Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/4JadiIQ6Y3AiapA10tQuRw1bCrI.roa
File: 4JadiIQ6Y3AiapA10tQuRw1bCrI.roa (raw, json)
Hash identifier: FMQF80s74fjLgFiyK4Lk5fk4jyTJu2NszqNNtbiWhgY=
Subject key identifier: E0:96:9D:88:84:3A:63:70:22:6A:90:35:D2:D4:2E:47:0D:5B:0A:B2
Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial: 018751BC190AA4203B5F112CD12BFD9FB4BA
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/4JadiIQ6Y3AiapA10tQuRw1bCrI.roa
Signing time: Wed 05 Apr 2023 14:04:54 +0000
ROA not before: Wed 05 Apr 2023 14:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 378
IP address blocks: 147.233.128.0/17 maxlen: 17
147.233.0.0/17 maxlen: 17
147.233.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:bc:19:0a:a4:20:3b:5f:11:2c:d1:2b:fd:9f:b4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
Validity
Not Before: Apr 5 14:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0969d88843a6370226a9035d2d42e470d5b0ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fc:87:92:cb:9a:d8:bd:ad:1c:5c:30:d6:91:
e8:f0:8d:f1:bb:07:6b:d1:7c:19:60:3b:38:28:4b:
4e:94:bf:8c:21:44:12:08:1a:01:6c:ce:79:f3:d7:
79:88:a9:40:55:1c:7d:62:53:7b:77:f0:73:b2:76:
33:cc:98:a6:29:a2:7b:fd:d6:f4:8b:ec:ec:99:f7:
f0:29:a0:20:d4:03:e3:8e:8e:48:10:99:6c:c4:0c:
ce:46:f7:9a:56:16:39:19:18:8d:3a:7e:17:c2:4e:
4d:84:4e:2e:40:9c:c6:3e:81:a3:cd:a3:45:41:47:
b6:6b:1c:a2:d4:4b:12:92:f4:8e:42:27:d9:4c:53:
e0:5a:6a:c7:9f:76:0a:98:98:45:84:ca:ef:80:43:
8f:bb:d8:fe:0c:2c:8c:fd:a8:29:8e:fb:34:46:9c:
44:c5:a3:fa:7c:41:7d:67:2e:78:19:37:b6:aa:37:
3a:fe:3e:3a:f6:13:d7:f1:22:22:1a:a6:a4:e9:5d:
73:99:91:79:3a:55:3c:7b:6c:f1:06:c0:34:24:9e:
1c:44:34:24:38:21:f8:2c:e5:a2:82:62:82:0a:5d:
cc:bd:16:b1:4d:2d:da:ce:d3:29:a0:bb:a2:2b:22:
7e:da:94:0e:6a:80:5b:f9:60:ca:28:2a:0a:ed:48:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:96:9D:88:84:3A:63:70:22:6A:90:35:D2:D4:2E:47:0D:5B:0A:B2
X509v3 Authority Key Identifier:
keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/4JadiIQ6Y3AiapA10tQuRw1bCrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.233.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c5:6d:a4:97:d4:8b:3c:5f:02:02:d9:f9:6a:9f:e5:4c:1a:9e:
d8:3d:08:b8:50:aa:b3:4e:e4:b1:6d:9a:2e:53:d7:e0:19:47:
07:88:63:25:b4:5b:98:ca:8c:f6:3f:42:be:c3:2e:03:25:79:
26:7f:07:20:cd:63:0c:a6:43:8e:4d:5d:e4:72:d7:c3:16:21:
16:f1:46:21:b7:30:3a:55:9c:a1:c1:cf:a9:7f:3e:18:85:87:
9d:4a:75:ff:13:90:ce:fb:ca:40:61:60:75:aa:80:78:85:9f:
83:ae:db:b9:de:16:41:1f:5b:55:ee:ac:77:11:c7:b2:b4:c1:
db:3c:d9:39:e2:29:f9:90:6d:ea:3a:ef:bc:54:22:14:2f:97:
5a:5b:90:6a:6e:c6:af:f1:52:c9:7b:31:03:ee:e2:2a:2e:cd:
3d:ea:3c:05:aa:af:c2:99:25:8a:65:4c:b6:a0:c9:ab:51:7f:
d2:ca:1e:90:07:5e:92:1e:9c:30:78:c7:92:9b:5a:b7:c9:c7:
90:ef:8b:ac:b0:06:a1:40:0d:a8:49:83:4b:f5:3f:1c:6e:4e:
09:2a:b6:73:73:36:c9:eb:b1:91:61:84:f4:c2:a1:cb:09:9e:
fc:57:ff:10:2e:61:e5:23:1b:83:f4:55:f2:12:28:62:bc:a9:
4d:15:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:00 2024 by rpki-client on console-ams.rpki-client.org