Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a5v9xy8fLxBr0hrlmuppQmifnII.roa
File: a5v9xy8fLxBr0hrlmuppQmifnII.roa (raw, json)
Hash identifier: rcj/gu435zpPstAveckofY5FBLG2kpWPPCl9I4zxQG0=
Subject key identifier: 6B:9B:FD:C7:2F:1F:2F:10:6B:D2:1A:E5:9A:EA:69:42:68:9F:9C:82
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189AAA5ECCB29AB6B48C5359F1C7C2673B7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a5v9xy8fLxBr0hrlmuppQmifnII.roa
Signing time: Mon 31 Jul 2023 06:32:28 +0000
ROA not before: Mon 31 Jul 2023 06:32:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 94.156.236.0/24 maxlen: 24
94.156.177.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:aa:a5:ec:cb:29:ab:6b:48:c5:35:9f:1c:7c:26:73:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 31 06:32:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b9bfdc72f1f2f106bd21ae59aea6942689f9c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:f2:e1:98:8a:ce:ce:95:ce:d8:9c:27:b7:
30:aa:e2:c4:7e:91:55:9f:52:ba:56:d0:de:17:0a:
7d:bc:53:39:43:c8:df:43:d9:d4:c3:ab:5b:63:b1:
56:36:23:90:44:f1:bf:a2:26:a4:f5:87:99:8e:62:
16:2f:09:49:80:4d:a1:9a:cf:f2:32:d6:2b:33:bb:
47:3a:bf:f0:ac:e6:c8:7d:2a:1f:c9:4b:e6:f4:13:
a8:7d:45:60:fa:ef:ed:5a:46:ac:e0:4e:57:f8:48:
57:be:a7:7e:c4:09:60:a9:a3:8b:19:84:b5:bc:1d:
b5:e0:a7:9d:c9:b7:b0:96:5c:f6:46:77:04:e7:36:
f0:6d:8b:f1:ce:28:20:8c:38:9d:ab:ad:8f:87:dc:
25:f1:54:ed:1b:29:10:2c:49:16:ff:f8:e8:d0:62:
0e:35:1f:d1:34:66:49:87:95:d2:04:b0:38:8f:22:
43:68:97:62:ff:dc:10:89:a5:d0:bf:f3:17:e8:bf:
76:bc:20:e6:1f:c8:bd:0f:67:26:ba:3c:e4:f0:20:
41:d3:11:65:8c:4b:a3:c2:3f:bc:f8:a0:f8:86:b9:
34:2f:9e:79:bf:98:09:d2:24:b8:fd:e0:4d:b6:5f:
fc:7b:fc:21:65:56:7a:c0:6e:d5:8e:90:76:c3:af:
3c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9B:FD:C7:2F:1F:2F:10:6B:D2:1A:E5:9A:EA:69:42:68:9F:9C:82
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a5v9xy8fLxBr0hrlmuppQmifnII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.177.0/24
94.156.236.0/24
193.37.41.0/24
Signature Algorithm: sha256WithRSAEncryption
23:18:39:c3:9f:60:d6:aa:7d:87:6d:a4:4b:c4:52:8d:17:82:
c4:01:82:06:7e:2c:4b:93:48:3e:7e:a6:4f:0b:1e:10:e4:7a:
cc:5f:f9:90:25:24:5f:55:8b:91:e8:d4:19:7d:2b:98:fa:ee:
21:94:1c:db:19:b9:b1:78:88:fe:45:8b:74:9e:b2:2d:ab:55:
4e:51:e0:17:93:86:bb:11:a6:73:7a:be:70:c5:e1:dd:c0:c9:
28:3e:db:34:0f:7a:56:3e:00:29:ff:0b:4e:db:e0:9b:a7:3e:
35:2b:37:0f:74:06:6a:e7:cb:67:b8:84:46:a3:de:02:b3:8e:
5c:2d:e3:0a:f4:b8:13:85:c0:fb:6e:7b:48:e1:c1:e3:6d:25:
80:24:6b:25:a1:8f:0c:3c:37:0a:53:c7:00:5d:7a:4d:d4:29:
0d:73:1a:e6:57:f7:f6:12:ba:d3:08:91:f4:40:81:47:9a:32:
a4:38:c0:07:e2:23:22:40:6a:a7:15:e4:16:ba:cd:61:86:43:
69:f1:36:20:f0:dd:17:cf:fc:6f:7c:8f:1f:85:bf:f2:c7:05:
96:62:7b:34:b5:17:be:b3:d5:cb:6d:07:38:88:89:af:47:3d:
5c:a9:2c:85:40:27:97:76:42:75:6f:6b:26:10:1d:44:93:10:
72:9f:11:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 12:22:12 2023 by rpki-client on console-ams.rpki-client.org