Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/udLlRxkbIx4P8OsIwwBFstswiEs.roa
File: udLlRxkbIx4P8OsIwwBFstswiEs.roa (raw, json)
Hash identifier: 2DSvdM134fsDq1RJvWojEkGxW+I0LixdFBj/AIKMuT4=
Subject key identifier: B9:D2:E5:47:19:1B:23:1E:0F:F0:EB:08:C3:00:45:B2:DB:30:88:4B
Certificate issuer: /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial: 018B81D18DECCDEA236CF8259FFCA9F468FF
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/udLlRxkbIx4P8OsIwwBFstswiEs.roa
Signing time: Mon 30 Oct 2023 18:21:16 +0000
ROA not before: Mon 30 Oct 2023 18:21:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 138.124.184.0/24 maxlen: 24
138.124.183.0/24 maxlen: 24
138.124.180.0/24 maxlen: 32
138.124.187.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:d1:8d:ec:cd:ea:23:6c:f8:25:9f:fc:a9:f4:68:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Validity
Not Before: Oct 30 18:21:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9d2e547191b231e0ff0eb08c30045b2db30884b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:ea:e8:06:2f:8a:14:0d:c9:00:6f:4d:c5:
be:31:44:08:0c:fb:a7:64:35:90:dc:07:d8:34:c0:
af:14:8e:d3:91:fd:b5:bd:e7:ed:82:78:97:69:8e:
d5:82:5b:db:22:bd:09:31:61:58:72:7e:b0:f6:8f:
d9:56:ea:1c:90:55:07:bb:b2:13:53:23:32:bd:27:
52:94:e6:f5:bd:d6:a7:d2:8b:5a:ec:67:cb:c2:33:
73:7d:49:5c:49:6e:3c:e2:54:7f:ee:90:a4:6b:be:
02:77:05:bd:24:f5:24:d7:1c:e2:a4:ca:da:ae:3d:
9e:e1:65:fd:cc:2f:df:eb:95:19:79:dc:e2:89:77:
93:d5:9c:75:4f:71:d6:25:ce:3a:46:09:91:0e:f1:
a0:0d:e7:be:6e:ef:e0:9a:f3:aa:c3:91:11:4f:6b:
9e:69:7c:bf:0f:19:99:6b:4e:44:d0:27:cc:30:58:
9f:13:8b:71:a0:91:3c:2d:97:da:fb:7d:06:29:a8:
53:c2:6c:33:e9:e8:fe:be:b8:93:ac:63:62:c5:96:
ab:3e:4d:51:72:59:be:10:75:ed:7d:d1:11:99:6a:
d7:e3:d7:7d:dd:7c:a2:3a:c6:2b:08:16:ca:0e:ac:
12:4d:93:46:6b:a7:b2:11:a7:fc:00:a5:90:8c:27:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D2:E5:47:19:1B:23:1E:0F:F0:EB:08:C3:00:45:B2:DB:30:88:4B
X509v3 Authority Key Identifier:
keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/udLlRxkbIx4P8OsIwwBFstswiEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.180.0/24
138.124.183.0-138.124.184.255
138.124.187.0/24
Signature Algorithm: sha256WithRSAEncryption
92:96:8a:1f:27:c1:dd:3c:5b:8b:b1:f6:b7:3b:1f:97:5e:8a:
1e:71:73:b0:8b:12:54:74:ab:1f:e9:af:11:32:11:3b:bc:72:
16:fe:e8:13:e5:a8:d2:4c:e2:bb:24:06:15:f9:09:84:b6:ab:
08:ef:00:cf:34:53:f7:9a:d2:cc:07:6a:3c:62:9b:4d:ef:fa:
8c:ff:60:85:e6:fd:e2:db:1a:34:e5:11:bb:11:a4:ee:0b:a6:
39:f6:5b:da:f6:83:1f:af:38:de:bb:4f:4e:73:88:89:89:f6:
80:26:e8:17:70:26:7b:cd:89:49:35:4f:58:29:e5:f6:2b:17:
1b:47:22:48:28:c9:e1:c5:2e:e5:ab:b9:f3:8e:f5:c7:e6:f3:
7e:1b:14:20:46:7a:82:3d:7a:2e:40:12:9d:2a:2c:ae:75:50:
75:a2:fc:25:14:49:4d:dc:bb:10:e6:40:d6:e4:bf:1b:37:cd:
97:64:f7:20:0f:e6:05:e4:a3:ae:86:1b:f2:1a:52:9d:9a:8a:
a4:f7:fd:7a:c0:02:0b:98:4a:13:4e:25:9a:55:8c:d3:be:6f:
70:9b:23:f5:3c:63:7b:57:b9:53:a1:7d:d2:08:26:dd:9d:fb:
a6:bc:7b:45:3d:94:b4:a4:94:d4:a5:00:40:6b:91:2c:2b:7c:
61:e7:aa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:12 2024 by rpki-client on console-ams.rpki-client.org