Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/rKuSL_hNOMHwDN9BmbAerddWtIk.roa
File: rKuSL_hNOMHwDN9BmbAerddWtIk.roa (raw, json)
Hash identifier: RFkJsaz7jcO5aWEaIsqPPTJSRLRuZc+FwKD2uAdxv5E=
Subject key identifier: AC:AB:92:2F:F8:4D:38:C1:F0:0C:DF:41:99:B0:1E:AD:D7:56:B4:89
Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial: 01856B37B5226AA1505622A3B2AD09FE85E8
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/rKuSL_hNOMHwDN9BmbAerddWtIk.roa
Signing time: Sun 01 Jan 2023 02:44:51 +0000
ROA not before: Sun 01 Jan 2023 02:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 786
IP address blocks: 147.252.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:37:b5:22:6a:a1:50:56:22:a3:b2:ad:09:fe:85:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Validity
Not Before: Jan 1 02:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acab922ff84d38c1f00cdf4199b01eadd756b489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:5b:fb:9e:43:f3:fc:f1:eb:d2:69:9e:4d:
c7:ed:ee:d9:3c:83:11:40:2b:05:23:bf:84:4b:38:
3f:63:7f:f0:ea:b4:4e:0b:db:1c:1c:63:2c:02:47:
fc:91:2e:d0:fb:23:36:6c:37:05:16:24:0a:59:4c:
2e:71:04:f7:2b:0d:1b:9e:f4:ca:16:f7:e9:bb:34:
88:b6:f6:1a:79:4c:5c:b0:48:a9:71:4b:cf:86:dc:
c5:a6:74:66:20:b9:6a:70:4a:18:9f:0e:cd:e5:e0:
f1:19:4f:21:b1:99:da:3b:f3:42:33:54:8a:3a:fd:
5b:38:bc:ed:0d:04:a8:35:3d:cb:b5:fb:65:03:6a:
61:22:27:d9:8b:bd:8b:35:3a:28:91:41:b2:3b:f6:
0b:94:00:5d:af:cd:99:a1:a1:e2:43:59:53:96:4b:
3b:12:43:a7:ac:68:2c:b2:f0:54:2e:e5:fd:0a:87:
8f:2b:46:9e:52:b6:bb:12:2f:91:f1:c1:96:91:51:
40:1c:12:fe:3c:d0:f8:df:f9:5f:d0:48:9b:61:f6:
47:43:58:a4:2b:81:09:74:ff:87:d4:0b:00:eb:87:
95:47:ca:cc:c9:bd:14:96:09:f0:47:91:5b:9a:81:
fa:4f:50:f5:df:a2:be:d2:e3:24:04:6f:a9:b8:2a:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AB:92:2F:F8:4D:38:C1:F0:0C:DF:41:99:B0:1E:AD:D7:56:B4:89
X509v3 Authority Key Identifier:
keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/rKuSL_hNOMHwDN9BmbAerddWtIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.252.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:db:14:21:c2:ac:93:f3:36:c5:27:6d:7f:8e:af:80:52:94:
0c:54:77:b6:8b:6e:11:54:2f:01:c5:e4:1f:b8:cc:a1:51:83:
d6:51:12:3e:7c:9a:f1:1d:9a:a2:22:d5:a8:17:8e:04:c8:df:
7e:15:07:99:6a:ef:18:f2:d5:bc:3c:23:53:ef:1e:de:7c:10:
ba:f3:08:2e:2a:ef:58:f4:72:99:22:e7:e1:ac:36:82:00:a6:
b0:97:f4:1d:90:6a:90:4b:5f:e5:b1:3d:11:2b:4e:77:71:df:
1c:e1:6a:ab:a7:f8:1e:a8:83:be:3b:ea:f0:a8:a7:31:7e:ee:
5a:2d:e0:62:f7:16:74:23:0f:0e:b6:c6:00:1e:41:d8:a9:12:
23:02:f3:f7:de:46:b5:6f:ef:8c:a8:0e:4a:1e:e8:ed:e8:b5:
9b:fa:c3:32:9a:69:7f:6a:64:2a:a6:df:bc:f4:39:49:56:c3:
9c:d5:ea:7c:d5:6e:e6:f4:b5:b6:6c:ec:73:78:77:4a:86:77:
e8:72:9f:45:81:71:8e:47:73:65:b4:8f:12:22:fa:8a:9e:c7:
61:06:3d:50:63:80:2c:09:c0:36:61:10:03:aa:34:02:56:9e:
29:fd:51:89:91:ab:c7:81:66:17:ca:0f:01:b7:6a:cc:70:9f:
bb:18:f4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:26 2024 by rpki-client on console-fra.rpki-client.org