Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IvtG6ApCItrUhrVz1CLgRSZnCTI.roa
File: IvtG6ApCItrUhrVz1CLgRSZnCTI.roa (raw, json)
Hash identifier: PgsKMLtUM4Lu5XPehj6RtqCKqSoN6YyVOpsiLL5g7w4=
Subject key identifier: 22:FB:46:E8:0A:42:22:DA:D4:86:B5:73:D4:22:E0:45:26:67:09:32
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187011B1F0889F57165098ADBDAFFDB69CF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IvtG6ApCItrUhrVz1CLgRSZnCTI.roa
Signing time: Mon 20 Mar 2023 22:19:27 +0000
ROA not before: Mon 20 Mar 2023 22:19:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60707
IP address blocks: 83.219.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:01:1b:1f:08:89:f5:71:65:09:8a:db:da:ff:db:69:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 20 22:19:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22fb46e80a4222dad486b573d422e04526670932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5b:91:98:9a:87:05:4c:4a:8c:96:6c:96:76:
60:87:0b:9d:52:ff:db:bd:bd:cb:e6:cf:44:96:14:
0b:ee:90:3b:09:9a:cb:32:29:6b:95:cb:bc:1a:b4:
15:e3:dd:f4:22:2b:ea:97:f2:6c:d2:55:5b:44:42:
32:4b:19:9a:6f:66:9c:45:df:6a:6f:b1:11:b6:cb:
75:0a:c0:5f:91:91:7b:07:14:95:4f:7a:cc:d9:2e:
1a:15:9a:e4:a3:86:b6:b0:8f:df:30:35:c0:df:dd:
0e:e0:4a:0e:1f:32:41:63:6b:41:bc:81:f1:67:27:
ea:be:86:f3:5f:38:ea:41:04:a9:cc:bc:d9:e1:66:
12:94:81:cf:f8:07:1f:e2:7b:46:63:5a:e4:17:06:
a5:67:b1:00:13:82:3d:1c:89:89:00:68:d7:05:a9:
ba:b4:58:2d:e7:03:15:27:85:4c:ef:94:21:6a:60:
1a:e7:2f:a4:c8:bf:1b:9c:02:1b:af:0a:eb:47:da:
6b:b4:21:3f:18:a7:21:80:2b:99:74:4f:e7:3e:79:
4e:d6:45:7c:c6:05:a5:3e:b5:5b:8d:ef:e4:67:10:
78:56:bf:f7:fc:40:77:ff:2e:2d:84:50:cf:97:73:
e8:90:60:b3:0a:cc:c5:f5:66:5a:81:dc:94:39:fa:
f1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FB:46:E8:0A:42:22:DA:D4:86:B5:73:D4:22:E0:45:26:67:09:32
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IvtG6ApCItrUhrVz1CLgRSZnCTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.99.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d4:83:5a:fa:4f:a9:e4:16:c1:f8:85:71:ce:a9:83:66:a6:
d3:a2:34:0f:e9:ef:51:14:b3:d7:0e:16:b7:6d:86:b7:6b:34:
b6:ac:77:a6:33:b7:a5:1f:1a:8f:77:fd:d0:91:bd:e7:1f:17:
e0:fc:1c:d8:6b:2c:b8:11:a0:da:92:c2:f7:a4:30:c4:ef:4b:
70:83:00:8f:a0:c1:26:2e:ca:9d:ad:bf:3c:a2:2b:92:46:51:
65:46:62:51:0f:ef:c9:b3:87:62:b6:1b:0d:09:6b:39:33:8b:
94:b8:d4:9b:8d:90:48:4c:51:d6:e9:9e:09:4d:d7:23:77:3e:
42:b8:40:5b:dc:f2:f1:ad:31:64:6b:49:31:8f:2f:ff:14:a7:
6c:91:e0:33:16:59:da:c0:32:77:10:a5:0d:27:26:d6:45:fe:
b5:41:f6:60:dc:7f:82:59:42:9c:35:85:09:eb:d6:70:92:e6:
77:29:e1:71:7c:ad:e8:b5:d6:91:a3:ae:38:d2:d0:3c:f9:a3:
19:22:d4:a2:db:46:01:0f:a4:e1:fa:e2:ce:85:f2:e9:5c:cd:
10:c9:de:85:2f:81:c0:46:f7:53:5a:f2:05:4c:8e:1a:6d:6a:
65:af:ff:41:5c:4f:18:48:07:ee:90:b8:02:68:55:f1:f5:d5:
d3:e2:55:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org