Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/AMqsVo9Oj-TCkTmLuZn5lJSpIO4.roa
File: AMqsVo9Oj-TCkTmLuZn5lJSpIO4.roa (raw, json)
Hash identifier: MYGj/8eVq4Umo5RsNgP7vuEe5hJJKp5nXHpafdsRCmg=
Subject key identifier: 00:CA:AC:56:8F:4E:8F:E4:C2:91:39:8B:B9:99:F9:94:94:A9:20:EE
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 018A5F9043F58840B7C4B2AF2AB6E5C7754C
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/AMqsVo9Oj-TCkTmLuZn5lJSpIO4.roa
Signing time: Mon 04 Sep 2023 09:40:04 +0000
ROA not before: Mon 04 Sep 2023 09:40:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2200
IP address blocks: 152.77.0.0/16 maxlen: 16
129.88.0.0/16 maxlen: 16
147.171.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:90:43:f5:88:40:b7:c4:b2:af:2a:b6:e5:c7:75:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: Sep 4 09:40:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00caac568f4e8fe4c291398bb999f99494a920ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:e1:27:cc:44:87:aa:84:35:bf:44:f8:e9:
ca:1a:bd:2b:d3:41:d1:b4:ac:b9:54:f3:dd:6b:41:
04:65:4d:e4:e1:c4:25:08:58:00:97:48:91:79:a7:
c2:17:df:86:28:ea:5f:5f:a7:fe:c2:ef:12:46:2e:
f8:76:5a:05:dc:28:ec:ba:52:72:51:5b:49:80:bf:
42:24:44:93:4c:5c:ed:41:45:19:10:3f:7b:17:0f:
6a:c8:92:55:7c:2e:7b:f9:6b:4e:3e:20:4f:f9:77:
98:7a:69:39:57:7d:30:f7:43:45:25:95:63:e9:93:
91:f2:73:28:55:40:2a:dc:df:fb:0c:0a:6f:6a:83:
20:a4:7c:97:64:34:84:81:78:8c:21:9a:01:1d:4b:
21:9d:85:ac:87:1f:30:6d:a9:b4:f8:8a:6a:d8:19:
e7:74:c9:66:3a:b3:dd:22:43:dc:97:4e:c1:e5:a3:
99:cc:53:7d:af:f6:df:58:c6:87:c2:da:d4:98:11:
c2:c1:c0:3b:74:b9:b5:72:78:e3:51:c2:43:47:0e:
96:0c:4c:dd:5f:6e:24:e7:cd:e2:3d:b3:08:45:74:
40:56:e5:02:34:69:65:cd:2f:5e:b7:42:4e:c7:bf:
4e:9d:41:eb:17:20:75:ec:81:40:c4:58:d0:4a:86:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CA:AC:56:8F:4E:8F:E4:C2:91:39:8B:B9:99:F9:94:94:A9:20:EE
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/AMqsVo9Oj-TCkTmLuZn5lJSpIO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.88.0.0/16
147.171.0.0/16
152.77.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:29:98:d1:62:cb:d4:e4:01:4c:35:b9:b0:ab:50:29:03:60:
e4:d7:3b:8a:f6:6c:d5:c8:65:c7:29:86:ac:a3:66:2d:f4:5b:
5d:e4:c8:0d:d7:36:7c:61:9b:c1:94:81:37:f2:62:58:ad:f6:
cc:bd:eb:de:43:97:4e:47:db:72:a0:75:1e:80:d5:2d:8c:aa:
bc:8a:a7:45:ef:05:62:18:6b:86:d5:8f:99:da:eb:2c:0a:b1:
c9:a6:d1:a3:b9:65:29:8c:bf:35:82:1f:a1:b5:d2:6a:30:f5:
fd:19:2b:74:74:57:17:99:93:d6:80:a7:11:7f:32:9a:12:a4:
6b:05:c2:fc:e6:a3:85:35:ff:1b:d6:50:56:ee:2f:f9:43:0b:
64:5a:bb:3a:12:f9:c5:e4:35:8b:4f:17:e5:b4:50:24:f2:a3:
aa:50:bc:3f:4a:2b:15:68:21:54:9e:89:e7:16:5b:fb:e7:e4:
40:55:09:f1:d3:63:cc:86:80:a2:06:93:c5:77:29:ab:ee:5b:
7b:8f:ea:49:80:1b:80:02:c6:9c:57:2a:6e:34:0b:7a:08:a9:
e2:88:d1:5f:12:ea:a6:68:c1:97:9f:e0:2e:66:5e:84:67:5d:
ef:d0:7d:85:55:de:96:97:38:89:f3:92:63:8f:df:61:27:9c:
00:cb:5e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:48 2024 by rpki-client on console-ams.rpki-client.org