Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IhZiu-_CG7YyYg-JV-H2anLiAg4.roa
File: IhZiu-_CG7YyYg-JV-H2anLiAg4.roa (raw, json)
Hash identifier: dd4dgzpgmJbZ+mmKCLudBkdTJP31nAg1D/ivER8Qn30=
Subject key identifier: 22:16:62:BB:EF:C2:1B:B6:32:62:0F:89:57:E1:F6:6A:72:E2:02:0E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01877050617512CD84EB6BF685C54C8EE849
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IhZiu-_CG7YyYg-JV-H2anLiAg4.roa
Signing time: Tue 11 Apr 2023 12:35:28 +0000
ROA not before: Tue 11 Apr 2023 12:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 212.192.28.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:50:61:75:12:cd:84:eb:6b:f6:85:c5:4c:8e:e8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 11 12:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=221662bbefc21bb632620f8957e1f66a72e2020e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:16:73:c7:1c:f6:41:a6:da:f6:14:49:ad:
4f:28:1f:4a:ef:a3:87:49:b4:36:85:8f:6a:11:3f:
f3:fc:5e:1f:7f:2e:bd:8e:ed:fb:44:25:90:4b:68:
f6:ce:df:55:82:1a:d6:5a:11:e3:0a:4e:bf:11:79:
e4:76:3b:5a:49:dd:0c:41:e4:1d:4d:8b:56:75:0e:
38:28:84:6e:01:42:87:83:66:0b:be:7a:02:09:87:
4d:98:43:ef:7d:f2:a2:86:f2:95:fe:c9:43:74:b4:
fc:90:d6:32:4e:5c:8f:1e:79:b2:bd:f9:c2:6f:39:
d1:17:c6:09:1a:be:03:99:00:c7:cb:b4:0a:f7:b5:
20:d4:fc:72:b9:2c:3a:fd:63:61:27:e1:2b:08:12:
35:30:00:8d:6e:ee:91:1a:bc:e4:88:7d:98:cf:57:
25:1c:87:d8:34:e5:f9:3a:d7:14:67:b9:df:05:49:
37:be:27:fc:73:5b:99:e0:2a:6b:cf:ab:b7:a8:79:
37:e2:c8:c6:ad:f0:67:b3:68:1b:d2:0e:eb:5b:cf:
dc:2a:a4:af:18:13:16:87:0a:02:e3:da:74:d4:b0:
78:d8:79:03:f1:bc:0a:2c:d4:02:e9:8e:a3:55:13:
9d:00:cd:4a:0f:4c:61:62:5a:54:4f:1a:47:02:eb:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:16:62:BB:EF:C2:1B:B6:32:62:0F:89:57:E1:F6:6A:72:E2:02:0E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IhZiu-_CG7YyYg-JV-H2anLiAg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.203.0/24
212.192.28.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:41:b1:a3:e2:bd:54:20:7d:06:44:e8:b0:05:cb:6b:15:8a:
73:80:4e:f4:85:b0:3a:b2:1c:2e:9f:33:75:13:22:6e:65:18:
33:dc:0b:af:ee:56:39:1b:5f:c9:bf:35:f4:e0:26:be:13:18:
f4:81:97:6b:be:0b:4a:59:18:1e:ed:c0:44:35:c6:4e:58:b6:
99:f8:b2:a8:48:11:50:71:43:36:db:fa:54:5c:0f:ec:ae:d4:
b1:36:03:85:b2:77:de:f3:0c:c8:0b:eb:31:1b:ca:d5:3e:49:
bf:f2:95:10:cd:bc:b5:63:bb:5b:78:31:fe:c4:0d:52:bc:cb:
cc:79:31:b1:96:f9:97:69:e8:dc:a1:0e:67:55:93:65:a6:95:
27:16:bd:ed:e4:70:3b:07:3e:ae:52:11:e1:04:32:0f:c8:08:
37:72:ec:e8:2f:69:a7:59:dd:7e:6e:b0:be:85:25:00:69:ba:
23:1f:7f:7d:76:8f:54:bd:98:57:0e:74:a6:1b:3e:fa:6f:cd:
47:27:16:78:77:c2:c1:7d:da:21:2f:4f:f3:6e:62:14:24:f6:
e8:bd:a2:63:c0:7d:bd:65:c9:10:a2:df:63:ad:e3:e7:bd:22:
0c:b7:4d:9f:d8:18:00:74:4f:de:e6:09:bb:95:bf:ab:71:e9:
2d:ea:59:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:55 2023 by rpki-client on console-ams.rpki-client.org