Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ei8DvTpXhqGWp56dQi1ly1ndy3E.roa
File: Ei8DvTpXhqGWp56dQi1ly1ndy3E.roa (raw, json)
Hash identifier: npaTQ+XL58eZzUU7696pT0FBt4DULx9X1++3UfUZLUQ=
Subject key identifier: 12:2F:03:BD:3A:57:86:A1:96:A7:9E:9D:42:2D:65:CB:59:DD:CB:71
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018770BA953E8353BA9EBB57EA2E1C8FE6C7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ei8DvTpXhqGWp56dQi1ly1ndy3E.roa
Signing time: Tue 11 Apr 2023 14:31:28 +0000
ROA not before: Tue 11 Apr 2023 14:31:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 37.221.120.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:ba:95:3e:83:53:ba:9e:bb:57:ea:2e:1c:8f:e6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 11 14:31:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=122f03bd3a5786a196a79e9d422d65cb59ddcb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:f3:ed:b6:24:d0:eb:20:13:a0:7f:b3:32:
97:2f:c0:7c:95:c9:52:1c:33:82:e6:ee:51:a9:12:
b1:34:e3:6f:64:52:d5:69:b7:ef:c7:d0:e8:24:f6:
be:7d:b0:2e:ab:8c:b3:bf:37:53:f4:f2:1c:a3:e6:
5a:a2:d5:7a:ab:29:84:3c:e6:19:cb:93:b6:3f:b4:
d9:94:a8:78:99:9c:3f:45:55:fa:07:3c:55:52:9e:
00:88:bc:23:5c:7f:58:dd:26:4d:a9:61:59:96:62:
e8:17:d3:67:3d:94:29:96:55:49:93:a1:17:f9:8b:
90:41:fb:c9:97:d3:a9:23:fe:3d:60:57:38:9d:15:
50:42:fb:fe:0a:aa:6a:80:ca:ca:5c:94:0f:ce:74:
b4:8f:93:c4:38:85:f6:d8:a9:58:2c:db:4f:ea:7e:
5f:e8:e9:ab:c6:b2:0f:fa:6b:aa:f6:49:af:a1:f4:
70:c3:ca:f5:18:2d:b9:4d:86:1e:5b:d5:b4:a7:3e:
18:87:eb:db:04:2c:86:8e:67:ee:44:3d:ae:39:9a:
14:32:40:a5:c9:bf:e2:18:81:c3:fd:1b:bd:c6:8b:
29:4d:91:30:d2:8f:ac:74:b9:db:ad:11:d6:82:fe:
3d:52:aa:40:b9:72:90:9c:5d:51:96:54:c3:1c:9e:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2F:03:BD:3A:57:86:A1:96:A7:9E:9D:42:2D:65:CB:59:DD:CB:71
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ei8DvTpXhqGWp56dQi1ly1ndy3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:cb:08:87:08:34:f6:7b:dc:f9:f2:02:b7:38:8a:ee:0f:12:
5a:d6:a1:78:7d:b2:09:d5:f8:2d:ff:59:99:24:4a:0d:29:84:
59:0b:f1:e4:44:51:65:27:71:fc:52:b3:fb:43:40:bc:66:d6:
71:93:c6:8a:be:3b:66:38:d0:5a:64:27:5f:8f:40:1a:64:ae:
1d:6a:70:46:fa:e2:06:6b:f0:85:01:90:a2:b7:01:bb:05:fb:
37:96:b4:2a:50:14:a8:59:63:e0:7f:13:d1:3d:d6:01:d3:81:
75:a1:47:87:5a:ca:7c:45:9c:fe:16:37:60:1f:d7:57:bf:53:
5f:d2:76:16:7a:41:7c:91:47:44:cc:3b:f3:62:cd:2e:47:40:
76:4c:fc:65:5a:0e:13:95:74:de:82:f1:31:f9:bd:74:2f:cd:
2c:d2:ae:4e:f3:e3:10:cf:85:34:8f:39:88:e9:6b:e2:5a:c7:
a4:92:58:08:d5:f7:17:bf:09:a7:29:ef:f1:cc:36:80:e6:7b:
20:22:65:e3:2e:1b:14:97:8f:4f:01:21:13:e3:9b:0e:fb:3a:
f8:4f:76:4d:49:97:03:c0:bc:16:f3:aa:c2:26:1e:c2:e4:a6:
65:ba:cd:2a:bf:78:64:1c:4e:76:f7:86:a5:e8:20:b8:b5:91:
14:46:5c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 06:22:26 2023 by rpki-client on console-fra.rpki-client.org