Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/Ak54_GbKERLcqRKLGXZd8eCsOxg.roa
File: Ak54_GbKERLcqRKLGXZd8eCsOxg.roa (raw, json)
Hash identifier: gjV2VOHEIsWUouDdLmAWnylQEh9aednzt8UbXN2C844=
Subject key identifier: 02:4E:78:FC:66:CA:11:12:DC:A9:12:8B:19:76:5D:F1:E0:AC:3B:18
Certificate issuer: /CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Certificate serial: 01856FC28DD813A70FF28990751F8EC22A93
Authority key identifier: 11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/Ak54_GbKERLcqRKLGXZd8eCsOxg.roa
Signing time: Sun 01 Jan 2023 23:54:59 +0000
ROA not before: Sun 01 Jan 2023 23:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49788
IP address blocks: 193.0.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:8d:d8:13:a7:0f:f2:89:90:75:1f:8e:c2:2a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Validity
Not Before: Jan 1 23:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=024e78fc66ca1112dca9128b19765df1e0ac3b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:86:7b:1c:65:cb:34:0c:e8:22:2e:17:13:c3:
1d:11:a3:4a:62:df:36:e8:84:56:e3:49:d1:e6:dd:
2e:18:1d:8c:d8:da:32:4d:46:1f:ab:06:0d:be:6f:
1f:e8:c5:c1:57:27:22:4e:25:43:c5:41:63:f1:88:
8a:c9:94:f6:0c:b7:7b:39:45:0f:11:6f:50:fe:35:
c2:2a:64:76:d8:ba:d3:ac:aa:33:c7:a8:1b:34:c3:
8a:60:68:9e:3e:59:c4:5d:f8:ee:2a:70:55:65:87:
2b:6b:89:c1:7f:8a:bb:46:1e:db:b6:5c:f5:f6:06:
73:85:7c:0e:62:f6:c4:ec:36:90:21:92:f3:6f:e5:
8b:5c:6d:7b:97:a9:59:96:a7:e3:51:0f:f2:46:45:
56:cd:2d:c3:37:bb:c0:a4:23:53:ed:07:51:d0:71:
8a:bc:e2:1d:f9:e2:92:19:62:ed:c6:dc:ae:69:38:
ce:3e:9e:1d:21:bf:79:71:8d:35:00:35:90:70:7d:
8e:af:aa:eb:b1:4f:39:a7:93:45:03:5c:cd:54:06:
89:bb:98:02:cc:cb:b3:91:f5:9d:86:18:94:b1:f1:
e2:78:83:d1:ac:77:59:32:83:a9:00:90:96:cf:4b:
0f:f3:5d:58:a6:1a:9a:9d:01:ad:ac:b6:b3:5b:6f:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4E:78:FC:66:CA:11:12:DC:A9:12:8B:19:76:5D:F1:E0:AC:3B:18
X509v3 Authority Key Identifier:
keyid:11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/Ak54_GbKERLcqRKLGXZd8eCsOxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.222.0/24
Signature Algorithm: sha256WithRSAEncryption
98:38:5d:8a:c0:26:9f:00:fd:8b:5c:e2:29:db:1f:2f:8b:df:
e6:ac:30:76:c7:c8:68:ab:72:ab:41:f0:c5:b3:57:65:e0:b2:
5f:2e:57:63:a5:df:92:b8:03:0c:ae:db:96:c8:82:0b:93:57:
1a:73:04:49:b2:a8:01:74:d8:c7:88:d5:fd:c1:70:29:62:8d:
3c:69:00:2f:13:02:41:eb:68:6d:4e:c5:52:6b:c7:1a:ec:9e:
88:5b:a3:55:60:55:c0:d4:92:6f:7d:b8:9d:41:72:41:9f:0c:
2c:9e:d7:7f:23:d2:a2:f7:f3:89:30:cf:b1:a8:4c:ff:61:f5:
2d:4a:d7:6f:a7:61:58:44:60:e1:43:40:2a:50:1e:99:0d:e1:
b9:9d:8f:02:43:4b:25:f4:51:ad:fd:93:cb:72:b9:87:b9:8b:
92:95:49:aa:db:31:2d:6d:b6:a3:cf:91:53:a5:8e:79:c5:7a:
00:64:f3:e0:53:00:35:18:22:7d:41:19:46:8c:16:47:12:84:
98:6d:df:37:ca:7b:08:55:46:01:08:5c:9a:62:d7:f9:54:0a:
f9:d0:f1:30:5f:78:7d:e7:9a:d5:3d:5a:a6:95:e9:5d:f8:c6:
59:b3:c1:03:65:98:90:03:85:d2:c1:b3:79:1c:e1:cc:61:b3:
54:fc:f1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:39 2024 by rpki-client on console-ams.rpki-client.org