Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RvIctrnQwjS0vwwcF1n-qnj_z5U.roa
File: RvIctrnQwjS0vwwcF1n-qnj_z5U.roa (raw, json)
Hash identifier: X7ZZ4Ka7R5oFNc9K7lcGdR8UtuE030vLnCx89U3Qh6s=
Subject key identifier: 46:F2:1C:B6:B9:D0:C2:34:B4:BF:0C:1C:17:59:FE:AA:78:FF:CF:95
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A20C909B802EAE5882402ECC00BF0F60F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RvIctrnQwjS0vwwcF1n-qnj_z5U.roa
Signing time: Wed 23 Aug 2023 05:06:00 +0000
ROA not before: Wed 23 Aug 2023 05:06:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 94.156.8.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
94.156.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:20:c9:09:b8:02:ea:e5:88:24:02:ec:c0:0b:f0:f6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 23 05:06:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46f21cb6b9d0c234b4bf0c1c1759feaa78ffcf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:40:b3:fe:29:85:1f:09:b6:27:97:8c:38:
50:9c:ad:79:af:6b:79:b0:f8:44:bd:1a:d8:9f:b0:
43:97:3a:29:a8:e3:e1:d6:4c:99:38:f2:50:c4:7f:
1e:14:17:de:31:32:7d:de:cc:5d:0c:b8:37:bc:7d:
99:4e:aa:b8:22:63:3a:d3:0f:1a:11:4d:e4:68:a0:
eb:9a:f8:bd:5d:03:c1:35:9d:8b:ba:03:65:c6:a0:
6f:d1:45:d7:62:75:74:4b:5a:2a:eb:65:34:4c:15:
26:4a:34:79:e8:02:e9:64:e2:03:73:89:de:3a:5e:
b8:e1:a9:c2:8f:03:96:4a:a0:4d:e0:17:80:6a:69:
36:00:eb:f5:2d:cd:e1:b8:5c:b2:79:a5:9f:88:3b:
57:4c:20:02:d4:71:0c:66:f6:84:33:66:bf:3a:8d:
0c:07:85:44:6a:d2:89:1c:c5:76:cc:25:5d:b2:f6:
6c:fd:44:d1:c0:45:ab:32:7b:fa:a3:6f:02:a5:8a:
e2:38:6a:6c:f3:35:4b:d4:8c:7f:7b:a9:4c:1c:b0:
26:c9:e2:ba:35:7f:a5:be:27:c2:73:d7:eb:26:79:
ba:f9:56:51:f4:9b:61:1f:1f:22:d4:63:46:3b:93:
1e:9c:bc:b0:82:02:b0:63:c9:c4:f0:8d:db:76:ed:
25:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F2:1C:B6:B9:D0:C2:34:B4:BF:0C:1C:17:59:FE:AA:78:FF:CF:95
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RvIctrnQwjS0vwwcF1n-qnj_z5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.8.0/24
94.156.177.0/24
94.156.236.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:25:ac:1f:a0:16:8d:f4:84:c8:93:ab:2e:e7:73:18:b8:15:
e6:07:71:54:83:5a:e3:9a:f0:7b:95:32:4e:4a:04:d5:da:82:
62:c1:3f:b9:28:ab:25:6e:a5:2f:6c:36:d8:b9:7c:32:6c:15:
d2:12:28:36:b0:74:70:1c:82:56:ac:07:0b:46:39:64:77:27:
c8:1e:f5:3d:2b:09:da:8b:0e:b3:1e:7b:ac:4b:1c:f7:5d:21:
ed:1d:27:79:ac:19:59:d3:79:72:29:af:e0:5b:f3:42:70:5a:
86:57:9d:89:2b:f2:e3:e6:5f:46:1d:9c:78:62:35:e3:81:84:
1c:4a:94:ae:18:c2:84:77:f6:8c:3c:a7:bd:1b:fb:4f:b7:8c:
27:33:ec:12:51:92:49:d6:fe:23:da:08:61:06:85:7d:6a:01:
a0:48:01:cb:b3:0c:66:d3:ee:2c:7c:05:a1:84:db:9c:9b:54:
64:8d:cf:6f:31:a1:35:3f:c8:83:28:de:aa:a3:75:ac:ff:45:
60:c8:a2:8f:b2:fb:67:49:77:27:49:ff:07:e0:c0:96:28:ae:
ce:4a:ea:f3:4f:6c:5d:29:33:50:a0:2f:39:e2:9a:2d:22:14:
4c:09:4b:ca:d9:43:f7:81:c5:74:6c:6c:09:24:c7:f5:04:ac:
09:4a:45:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 06:54:35 2023 by rpki-client on console-fra.rpki-client.org