Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/k-2AcBYS-l2fZfu2dIKq_2XC7ag.roa
File: k-2AcBYS-l2fZfu2dIKq_2XC7ag.roa (raw, json)
Hash identifier: ZfHsXuCzYdbwu0siV9VTOMYwcUR7p7GFagXh343zdAM=
Subject key identifier: 93:ED:80:70:16:12:FA:5D:9F:65:FB:B6:74:82:AA:FF:65:C2:ED:A8
Certificate issuer: /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial: 0185708CCE2FC76D70703CBC6F3E8C44D122
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/k-2AcBYS-l2fZfu2dIKq_2XC7ag.roa
Signing time: Mon 02 Jan 2023 03:35:54 +0000
ROA not before: Mon 02 Jan 2023 03:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 138.124.184.0/24 maxlen: 24
138.124.180.0/24 maxlen: 24
138.124.183.0/24 maxlen: 24
138.124.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:ce:2f:c7:6d:70:70:3c:bc:6f:3e:8c:44:d1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Validity
Not Before: Jan 2 03:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93ed80701612fa5d9f65fbb67482aaff65c2eda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:dc:24:7d:9a:c7:46:5e:fb:19:8f:ab:14:
87:cc:7c:b4:66:ef:6f:24:5c:6a:a0:58:1d:c3:17:
b7:7a:e0:85:43:9c:89:de:eb:82:2c:e8:77:a5:0d:
9b:eb:f9:87:7a:e6:03:3e:1b:cc:68:8c:3f:6b:68:
78:3c:46:97:bc:e5:0c:8b:bf:a0:50:23:4a:6c:02:
f7:cf:7e:cc:37:f2:b2:d5:a5:d2:e4:da:0a:f8:99:
03:fe:91:99:98:76:b6:e7:0c:55:23:1e:86:90:67:
40:80:cb:48:3b:25:d9:7c:96:70:06:b5:a3:c5:67:
7a:c1:c1:ec:7c:6a:49:90:8f:e0:4e:63:aa:4b:59:
3d:f8:2a:81:99:8c:44:e1:49:20:f6:c8:a2:97:2f:
f6:78:6d:ca:45:56:8e:54:1c:03:f0:fe:c0:28:48:
d0:92:c5:01:7e:f6:7f:b9:4c:e6:90:46:a0:f8:89:
6f:63:ed:bf:a2:27:b5:72:9d:7b:d7:30:e0:a1:a6:
29:b7:9f:ae:81:e7:88:57:98:0a:d7:bd:c6:e6:94:
47:eb:b9:f2:b7:e3:4e:45:a7:69:c1:04:e1:d3:d4:
6d:e6:0b:2c:e4:58:37:64:5f:65:0b:84:6f:78:84:
6c:53:f1:fa:68:86:13:92:c1:e2:56:73:c1:c8:c6:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:ED:80:70:16:12:FA:5D:9F:65:FB:B6:74:82:AA:FF:65:C2:ED:A8
X509v3 Authority Key Identifier:
keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/k-2AcBYS-l2fZfu2dIKq_2XC7ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.180.0/24
138.124.183.0-138.124.184.255
138.124.187.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:bb:5b:2d:f3:bb:48:2b:95:60:4a:a2:de:48:8c:1a:e8:ff:
9b:92:77:ac:ad:d8:a1:52:5b:ee:64:6f:68:42:fd:ad:e5:55:
77:a2:d6:02:e7:b5:10:a5:b6:23:7f:d8:5d:d0:41:a2:1f:6a:
4d:41:33:73:46:39:d0:55:99:1f:a2:a7:f9:a3:e7:05:10:2e:
81:96:30:63:98:08:7d:1c:c7:8f:06:8f:b7:13:5c:d6:5e:20:
4e:13:e8:b4:b3:98:08:78:de:af:1c:ed:76:bd:42:e9:4c:3d:
d8:e9:de:da:cb:60:41:c4:9b:b2:95:17:94:37:fa:a6:19:bd:
be:6b:db:8d:a6:33:d1:ed:5a:3f:65:78:31:c8:db:83:2f:c9:
44:e2:27:e0:8c:14:a4:0a:b5:1e:aa:df:c8:14:42:c9:18:1e:
e0:15:3a:7b:b3:6f:c9:c8:85:f2:f7:0f:b9:09:f1:38:76:38:
41:aa:e8:bc:63:c5:9f:6f:a6:89:43:b1:87:84:fe:98:ff:52:
24:bd:ba:60:e2:b8:f9:1c:d6:ca:fc:cd:68:0f:ba:1c:10:ce:
e0:a9:27:bc:13:93:7f:5c:13:38:99:5b:36:2d:da:89:e7:c1:
a9:45:52:cd:b6:c9:a5:a2:ca:bb:cd:12:d3:45:45:9f:22:d5:
91:11:f7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:28 2023 by rpki-client on console-fra.rpki-client.org