Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/In4aEL8o5rXcW3BkGwOYrfKxEkg.roa
File: In4aEL8o5rXcW3BkGwOYrfKxEkg.roa (raw, json)
Hash identifier: dCVYHWjq99HX3n7BvHiryI4ssnaiWALPby8liO6FzlE=
Subject key identifier: 22:7E:1A:10:BF:28:E6:B5:DC:5B:70:64:1B:03:98:AD:F2:B1:12:48
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01875772029B0075C0BB89AF0B7E3B3F8133
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/In4aEL8o5rXcW3BkGwOYrfKxEkg.roa
Signing time: Thu 06 Apr 2023 16:41:42 +0000
ROA not before: Thu 06 Apr 2023 16:41:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63473
IP address blocks: 150.107.201.0/24 maxlen: 32
150.107.200.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:72:02:9b:00:75:c0:bb:89:af:0b:7e:3b:3f:81:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Apr 6 16:41:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=227e1a10bf28e6b5dc5b70641b0398adf2b11248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:ac:a2:a0:52:18:34:76:14:5b:4b:79:51:
36:e5:28:db:fa:e6:da:41:e2:0f:0f:4d:82:56:48:
d6:2d:b4:2a:9e:96:11:ee:da:25:cc:2b:1d:1d:f2:
53:7d:ac:be:38:4e:43:49:b3:37:c3:64:92:9e:82:
b3:94:dd:70:7a:6c:c6:dd:5f:dd:65:35:33:37:5d:
35:d9:37:e6:ef:26:65:e7:2c:b2:bb:cd:e2:93:1f:
4d:a7:42:47:43:04:1a:74:dd:18:7f:3a:89:ed:f5:
77:ba:72:18:82:16:68:c7:3a:40:17:45:51:8c:30:
e5:56:9d:bb:68:80:9c:2b:a3:93:0a:30:03:41:14:
8c:bd:39:76:35:5f:c8:35:1d:98:b0:4e:55:51:9d:
21:25:48:4a:f4:9f:7f:69:48:42:0b:3f:0d:2c:36:
38:b2:84:86:02:54:e0:93:7b:c5:b3:d3:86:0b:a3:
d0:e5:4c:8a:38:39:1b:dc:cf:e5:47:f5:0b:b0:65:
68:15:8d:71:03:4d:c5:b1:d9:9b:c9:93:0a:eb:ec:
48:15:fd:82:42:ba:30:bd:b9:e7:ea:a6:93:19:e1:
a9:6b:37:e3:1b:0b:9c:3d:8c:53:a3:3e:bc:10:ee:
f0:22:ff:5a:cc:31:ee:2c:36:9c:0b:d5:15:c4:85:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:1A:10:BF:28:E6:B5:DC:5B:70:64:1B:03:98:AD:F2:B1:12:48
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/In4aEL8o5rXcW3BkGwOYrfKxEkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.200.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:7f:0c:7a:01:38:a1:23:8e:81:9f:3c:7e:62:84:f2:6f:92:
c3:ba:c1:00:83:9f:35:70:9e:46:e5:ff:06:ce:71:08:ed:d3:
91:5e:0a:c0:6b:a7:01:de:b3:dd:8c:d6:14:6a:b8:72:46:6b:
e7:12:78:7c:90:af:4e:bd:43:f1:d9:fa:65:9a:1f:10:64:50:
ff:93:56:a7:c7:86:c2:2f:43:bb:9b:d7:4a:aa:f1:6d:47:d1:
d7:ca:19:f0:ef:f4:56:4d:d8:d4:83:7e:ec:a8:34:ee:6c:2f:
74:a9:0e:81:74:6f:55:47:a7:e0:3e:fa:b8:5d:b0:53:ac:3e:
1e:7e:b2:83:6b:62:24:c3:bd:b8:39:31:f2:db:18:d8:92:40:
9c:dc:1a:65:cf:82:35:e1:d7:f4:88:14:d3:e4:fa:1d:30:15:
5a:8c:b9:16:a7:c4:f4:d1:ca:40:d0:b7:19:ca:74:88:39:87:
40:02:9e:21:e9:98:df:34:39:87:33:48:14:19:82:75:e2:a3:
ab:0a:63:0a:15:fb:d3:39:02:bb:af:00:99:88:ff:18:12:55:
be:be:c9:9a:42:fa:3e:4c:91:43:ec:9e:1b:24:28:2f:96:8e:
62:ee:c8:51:38:26:13:d6:37:78:dc:2d:94:e0:6d:88:33:9d:
74:12:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:47 2024 by rpki-client on console-ams.rpki-client.org