Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/1jjJM8AuGlk2Q9LVVOgUsfd5q4c.roa
File: 1jjJM8AuGlk2Q9LVVOgUsfd5q4c.roa (raw, json)
Hash identifier: N/KvetOZJA6a41a3o2nF0yxP2JGhQEZ5Aodq4n6x15A=
Subject key identifier: D6:38:C9:33:C0:2E:1A:59:36:43:D2:D5:54:E8:14:B1:F7:79:AB:87
Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial: 01857246B1D50DFAE0AC6B22C64024CE6117
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/1jjJM8AuGlk2Q9LVVOgUsfd5q4c.roa
Signing time: Mon 02 Jan 2023 11:38:33 +0000
ROA not before: Mon 02 Jan 2023 11:38:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211247
IP address blocks: 193.17.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:b1:d5:0d:fa:e0:ac:6b:22:c6:40:24:ce:61:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Validity
Not Before: Jan 2 11:38:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d638c933c02e1a593643d2d554e814b1f779ab87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:2f:9d:1e:8b:cf:ce:e5:17:8c:31:1d:8d:
38:db:21:2e:9b:2e:cc:3e:80:c4:94:7f:af:61:e4:
83:73:07:08:2d:cf:b1:3b:84:41:7e:db:e5:6b:a2:
c0:88:17:39:94:f7:fd:2e:d5:4f:9a:43:e6:78:23:
00:4c:a1:98:c2:42:6b:95:c3:34:62:08:e6:0b:e0:
e8:62:84:2d:6a:d5:2e:d3:ea:80:69:88:82:26:ba:
ee:19:1d:5c:07:98:26:7b:04:78:4d:e4:53:06:4e:
ac:6e:e0:ed:aa:2a:31:a5:76:21:aa:b4:92:cd:4f:
6d:e7:e7:64:e2:38:e7:d2:5a:c1:2d:30:eb:4f:b0:
f9:40:23:c6:c1:60:57:8a:c0:74:63:01:86:b5:b9:
e2:b5:0f:8e:c6:67:f8:7a:a6:4a:22:e0:a7:f8:7c:
02:3a:b3:df:60:a5:49:fa:9d:6d:d7:5a:6f:ab:e0:
0b:93:66:ad:30:b0:5e:1f:d6:4d:ac:10:da:87:fd:
18:e0:bf:13:99:7d:7f:5f:79:78:18:c3:c3:5b:62:
68:92:26:f3:b5:c5:88:b1:28:c9:8d:c0:40:97:36:
f8:e9:57:10:2a:a2:b7:a8:73:c5:19:ea:b5:eb:c3:
ac:85:9f:8f:8c:ce:9a:8f:4e:cc:b6:88:84:73:18:
48:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:38:C9:33:C0:2E:1A:59:36:43:D2:D5:54:E8:14:B1:F7:79:AB:87
X509v3 Authority Key Identifier:
keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/1jjJM8AuGlk2Q9LVVOgUsfd5q4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.213.0/24
Signature Algorithm: sha256WithRSAEncryption
47:4f:17:0d:3b:d6:a4:75:98:11:af:4e:a0:e2:8a:1b:f0:b8:
16:bb:15:b6:af:73:87:60:63:a0:f6:90:df:70:f0:91:8f:6c:
62:4a:81:d5:be:ac:64:29:4c:cf:a9:6f:dc:5f:91:2c:32:d5:
12:35:29:9c:34:fd:8e:6d:a0:ff:c8:c1:80:c0:a9:eb:6d:f1:
df:18:73:25:95:c6:be:8f:1e:b1:ae:bf:09:cf:b9:42:f2:68:
8c:19:1d:a2:b3:93:5e:81:f4:21:db:68:b3:9d:46:86:1f:11:
b3:1c:76:33:a7:2d:38:9f:9a:9c:64:6e:60:85:e7:9a:ce:7c:
8a:18:02:16:76:10:5e:4d:ae:ad:a1:1e:26:42:41:16:58:80:
e1:d3:e9:3e:bc:32:f1:c8:60:03:55:73:da:2b:fe:4d:e2:a6:
09:d5:9d:8c:3a:68:d6:f2:9c:24:5b:17:32:a3:da:86:fe:cf:
b2:dd:79:aa:53:8c:5a:01:d6:0f:60:ff:7c:15:64:7e:42:f0:
dd:e7:4e:ac:23:b1:54:e9:50:c9:3a:f5:b4:84:7a:03:e5:f8:
ba:8f:f8:93:89:eb:3e:bc:c4:d2:0f:49:2b:f9:ed:57:4c:11:
01:da:7a:0f:09:c6:18:99:ca:bf:94:f6:65:69:3d:15:de:a4:
80:18:c7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:10 2024 by rpki-client on console-ams.rpki-client.org