Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/HjWgXfVLwgey2MeiV-bVe5exfUo.roa
File: HjWgXfVLwgey2MeiV-bVe5exfUo.roa (raw, json)
Hash identifier: qs6/DHIEPsBBHNlDiRbuHzBLoyOPOMfozCNDa+FS6Hk=
Subject key identifier: 1E:35:A0:5D:F5:4B:C2:07:B2:D8:C7:A2:57:E6:D5:7B:97:B1:7D:4A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187364D1ADBC15B97033D4BE9896025D3CF
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/HjWgXfVLwgey2MeiV-bVe5exfUo.roa
Signing time: Fri 31 Mar 2023 06:13:55 +0000
ROA not before: Fri 31 Mar 2023 06:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 171.22.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:4d:1a:db:c1:5b:97:03:3d:4b:e9:89:60:25:d3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 31 06:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e35a05df54bc207b2d8c7a257e6d57b97b17d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:fa:c5:63:2e:c9:57:54:78:d5:f7:9e:11:
97:28:23:e8:57:39:e1:67:8b:9a:7e:ce:b2:e0:b2:
f2:22:01:f7:81:c8:43:d5:74:ae:77:de:2c:87:e0:
a5:52:a9:00:a3:f0:c5:c6:7f:de:c0:1c:5a:91:a1:
25:7c:a3:5b:af:aa:18:62:c5:64:41:33:cc:71:84:
be:1d:62:22:3b:a9:e2:c8:3c:ed:bb:9c:05:9e:f8:
8e:31:1d:cf:e5:3f:3a:fb:a8:d3:13:e0:36:10:2a:
db:f4:4c:28:74:4e:0b:62:fb:7a:00:f0:9b:5f:cc:
f1:d4:6f:f2:88:e6:3b:26:b1:d8:29:8e:cf:bd:6e:
3c:6c:49:86:d0:c3:4c:9d:9b:a1:5b:8d:78:2a:12:
04:d0:42:eb:12:7d:46:e6:7d:8a:68:c0:90:04:37:
cc:9d:ca:42:d4:c2:bb:4a:7a:e1:cf:54:13:c4:6c:
91:47:eb:98:f1:18:4e:16:ed:04:a5:54:bd:d5:9b:
b2:f0:f7:75:75:fe:a3:bb:d5:27:35:50:06:04:6c:
0b:dd:ad:37:6f:b4:43:a6:1e:a8:fb:84:f0:57:70:
87:57:66:3c:d0:53:84:27:f7:7e:ab:4b:d6:c1:a8:
64:65:f2:a6:ec:96:fb:4b:87:92:dd:3f:c4:98:41:
32:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:35:A0:5D:F5:4B:C2:07:B2:D8:C7:A2:57:E6:D5:7B:97:B1:7D:4A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/HjWgXfVLwgey2MeiV-bVe5exfUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.101.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:0b:01:4d:85:1e:6d:29:20:5d:4e:ef:60:2b:a3:27:bf:28:
56:53:01:65:eb:cb:ed:71:02:7b:9b:97:99:cc:a2:5a:e6:04:
b5:14:a3:a5:0c:f2:a1:48:0c:0f:92:fa:2b:b8:60:5c:98:1f:
38:d8:7e:09:e5:0b:c9:61:77:b2:a7:30:7e:67:21:f6:f2:03:
fc:43:43:c6:89:09:8f:ef:d4:17:97:48:28:d5:16:73:5b:2d:
b5:70:4d:6a:a3:28:f7:a2:25:0a:d6:29:0d:75:3c:10:f5:fb:
5b:f9:6b:33:82:56:13:af:62:00:09:45:9f:af:a1:c7:bf:0c:
d5:1f:36:f8:e4:69:f9:04:9f:0f:98:3e:21:b3:90:43:b3:bc:
03:2c:ef:2f:7e:9a:fb:97:eb:cc:19:70:55:0f:cb:10:32:e3:
74:61:b6:57:01:62:93:f5:be:d6:6e:e6:21:75:72:ad:9a:ba:
aa:d1:0a:d3:12:cb:b6:99:a0:e7:7b:be:5a:75:33:9f:95:50:
80:ff:66:98:16:18:90:01:f3:f5:f2:55:e3:59:db:24:fa:d3:
0f:a1:ac:6e:be:51:ef:77:71:cf:5d:be:39:3c:a8:f6:57:c7:
d7:16:f6:e3:e4:74:4b:b0:ce:86:c0:55:3c:cb:9f:b2:57:fe:
02:80:0d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org