Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/T2lQi41xSA4-bVe_T-qwhtg8OQY.roa
File: T2lQi41xSA4-bVe_T-qwhtg8OQY.roa (raw, json)
Hash identifier: RiwDdcB5QaTsMyXzF9wAFFewtPaRiOq7CoFlla1sS9g=
Subject key identifier: 4F:69:50:8B:8D:71:48:0E:3E:6D:57:BF:4F:EA:B0:86:D8:3C:39:06
Certificate issuer: /CN=b7ba52ca7838433f9f045446c1f3e568a78b56d2
Certificate serial: 0185728C7E6EC1EC9AAC5C3EF35964D55CEE
Authority key identifier: B7:BA:52:CA:78:38:43:3F:9F:04:54:46:C1:F3:E5:68:A7:8B:56:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7pSyng4Qz-fBFRGwfPlaKeLVtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/T2lQi41xSA4-bVe_T-qwhtg8OQY.roa
Signing time: Mon 02 Jan 2023 12:54:48 +0000
ROA not before: Mon 02 Jan 2023 12:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210545
IP address blocks: 217.119.138.0/24 maxlen: 24
2a11:7b40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:7e:6e:c1:ec:9a:ac:5c:3e:f3:59:64:d5:5c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ba52ca7838433f9f045446c1f3e568a78b56d2
Validity
Not Before: Jan 2 12:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f69508b8d71480e3e6d57bf4feab086d83c3906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0a:99:9d:bb:bb:46:d7:a3:6e:63:9b:d6:64:
8f:d7:2b:49:49:ec:cb:57:fa:16:12:40:cf:4c:49:
3f:3c:8a:48:30:95:98:fd:e7:9c:1b:a2:2b:b5:93:
cf:88:c1:fe:af:cc:5e:fe:59:89:7a:ce:7e:06:7f:
bb:0f:4e:38:38:72:3a:b4:24:6c:e3:57:30:7e:36:
48:51:0f:cc:7d:1f:c3:3c:9b:28:d9:23:79:ad:76:
a2:b7:f6:93:6c:b1:c1:8c:e0:93:c2:e0:48:71:a4:
e7:ba:a7:5b:fb:32:3d:79:06:3e:94:5c:05:94:91:
4b:c8:7f:6e:f8:64:a3:44:38:e1:77:58:63:c3:68:
50:e2:fd:81:87:c5:b3:22:02:ce:a1:7e:7c:b0:21:
cf:9c:d6:28:b7:19:54:44:9a:0d:f7:4e:01:1f:13:
2d:63:5b:0b:75:36:b2:b3:b4:01:7b:76:7a:50:da:
b9:9a:59:38:e8:95:c1:fe:76:2e:8f:c0:b0:32:5f:
28:2e:c8:7c:64:dc:17:e5:ab:2b:92:80:e4:65:86:
f3:de:8a:52:ec:0e:4e:3b:02:b6:02:89:fe:ff:d5:
8e:ff:61:17:ee:39:f3:db:85:b9:12:46:b8:31:af:
4a:97:30:72:01:89:2d:d4:1d:2f:dd:f9:d7:3f:b4:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:69:50:8B:8D:71:48:0E:3E:6D:57:BF:4F:EA:B0:86:D8:3C:39:06
X509v3 Authority Key Identifier:
keyid:B7:BA:52:CA:78:38:43:3F:9F:04:54:46:C1:F3:E5:68:A7:8B:56:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7pSyng4Qz-fBFRGwfPlaKeLVtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/T2lQi41xSA4-bVe_T-qwhtg8OQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.138.0/24
IPv6:
2a11:7b40::/29
Signature Algorithm: sha256WithRSAEncryption
63:f2:61:10:44:b7:90:d5:ef:96:63:78:3a:74:de:a3:6b:28:
5a:f2:85:94:a9:f3:83:9a:c8:87:ec:3d:f8:3c:5b:54:d1:bf:
fd:6a:7c:fb:34:ca:3d:5e:25:64:5b:e8:9b:a3:16:ab:40:d1:
49:c9:9c:78:b0:62:f0:fc:dd:da:f1:9f:56:fc:f3:44:e1:5b:
91:8a:c9:2e:52:df:74:22:8d:23:38:bd:17:47:a3:2f:02:79:
d0:8c:a3:03:78:9f:e3:b4:23:1a:b8:c2:0a:37:f6:9d:2a:e9:
4d:c8:d3:f0:07:bb:dc:22:c2:3a:b9:1c:96:6e:d8:ca:46:51:
7d:87:4e:06:2a:1a:80:11:94:f4:32:4a:c7:03:f7:7b:c3:65:
77:70:1e:30:0e:ae:c0:f1:77:d6:01:15:11:47:6b:0c:9e:82:
03:4e:b6:9a:cb:ca:57:c1:92:d9:94:81:54:ed:bb:1e:21:a9:
d5:bb:c2:38:2a:f7:83:48:0e:ff:f1:55:f2:fe:e3:18:62:44:
3b:50:b9:98:3f:94:96:d5:e2:3e:fc:68:71:65:8d:ba:3d:e9:
15:dc:49:93:e6:1d:2b:b3:5b:3b:33:c5:e1:8f:78:dd:7b:63:
c9:bf:2e:e6:81:00:15:e2:37:6d:d7:b6:45:05:6f:21:c9:40:
c5:6c:f1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:54 2024 by rpki-client on console-fra.rpki-client.org