Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4bb401-3aeb-4ea9-9729-158ef855787d/1/I-IjcqYRzOGUnTpAd4PtsUynGxU.roa
File: I-IjcqYRzOGUnTpAd4PtsUynGxU.roa (raw, json)
Hash identifier: /BjSQScoLOgOvBzhG56xkXH6HPUdnqh2yYX3Qv9yP2E=
Subject key identifier: 23:E2:23:72:A6:11:CC:E1:94:9D:3A:40:77:83:ED:B1:4C:A7:1B:15
Certificate issuer: /CN=d515104d88f6600d232569e3a5f0e0a00a9ad082
Certificate serial: 018964C04EFCB047FFEDEB719C88CBB073DD
Authority key identifier: D5:15:10:4D:88:F6:60:0D:23:25:69:E3:A5:F0:E0:A0:0A:9A:D0:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RUQTYj2YA0jJWnjpfDgoAqa0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bb401-3aeb-4ea9-9729-158ef855787d/1/I-IjcqYRzOGUnTpAd4PtsUynGxU.roa
Signing time: Mon 17 Jul 2023 16:47:51 +0000
ROA not before: Mon 17 Jul 2023 16:47:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 94.143.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:4e:fc:b0:47:ff:ed:eb:71:9c:88:cb:b0:73:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515104d88f6600d232569e3a5f0e0a00a9ad082
Validity
Not Before: Jul 17 16:47:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23e22372a611cce1949d3a407783edb14ca71b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:1b:aa:ee:35:ce:83:0e:68:14:9e:3d:27:
f3:3a:9b:76:da:10:6c:ea:8e:f7:17:77:cb:40:8d:
6f:83:ef:cc:ea:59:a1:3d:fd:ed:a8:f1:84:f6:85:
fb:86:c2:7b:22:8f:ad:6f:64:7f:cc:aa:17:aa:08:
d8:b3:81:cc:b6:f6:09:a1:d4:6e:24:e8:96:69:93:
79:55:1c:52:1e:f8:1b:7c:1a:bb:82:78:08:8a:5e:
b3:34:d6:66:e0:76:66:8e:34:f9:18:64:db:e7:3f:
fb:78:5f:1a:2a:94:f3:3f:73:b6:7b:25:06:59:b6:
04:7f:67:9a:da:58:c1:ba:b9:1a:dc:7b:17:71:62:
e0:98:f7:47:5d:7c:b5:9e:e3:c2:32:5f:aa:e2:8d:
42:78:f3:db:c7:e5:0f:84:48:c9:ef:e8:2a:55:1f:
3d:05:eb:ff:18:96:43:59:63:eb:7d:01:7b:28:f9:
3b:fe:23:cf:94:ce:24:96:18:05:d6:7e:e2:f6:c5:
5c:bc:21:2d:b3:45:4c:56:b4:8f:71:a9:fc:04:c5:
56:a0:6f:f4:ad:e4:08:50:0b:0d:b8:dc:6f:ad:b2:
ce:7b:64:cc:e1:4c:9f:b9:92:e8:d1:a7:46:9d:99:
ff:0d:28:0f:39:bd:c3:7e:a3:52:bb:35:40:26:e0:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E2:23:72:A6:11:CC:E1:94:9D:3A:40:77:83:ED:B1:4C:A7:1B:15
X509v3 Authority Key Identifier:
keyid:D5:15:10:4D:88:F6:60:0D:23:25:69:E3:A5:F0:E0:A0:0A:9A:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RUQTYj2YA0jJWnjpfDgoAqa0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bb401-3aeb-4ea9-9729-158ef855787d/1/I-IjcqYRzOGUnTpAd4PtsUynGxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bb401-3aeb-4ea9-9729-158ef855787d/1/1RUQTYj2YA0jJWnjpfDgoAqa0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.230.0/24
Signature Algorithm: sha256WithRSAEncryption
40:df:01:f5:ef:6f:ab:0c:b5:67:99:93:49:94:ce:f7:7a:d0:
79:d8:34:4a:f8:37:4b:a2:ee:93:34:e9:4e:fa:3e:07:be:3a:
a1:1b:07:c0:fa:ca:27:eb:9d:c8:cd:1b:87:3f:c0:fa:40:38:
78:a2:7c:c0:b0:35:5a:7d:6a:d3:d6:0e:3f:85:b9:ed:96:90:
10:7a:47:06:e9:c7:68:b9:91:fb:1a:3d:68:c4:3f:29:90:f4:
99:ae:14:4c:e8:3a:db:6c:6a:8f:e5:c3:be:7f:a0:79:1f:d1:
bc:1e:7a:a1:2a:a6:ff:69:5b:a9:86:7c:b1:44:99:65:0c:49:
17:51:6b:da:3f:e6:16:18:76:4a:54:05:86:67:32:35:d6:c1:
49:0e:bc:ff:c8:82:1a:c5:0f:1d:15:45:b2:53:13:e1:46:b9:
0e:2b:95:14:95:0e:68:4f:bd:14:35:39:18:a4:e1:8c:a2:f0:
ed:00:80:c4:34:52:4d:17:ea:af:2f:6f:b6:84:09:91:cf:cc:
27:be:ec:19:6c:c1:b1:dc:2f:fc:d1:67:99:83:48:21:a3:ad:
65:44:51:4e:36:71:78:a2:1a:81:d5:ad:d7:c5:4b:43:2d:a9:
40:af:5e:fd:91:34:89:53:3f:37:dd:8d:78:24:e7:53:4d:11:
64:b4:6f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:17 2024 by rpki-client on console-fra.rpki-client.org