Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/KiY53CfDTWFQQ2_NCSf1wvU3stk.roa
File: KiY53CfDTWFQQ2_NCSf1wvU3stk.roa (raw, json)
Hash identifier: L1AcUeXWxVU20SDY7snljvhR1UkZ4MZc3YcLHrgoQQo=
Subject key identifier: 2A:26:39:DC:27:C3:4D:61:50:43:6F:CD:09:27:F5:C2:F5:37:B2:D9
Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial: 01857246D3126E2E69FA855FC92E29B15F72
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/KiY53CfDTWFQQ2_NCSf1wvU3stk.roa
Signing time: Mon 02 Jan 2023 11:38:42 +0000
ROA not before: Mon 02 Jan 2023 11:38:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14288
IP address blocks: 157.23.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:d3:12:6e:2e:69:fa:85:5f:c9:2e:29:b1:5f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Validity
Not Before: Jan 2 11:38:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a2639dc27c34d6150436fcd0927f5c2f537b2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e3:7e:82:ba:64:02:bf:35:d0:84:5d:fc:14:
15:c6:72:41:2a:76:18:3d:b8:aa:7a:d3:0f:f3:5b:
6f:0b:ab:1e:8a:c6:65:bd:3a:0f:ad:41:a7:f3:35:
84:68:9e:08:cf:fd:f6:74:09:5a:d4:db:aa:10:87:
7a:b1:07:48:e8:24:45:30:7e:c1:b1:b9:dd:5a:b6:
8c:60:6c:64:9f:7b:c7:cf:04:bf:05:82:ab:ed:2d:
73:28:24:de:81:89:24:cc:75:21:86:9c:ab:78:2c:
34:cc:4f:a0:53:a6:40:67:31:ba:2d:8f:87:7a:37:
d5:66:df:26:8c:e5:09:a4:0f:22:e0:07:31:66:15:
0d:36:a3:00:5b:6b:5e:c7:d2:56:83:1a:83:c2:5c:
50:1c:0e:45:5c:6e:cb:3d:0b:5f:9c:0e:05:25:d0:
4b:62:4d:b4:f7:7c:9e:0f:8c:e3:64:e8:80:1f:8c:
74:a8:06:0e:f1:c7:57:28:57:6f:1b:d2:55:8d:98:
4d:5b:1d:21:77:c3:fc:18:52:81:85:a1:5f:53:5c:
e9:22:fa:da:29:eb:5b:b9:a5:f9:98:b4:af:ab:68:
46:7d:fd:b8:c5:7e:cc:ac:6b:42:07:da:42:a4:ab:
d6:6a:6a:12:4c:86:0d:e3:ac:b6:04:68:6b:d9:ff:
92:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:26:39:DC:27:C3:4D:61:50:43:6F:CD:09:27:F5:C2:F5:37:B2:D9
X509v3 Authority Key Identifier:
keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/KiY53CfDTWFQQ2_NCSf1wvU3stk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.23.249.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8d:cf:d0:b7:c1:77:0a:44:12:7d:75:54:16:86:a4:79:dc:
c9:32:6d:4f:34:d1:90:74:6f:ae:e9:47:70:9e:ed:1d:63:6b:
f3:fc:95:fa:8d:2c:66:01:29:1c:9b:64:26:8b:ad:2d:49:ab:
15:b7:4a:df:ff:c6:21:55:b4:67:a4:20:da:a4:b0:1f:27:99:
e5:06:45:d1:21:ea:7c:22:e4:b1:15:a3:a3:a0:65:3c:68:55:
c5:cf:06:76:c6:5f:4d:c4:44:7b:8f:fa:dd:67:f6:08:b5:ff:
ff:53:c4:1d:9f:e0:ed:13:32:bd:dd:69:45:c4:92:f3:3a:d1:
c0:16:c0:63:84:22:10:71:68:23:a2:7b:7a:b0:11:3b:61:db:
ba:7c:c5:7f:ab:9e:a4:a1:1c:c6:a3:57:a6:ae:b2:f1:3e:0b:
b6:be:bd:d9:7d:ba:93:04:a5:d0:94:f9:af:f6:c6:01:b8:f1:
64:6d:b6:7a:6d:ba:78:ee:e9:b8:06:a3:db:32:15:8a:cd:b1:
5c:32:d0:6f:a1:0f:f2:86:4f:ad:dd:ac:dd:cf:00:02:d3:51:
aa:44:90:77:77:78:e6:5e:e4:70:3d:b4:9c:1f:12:0c:20:ed:
d9:20:e5:1a:95:7f:70:c1:2c:78:1f:97:a1:cb:b6:52:6a:8f:
90:86:16:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:20:15 2024 by rpki-client on console-ams.rpki-client.org