Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/kEISQqjfT7t5ibw1nXkQj1R2j-U.roa
File: kEISQqjfT7t5ibw1nXkQj1R2j-U.roa (raw, json)
Hash identifier: L/FqKlDFf7mMlQE9pPrOgQ2IQj18AP/Pf89/91hK6Vk=
Subject key identifier: 90:42:12:42:A8:DF:4F:BB:79:89:BC:35:9D:79:10:8F:54:76:8F:E5
Certificate issuer: /CN=53153003737d78f722db9a28e22043e35d8d871e
Certificate serial: 01856CCACC1C5C3814DE88E90016192B4C44
Authority key identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/kEISQqjfT7t5ibw1nXkQj1R2j-U.roa
Signing time: Sun 01 Jan 2023 10:05:07 +0000
ROA not before: Sun 01 Jan 2023 10:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 192.47.244.0/22 maxlen: 22
192.47.248.0/23 maxlen: 23
134.21.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:cc:1c:5c:38:14:de:88:e9:00:16:19:2b:4c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53153003737d78f722db9a28e22043e35d8d871e
Validity
Not Before: Jan 1 10:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90421242a8df4fbb7989bc359d79108f54768fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:91:ad:12:29:4f:48:d1:69:98:e6:29:92:
e4:a3:5f:66:67:92:f7:39:eb:40:9a:27:7d:a4:89:
9f:83:54:31:65:54:62:f2:7c:83:d2:84:f7:16:bb:
d8:45:90:73:57:c0:79:5c:20:50:d8:f8:85:e6:16:
16:19:44:b7:e8:ca:69:10:7d:31:e4:6b:b4:5b:ae:
d5:3a:43:ec:9d:2b:40:92:c2:9c:8d:c9:07:1b:16:
de:51:65:aa:2a:82:8e:53:59:6d:8f:fa:6c:61:67:
57:92:f2:b6:08:ec:2f:b3:1b:21:3e:e9:dc:90:fa:
cf:3d:a6:e1:5b:5a:02:ed:d3:5e:80:3e:af:ff:5c:
0f:9a:88:27:7e:68:94:d2:de:36:41:f4:5f:76:0a:
a1:c9:a2:ba:5d:98:01:f1:ac:d1:5c:4b:2c:0f:be:
0e:28:66:3e:8d:e4:5b:34:ed:57:1c:01:b7:86:a6:
55:c9:60:8b:a8:bf:cf:fe:72:69:92:a0:7d:c1:2f:
b9:fc:52:73:21:15:e9:53:c3:13:12:b6:cc:5f:d1:
f6:ed:3d:ca:dc:47:90:e1:60:5b:d6:49:9e:4c:1b:
0e:38:f4:cd:d5:18:39:3d:fd:e8:c6:82:44:01:e1:
6b:2c:34:22:43:f0:f2:0f:aa:8f:65:82:1f:70:c0:
06:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:42:12:42:A8:DF:4F:BB:79:89:BC:35:9D:79:10:8F:54:76:8F:E5
X509v3 Authority Key Identifier:
keyid:53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/kEISQqjfT7t5ibw1nXkQj1R2j-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.21.0.0/16
192.47.244.0-192.47.249.255
Signature Algorithm: sha256WithRSAEncryption
68:14:45:98:a4:8b:c8:a5:07:fe:a4:bd:86:66:78:95:97:19:
c6:d6:66:78:b9:5d:7d:d2:f9:db:02:bf:f3:c3:3f:1f:0c:f6:
60:ad:fa:5c:11:ad:d1:fe:45:ba:ec:46:d3:c8:1b:c4:fd:b0:
d0:81:9b:de:f9:6f:5c:60:af:88:64:3f:c0:8c:f8:25:92:a6:
1d:8a:c6:b5:07:04:b8:a1:6d:d6:88:3b:89:0c:1a:99:7a:8f:
47:9e:37:5a:a7:68:60:d8:54:fd:4d:e5:2e:5a:ad:54:98:24:
3a:71:4e:f7:8f:3c:17:85:03:7f:85:bf:b6:bb:49:51:45:88:
b4:22:7a:2e:9a:6a:de:63:41:22:a4:c6:f7:7a:c6:7f:6a:c6:
36:eb:73:91:ce:6b:0c:04:78:ff:ca:4e:95:9f:76:68:f9:f0:
11:bc:a5:87:89:87:d4:ba:70:1a:46:3d:7c:67:39:e6:c6:31:
fb:9e:0c:f9:07:07:d0:a9:dd:e1:15:16:df:9a:f7:88:e8:a1:
8f:48:1e:b8:b2:f4:ea:22:b6:1c:69:90:82:18:03:f5:4c:65:
80:e6:20:79:21:80:6d:30:3d:cb:ba:e7:6b:c9:86:1a:f7:0e:
8a:9a:58:e9:99:9e:23:43:08:ee:81:99:33:08:f7:c0:10:ba:
43:6c:35:21
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:04 2024 by rpki-client on console-fra.rpki-client.org