4c:11:53:a5:29:71:44:80:2d:92:16:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Validity
Not Before: Jan 2 15:37:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4899ed72ce370504bb642937a7b850f2d6cf890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1b:7a:be:aa:73:0a:1e:f4:d3:76:37:62:6f:
8a:9f:f1:29:03:f6:37:d0:fc:ea:f5:e6:70:ff:3c:
25:e9:28:21:1f:e3:19:5b:0d:89:f1:5a:c2:da:a1:
05:53:4c:38:63:e7:c6:ad:7d:23:cb:9c:60:73:23:
ef:b4:c6:e1:2f:0d:f6:10:78:74:ac:84:52:67:f7:
cf:2a:90:55:fd:c7:d4:7a:66:6b:f9:ad:fe:81:81:
6d:15:9b:b6:cb:a2:ce:f8:93:0e:20:89:48:c2:2c:
dc:82:97:a9:f0:92:f5:6b:ea:b9:f9:cf:6e:22:fe:
47:15:b2:0e:2a:5d:ac:3f:fb:19:87:d4:98:e4:53:
a2:dd:70:59:57:9c:0f:9e:11:0a:f8:bb:96:24:a8:
1a:c2:ad:c1:ac:45:c6:73:ad:35:ec:49:4c:f6:58:
8a:04:4c:f5:86:dd:64:be:b0:e5:a2:a8:56:70:dc:
78:c9:e0:09:53:fb:73:55:fb:45:82:7c:cd:39:49:
b8:fb:3c:c1:e0:77:87:a1:d6:0f:36:8b:41:a4:a6:
aa:de:fc:65:53:ad:2b:a3:2d:c2:b2:ba:9e:eb:83:
80:cf:4f:b4:3f:d9:60:be:35:5a:9f:1d:6f:c7:f6:
2a:af:e9:bb:7a:d2:71:08:af:b1:51:71:8b:38:6e:
df:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:89:9E:D7:2C:E3:70:50:4B:B6:42:93:7A:7B:85:0F:2D:6C:F8:90
X509v3 Authority Key Identifier:
keyid:D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/xIme1yzjcFBLtkKTenuFDy1s-JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.248.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:10:1b:75:72:d9:9c:28:68:00:45:64:e8:bb:d2:98:76:a3:
51:60:3a:dd:72:28:ba:48:13:79:ba:6e:69:9b:53:d7:52:76:
65:28:78:4b:80:4c:3c:4b:bd:10:41:0b:91:61:95:a9:f9:90:
b7:4c:71:11:bc:76:18:58:41:c9:aa:04:a0:32:55:6f:51:9e:
71:a4:b7:30:a9:f1:87:76:4c:db:e8:ff:1f:68:c6:ef:86:62:
2a:d1:a3:ec:3e:16:b3:96:4e:64:2d:a0:20:22:64:cc:e3:f3:
03:13:f7:2e:b1:ed:5e:ae:ce:52:27:23:4e:28:6c:ec:86:1d:
ca:5c:f0:d9:19:f9:d3:b6:96:f0:f3:1a:fc:96:ce:19:e5:6b:
40:47:92:e0:6f:65:42:1a:93:f3:81:d7:dd:98:df:47:08:2f:
10:bd:81:c8:0c:e3:4d:7f:9a:c2:63:85:79:bb:9c:c2:05:82:
8b:e3:66:3e:15:10:3d:80:cd:f5:81:2e:4a:56:19:2b:93:b8:
ba:45:29:4b:e9:8f:91:db:d8:ee:c5:db:84:cd:5f:08:06:7d:
a2:11:3b:cd:c8:b5:0f:a0:40:ce:d1:b8:d9:19:5c:f8:2d:db:
8c:5f:33:e7:c9:b5:f3:5b:75:2a:16:23:37:47:3d:59:fb:66:
73:82:6b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:23 2024 by rpki-client on console-ams.rpki-client.org