Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eI7esvjdf5hw1zR45UC5uT5cjA0.roa
File: eI7esvjdf5hw1zR45UC5uT5cjA0.roa (raw, json)
Hash identifier: SbKGP6ZmqhmHXEGZUPmxPX9/04FLYXwLVEIG5OTplis=
Subject key identifier: 78:8E:DE:B2:F8:DD:7F:98:70:D7:34:78:E5:40:B9:B9:3E:5C:8C:0D
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01866FC6B00FFA0BF8B2BD69203C620EF7C3
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eI7esvjdf5hw1zR45UC5uT5cjA0.roa
Signing time: Mon 20 Feb 2023 17:02:17 +0000
ROA not before: Mon 20 Feb 2023 17:02:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21700
IP address blocks: 213.176.72.0/22 maxlen: 24
213.176.92.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:c6:b0:0f:fa:0b:f8:b2:bd:69:20:3c:62:0e:f7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 20 17:02:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=788edeb2f8dd7f9870d73478e540b9b93e5c8c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:2b:a0:e0:9a:43:68:d6:86:9e:1c:ce:8e:
5f:fd:2d:93:8c:da:d1:f4:8e:6c:8d:db:59:1c:84:
b0:e3:76:11:c2:f6:3c:75:7a:29:db:0e:0f:31:fc:
c4:fd:0f:f5:f1:7d:08:1b:05:47:45:ec:6b:e4:2f:
28:80:29:43:18:d3:24:09:d1:a4:3c:db:d0:04:e8:
cc:3f:01:d1:12:8e:f0:be:91:61:12:8c:81:68:fe:
71:6a:ea:5b:06:f7:6d:ea:d2:06:a3:d1:d0:90:0f:
d2:6c:a9:fe:28:68:81:ec:fb:e4:ef:57:d2:54:22:
a6:80:9e:90:1e:31:1e:aa:24:66:40:db:af:ea:32:
f1:1a:2c:d3:8d:c4:c2:d2:32:49:09:ba:bf:5b:59:
2e:0e:ba:5a:aa:db:1e:87:69:f8:8b:d5:96:59:09:
26:d6:6c:63:df:9f:0c:2e:06:c4:78:2a:61:8c:6d:
97:ee:98:5b:7a:fe:2f:5d:b5:86:56:37:cd:db:20:
ea:45:a9:fa:cb:64:02:c7:43:42:1b:06:b5:07:15:
67:32:4d:f7:27:21:25:e5:ea:fa:f8:da:1a:ec:76:
62:7d:76:78:a4:c3:5a:8a:d3:5b:78:5c:a2:94:7d:
a0:e6:73:63:9c:89:59:68:38:2b:b3:da:d4:c5:26:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8E:DE:B2:F8:DD:7F:98:70:D7:34:78:E5:40:B9:B9:3E:5C:8C:0D
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eI7esvjdf5hw1zR45UC5uT5cjA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.72.0/22
213.176.92.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:74:b5:09:4c:14:21:d0:5d:a3:3d:8e:59:d3:29:5e:a8:61:
b1:4f:d7:e6:19:e5:3e:3f:4e:7d:9c:bb:bb:b1:98:59:3d:cc:
25:38:e8:0f:15:d8:dc:1d:96:5e:b0:b4:1a:05:d7:cf:d3:9a:
07:a5:32:66:fd:07:8b:81:42:5e:ec:94:a4:30:7d:b9:16:c0:
90:9c:82:ec:62:5c:d8:46:77:4a:be:6b:62:3b:e7:d3:a1:24:
47:db:7f:47:57:05:67:39:12:b5:1f:eb:59:d6:3b:6c:b9:56:
b0:ef:c4:bb:1b:05:2b:cb:01:fe:bb:65:ec:82:2d:b9:ba:f7:
ac:c7:f6:68:5b:e5:e0:88:0d:7f:b6:43:b4:9f:31:2b:da:89:
7a:49:03:ba:ea:95:70:56:21:dd:01:89:13:1d:76:2e:9a:e2:
1e:5a:48:bc:40:6c:50:21:f2:f2:80:a4:1f:a1:54:c9:fe:e1:
b1:3e:f1:64:bc:a8:49:cf:d6:51:b5:be:e7:70:ea:01:0e:56:
88:eb:ef:8f:1e:d6:70:1f:52:fd:3b:b2:55:c3:64:41:f6:fc:
d0:d7:2b:54:cd:7c:6b:ad:0d:39:87:d5:5a:72:77:86:58:7a:
4b:ae:6e:f2:d1:c7:b6:1d:69:67:d4:1a:0d:ef:a5:ff:b4:61:
f4:94:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:35 2023 by rpki-client on console-fra.rpki-client.org