Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/AXpawfW7P9PEpo-kpoShZrqJooA.roa
File: AXpawfW7P9PEpo-kpoShZrqJooA.roa (raw, json)
Hash identifier: 8aMJEvzDAmZfgM7kEVv23gW5gs8xxSiEl7sOMYU0eP4=
Subject key identifier: 01:7A:5A:C1:F5:BB:3F:D3:C4:A6:8F:A4:A6:84:A1:66:BA:89:A2:80
Certificate issuer: /CN=90c57b47516a90e0cfe072157937a733bd503be0
Certificate serial: 018CABEBFB183B2F5D0E744ED019185EC898
Authority key identifier: 90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/AXpawfW7P9PEpo-kpoShZrqJooA.roa
Signing time: Wed 27 Dec 2023 15:36:58 +0000
ROA not before: Wed 27 Dec 2023 15:36:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212307
IP address blocks: 147.234.104.0/24 maxlen: 24
147.234.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ab:eb:fb:18:3b:2f:5d:0e:74:4e:d0:19:18:5e:c8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c57b47516a90e0cfe072157937a733bd503be0
Validity
Not Before: Dec 27 15:36:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=017a5ac1f5bb3fd3c4a68fa4a684a166ba89a280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:d6:3d:43:34:fe:87:c1:b4:a6:84:28:06:
f4:a1:ab:2f:d1:7d:df:e3:cb:ce:ac:c5:81:84:44:
00:b4:b7:0c:70:db:c6:76:6d:82:9a:b6:97:94:91:
a4:01:0c:76:69:6c:25:f8:f7:8d:5a:91:fb:11:22:
8e:25:22:3a:07:91:b8:2b:d1:f1:93:1e:82:74:5d:
e7:8c:75:48:ba:3a:11:ae:c7:1c:d5:62:10:d6:53:
a8:61:83:15:d8:4b:22:37:fc:8a:2c:47:cd:7f:6c:
05:f2:0d:c0:d1:fc:b1:35:71:76:98:c5:bd:78:f8:
e3:a3:7e:94:b9:5e:e7:d5:9a:0f:e1:6f:50:5a:bb:
27:64:ad:da:52:eb:89:5a:4a:4d:2c:2f:ce:26:8f:
e2:6b:5a:9c:77:b0:48:8c:22:38:cf:bf:bd:91:e1:
43:18:cf:ae:a9:17:20:88:7e:ef:ed:ad:81:c1:81:
d8:b1:f5:0d:9b:41:2f:9a:99:00:4c:73:a0:8a:42:
4d:3c:66:bd:76:b0:98:ad:bd:d4:45:27:ec:a6:12:
ae:3c:4e:ee:0e:c2:58:1d:e5:53:4f:98:18:e5:65:
0f:f6:9b:6a:d9:e3:50:f2:13:88:89:3a:98:ac:a6:
62:30:c6:a2:8e:26:f3:fc:00:93:57:d6:4b:f1:bb:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7A:5A:C1:F5:BB:3F:D3:C4:A6:8F:A4:A6:84:A1:66:BA:89:A2:80
X509v3 Authority Key Identifier:
keyid:90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/AXpawfW7P9PEpo-kpoShZrqJooA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.104.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:10:9d:17:02:ac:22:9e:c4:7f:27:c4:06:92:d6:a0:1a:0a:
23:36:0f:77:f1:52:03:6e:13:17:65:9c:36:b1:83:c0:6d:69:
27:d4:c9:66:a7:05:34:62:73:cc:5e:16:7e:3f:97:78:d5:3a:
fa:74:4f:e7:c9:41:ad:ed:39:c5:35:ff:c1:2c:1a:00:a3:84:
0f:e4:43:80:3c:52:18:b4:44:a6:63:6a:d9:b1:7b:bc:32:4b:
67:cf:97:4b:c3:40:13:c6:2e:e6:c8:ad:00:cf:49:0c:20:6b:
6b:0e:c4:78:a1:ca:cb:ed:fa:1f:cc:21:86:ff:94:dc:84:39:
31:19:c5:6f:a3:8d:d8:61:63:90:42:91:16:fb:eb:e6:6b:6d:
1d:ba:35:db:fa:a3:03:c5:42:12:23:c5:05:03:10:25:43:0e:
05:05:6a:31:48:3a:96:5d:4f:66:e8:f1:0c:c6:72:27:42:02:
34:78:cf:e2:ad:6b:df:73:ab:22:68:c5:bf:76:a1:27:f8:ed:
79:59:cd:dc:f5:58:65:ab:6c:75:f2:47:b5:6e:b8:68:a8:23:
86:e2:99:5b:ab:98:09:ac:13:62:28:3f:02:4b:fc:30:cc:c7:
ac:bd:9d:44:1e:e7:b9:c9:bb:fd:25:3d:49:ae:47:0a:08:0a:
40:9f:28:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:32 2024 by rpki-client on console.sobornost.net