Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Ac9t3Z_QOYjYRXYshj4m_BNmkpo.roa
File: Ac9t3Z_QOYjYRXYshj4m_BNmkpo.roa (raw, json)
Hash identifier: 6tZsHuezBGshaU/hGjBcrYQ+ePQo1LCv6mZHmvZ/rtI=
Subject key identifier: 01:CF:6D:DD:9F:D0:39:88:D8:45:76:2C:86:3E:26:FC:13:66:92:9A
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01866DF941FD4C0E56B6A2F1129F3B57CB68
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Ac9t3Z_QOYjYRXYshj4m_BNmkpo.roa
Signing time: Mon 20 Feb 2023 08:38:17 +0000
ROA not before: Mon 20 Feb 2023 08:38:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 188.64.10.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6d:f9:41:fd:4c:0e:56:b6:a2:f1:12:9f:3b:57:cb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 20 08:38:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01cf6ddd9fd03988d845762c863e26fc1366929a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:d0:54:46:74:6a:b6:3e:77:0a:0f:32:0a:
8e:7a:b5:75:83:37:98:64:88:20:78:d5:a3:0f:4b:
07:b3:cd:f0:26:15:9a:3c:54:c4:36:20:b8:fc:07:
a3:bc:53:d9:05:37:b4:02:b1:5c:22:3c:90:97:6a:
1e:0f:50:c9:16:ea:cf:89:68:d9:8c:b2:b8:b2:37:
e2:77:f4:03:6b:0c:00:4f:b4:c1:1a:32:c4:c1:fa:
e1:13:99:1b:81:c7:cb:64:05:59:02:c5:2d:5e:24:
50:30:68:89:2b:51:d0:37:e7:4a:fe:83:93:43:9c:
c6:45:91:77:70:31:66:a2:21:9b:02:39:24:2a:22:
f5:e4:5c:16:2d:f1:02:ed:5d:ed:d2:ad:e1:05:29:
7d:20:1b:7c:05:29:c7:5b:e8:45:81:98:33:bd:da:
4b:23:9a:e5:68:dd:ae:b6:df:15:57:33:fa:83:c5:
f3:6a:da:f2:30:02:6e:6d:7e:47:0e:3e:b9:1e:55:
68:50:7e:a7:6c:42:c0:39:d4:e9:bc:85:64:0b:1c:
62:1c:f9:aa:db:2b:1b:02:ed:2f:ad:59:bc:16:88:
05:5b:22:be:20:57:15:ab:2f:8b:d1:93:ab:40:14:
84:54:43:e3:33:00:0b:ba:74:aa:8c:41:20:c2:cc:
eb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CF:6D:DD:9F:D0:39:88:D8:45:76:2C:86:3E:26:FC:13:66:92:9A
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Ac9t3Z_QOYjYRXYshj4m_BNmkpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:f3:fd:c7:18:59:4e:60:7e:e0:d0:bf:d3:13:95:6a:2b:9f:
f0:4b:c6:f6:03:f5:e9:ce:0f:24:d3:2a:7d:3a:23:67:ab:ee:
55:d9:42:7d:a0:ca:be:8a:b2:1d:25:2b:fe:a8:61:4b:25:4b:
67:d8:02:29:4b:aa:11:dc:65:f8:e5:ad:bf:15:4d:7f:54:66:
43:87:9b:62:c4:c5:96:56:40:50:67:83:37:4d:54:f7:88:9c:
a4:ac:42:e1:20:40:7b:ad:7b:f7:00:b1:ba:e1:a6:66:5e:24:
2b:e5:ef:ea:23:86:6a:bd:a5:2e:02:b6:2c:89:3e:ff:5d:6a:
31:08:53:a9:17:5e:87:2e:cf:4a:37:2a:cc:fe:69:f2:e5:08:
9a:28:18:5c:92:a5:3b:3f:48:0e:b7:ae:19:9b:3f:32:b5:55:
8a:35:af:01:95:d5:18:db:34:59:df:db:54:b9:77:d0:09:92:
cc:c3:fc:2a:69:8b:12:45:4a:d6:28:83:9c:39:d5:5b:a5:42:
23:7b:21:6e:be:a2:26:10:00:56:c1:9a:0e:11:76:9f:b9:e0:
b8:89:3d:21:4f:05:d9:53:5c:84:79:1b:fc:3e:c7:61:66:0e:
ed:33:f1:20:36:b0:93:26:6d:37:49:74:2c:96:c7:ea:7a:4a:
11:d5:b4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org