Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/_6KUIs4lNdXOf1tOfPcmplILcSg.roa
File: _6KUIs4lNdXOf1tOfPcmplILcSg.roa (raw, json)
Hash identifier: 37LwcsPvhdz21p6qcEuUvjFBDfq/Z+r1WqRfaEgyF7s=
Subject key identifier: FF:A2:94:22:CE:25:35:D5:CE:7F:5B:4E:7C:F7:26:A6:52:0B:71:28
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01864C9270207BB2DC40E5AF141D32DC804E
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/_6KUIs4lNdXOf1tOfPcmplILcSg.roa
Signing time: Mon 13 Feb 2023 20:58:30 +0000
ROA not before: Mon 13 Feb 2023 20:58:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 164.215.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4c:92:70:20:7b:b2:dc:40:e5:af:14:1d:32:dc:80:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 13 20:58:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffa29422ce2535d5ce7f5b4e7cf726a6520b7128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:6f:a0:60:42:af:66:5d:c2:3f:47:f3:a4:
70:41:a3:be:da:b4:d3:a7:78:89:80:31:50:df:a4:
d0:2a:e7:d6:33:62:ca:37:74:12:bd:e2:9e:71:80:
3e:ab:48:ad:bd:f4:7f:e4:08:ec:1f:18:1b:9f:1c:
67:37:0e:ff:46:5b:e6:fc:39:30:da:c4:2d:cc:ee:
ff:f9:cf:d7:9e:1f:ef:24:5d:5c:9a:86:7b:f1:45:
ca:75:d0:92:e7:e1:a6:fe:6d:89:53:6e:98:c9:5f:
ce:7d:63:7c:3a:cb:57:dc:75:0a:bb:c6:9f:5c:f8:
78:77:eb:66:93:6a:fc:51:c9:9e:ff:bc:ba:13:94:
ba:30:96:7a:cc:15:92:cb:33:6a:fd:ca:53:fb:ec:
58:63:4b:a7:a0:9d:87:66:e6:3a:e6:e5:2d:22:7c:
8b:79:3b:58:30:12:be:b4:e8:aa:a4:d7:f6:42:0a:
6f:32:46:a5:86:79:0a:d8:40:d6:d8:9a:6b:28:76:
43:7e:df:bf:5e:c5:b9:8a:ed:ab:bf:46:df:07:d8:
f1:88:1a:da:d8:7d:65:ee:d1:fa:a4:e0:57:04:63:
61:27:7d:4f:6d:18:e2:6b:63:fb:b5:db:e3:d2:69:
80:69:45:0e:f0:7c:5b:e0:f0:b1:79:98:6e:21:9f:
d4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A2:94:22:CE:25:35:D5:CE:7F:5B:4E:7C:F7:26:A6:52:0B:71:28
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/_6KUIs4lNdXOf1tOfPcmplILcSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.102.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:88:bf:93:b4:63:41:af:12:8f:5e:98:e1:2f:d9:8a:62:f5:
07:70:f2:5c:65:50:a1:b2:65:c6:a6:85:34:85:ef:d0:32:dc:
ae:2d:1f:17:05:57:50:67:52:3f:7a:9a:eb:5f:e2:81:a2:ff:
fd:b3:3e:cc:b4:e7:43:e9:6b:d8:31:51:3c:a0:85:ee:66:e4:
e9:9b:06:a9:8d:78:96:ed:08:bc:06:67:f6:e5:f2:f0:e5:4f:
d2:c2:75:61:44:4e:bf:6a:b3:ed:09:a7:c5:c4:2c:18:52:59:
ed:a4:bf:17:e6:2f:4e:bb:0f:33:68:c3:bf:f3:98:e2:4f:d3:
15:fe:a8:8d:82:2a:49:a2:39:7b:ca:0c:2f:32:27:45:9e:05:
ea:b4:b8:49:4b:f6:89:d2:21:8e:16:38:d9:e5:f8:85:71:83:
a4:77:7b:a6:37:8f:f1:8b:b6:20:16:e2:ec:79:72:81:57:76:
cc:e6:b0:10:b6:80:9a:c5:e8:a4:28:b6:a3:07:36:36:56:b6:
13:dd:0b:4d:73:19:37:bf:47:91:fb:dd:25:dd:a0:04:d5:ef:
58:f0:af:c6:f9:24:20:20:ec:70:e6:8f:75:52:2d:fd:e1:a6:
1d:c5:31:d6:b1:2a:2e:60:6f:1f:5e:c9:ba:e1:8e:0f:b3:53:
7e:15:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org