Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pxo3X1GurkpeqKZlIW1J2rJ0B4w.roa
File: pxo3X1GurkpeqKZlIW1J2rJ0B4w.roa (raw, json)
Hash identifier: sXqX8i4Vly6+Z5e3JEOhao+jrwwFWva5XJRQAxstPbM=
Subject key identifier: A7:1A:37:5F:51:AE:AE:4A:5E:A8:A6:65:21:6D:49:DA:B2:74:07:8C
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018AEA04D578D4285E42E7549937FE58FFD6
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pxo3X1GurkpeqKZlIW1J2rJ0B4w.roa
Signing time: Sun 01 Oct 2023 06:54:59 +0000
ROA not before: Sun 01 Oct 2023 06:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 164.215.96.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:04:d5:78:d4:28:5e:42:e7:54:99:37:fe:58:ff:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Oct 1 06:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a71a375f51aeae4a5ea8a665216d49dab274078c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:8f:00:b3:8c:70:16:f7:ce:f3:5c:de:8f:
f7:43:6e:4b:a9:39:f0:aa:78:95:9d:41:1c:a8:50:
e4:01:5a:ee:a9:f3:f5:74:63:4b:4f:3b:49:32:b0:
e6:16:e4:e4:17:ba:49:45:82:c3:37:a1:d5:b8:fb:
2f:b3:63:a2:2a:9b:65:89:fe:02:26:55:30:f4:44:
5d:18:8e:3f:3e:2f:c3:f1:92:94:c1:5d:d9:f2:9e:
ad:a5:6e:90:36:b7:e5:f0:70:a1:85:d7:5a:b7:86:
d9:7c:52:1d:46:72:da:88:bd:91:2c:8b:a4:d8:37:
8b:05:bc:53:3a:49:39:b6:d8:89:18:bf:83:af:6d:
5d:34:74:e4:c7:15:20:42:70:f2:af:e8:a3:42:72:
6e:37:55:64:57:4f:b6:65:70:b7:44:d3:2d:a6:6f:
dd:87:08:b1:bb:5b:4d:06:e0:03:3c:98:69:81:96:
3e:97:79:71:c4:0e:13:08:ba:eb:ab:78:c2:9e:d3:
3c:b1:df:5e:14:9a:3d:60:26:4d:49:cc:7d:69:17:
ee:29:84:c3:24:7b:30:cc:90:e0:47:89:65:95:d6:
fb:51:60:30:09:bd:df:55:a1:b2:8d:d7:5a:d9:e5:
a1:b1:89:c2:5e:56:f4:1b:56:f0:54:02:56:eb:c5:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1A:37:5F:51:AE:AE:4A:5E:A8:A6:65:21:6D:49:DA:B2:74:07:8C
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pxo3X1GurkpeqKZlIW1J2rJ0B4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.96.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:93:45:e5:3d:45:04:bf:7a:5b:03:88:52:08:e3:81:31:cc:
9c:8e:4a:a3:25:77:db:cd:63:e9:2c:24:04:f7:f9:81:57:fe:
ad:d9:41:b4:b5:96:3b:69:75:b7:78:51:96:1d:6c:f9:3a:0b:
7a:df:f3:b6:67:3b:05:3c:b8:fb:98:47:5e:0f:4d:3b:c6:65:
02:5b:d9:6c:c9:4d:b3:c8:42:63:25:29:55:2a:ae:83:d1:09:
6b:e9:3c:9e:bf:42:84:8a:f9:d0:55:d1:e6:81:68:27:1a:6c:
37:5c:9e:fc:3a:81:1b:c2:ac:68:6c:91:5a:b4:57:9d:ae:de:
5a:47:46:f2:37:fd:75:55:e0:d1:90:80:73:51:5b:ac:06:f3:
4e:d0:94:2a:d3:24:1d:8e:fe:1b:51:7f:ae:46:50:c2:b0:f1:
ea:a2:f0:95:fb:3d:7d:c0:a6:53:43:1a:fe:01:ec:01:cf:26:
a3:62:98:ed:68:65:f3:06:8b:c3:fe:0f:21:c7:2e:14:ab:ab:
f8:03:1b:f9:96:2d:25:71:db:d3:2b:dd:2b:c7:e9:31:8b:e2:
ec:a1:71:8f:60:99:45:84:dd:81:cc:ff:90:af:f1:e5:9d:2c:
0d:80:b9:a5:ae:a0:35:64:fe:0f:d8:82:8d:25:3e:ef:ad:ca:
55:85:22:fd
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 13 14:10:09 2023 by rpki-client on console-fra.rpki-client.org