Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/4W_2yf49Hfj00PzedDERBkEtiT8.roa
File: 4W_2yf49Hfj00PzedDERBkEtiT8.roa (raw, json)
Hash identifier: 1pMjf8FzHpWQDCaqFBly6lGYLbZRrjymMd3gMG+Lx3c=
Subject key identifier: E1:6F:F6:C9:FE:3D:1D:F8:F4:D0:FC:DE:74:31:11:06:41:2D:89:3F
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0185719E7AD5669E7AE6DAA93F7426EC240C
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/4W_2yf49Hfj00PzedDERBkEtiT8.roa
Signing time: Mon 02 Jan 2023 08:34:49 +0000
ROA not before: Mon 02 Jan 2023 08:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200940
IP address blocks: 213.16.92.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:7a:d5:66:9e:7a:e6:da:a9:3f:74:26:ec:24:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 2 08:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e16ff6c9fe3d1df8f4d0fcde74311106412d893f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:52:eb:70:5a:0a:55:83:69:86:b9:68:21:
45:86:ed:c0:6b:23:5d:36:58:7c:65:04:ce:9f:5f:
78:c4:26:20:c3:61:99:60:c9:8a:e8:c0:1b:fd:a7:
df:7c:0d:eb:64:c7:bd:74:27:8d:16:f5:a7:94:57:
73:6b:3e:6b:96:05:87:19:bd:bb:e6:18:4d:ff:64:
4b:45:a7:66:28:9e:1c:17:07:5e:e5:d6:86:0e:45:
cf:59:c1:0b:a2:21:41:9e:12:33:5d:c8:88:17:ed:
19:0c:b2:9c:4e:30:5b:d1:5a:0a:32:75:46:60:31:
65:9a:22:d7:20:3a:7a:22:16:2c:43:3f:ea:67:d8:
df:9e:9d:dc:3e:1c:50:77:2a:eb:8a:96:56:ef:cb:
2e:43:ff:c0:6d:5f:0b:93:cd:f8:43:c2:11:d8:77:
e0:aa:52:75:00:b1:91:8c:b5:21:c3:0a:80:7d:cc:
2b:22:1d:4b:84:f2:07:5d:b6:98:b6:b6:b6:7a:ea:
a3:00:a9:76:c8:66:2a:bf:d8:c8:ad:5c:0c:70:f8:
97:df:16:fe:1d:68:5c:91:eb:7e:76:48:1f:03:7c:
92:44:8f:fa:37:19:e7:40:5e:15:a2:f4:a4:a0:f1:
22:5b:c3:88:0a:e5:46:68:7e:55:e8:a7:6f:2d:22:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6F:F6:C9:FE:3D:1D:F8:F4:D0:FC:DE:74:31:11:06:41:2D:89:3F
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/4W_2yf49Hfj00PzedDERBkEtiT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.16.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:88:88:c8:fa:ac:6d:8c:a7:35:eb:bc:f1:9a:7d:ef:d7:d9:
e3:cb:03:50:08:5f:f4:71:cf:cc:62:79:62:49:56:29:02:91:
24:6a:0a:e5:62:26:03:e8:45:e4:c2:e9:1f:72:ec:30:a1:5f:
d0:8f:74:9d:0f:75:fd:ba:78:be:4f:6e:89:ac:d9:02:07:c1:
fd:c9:9e:59:c7:4d:2f:a4:6e:24:c6:b8:e9:ad:25:d1:bd:95:
7a:95:e8:b0:a4:e5:49:13:93:0f:fd:1e:71:20:d7:55:5d:5f:
26:75:ee:c3:a8:55:0c:cc:f6:52:19:f2:cc:ca:3b:93:c2:19:
cc:0b:e3:a6:86:38:37:0f:f4:0f:d2:88:e8:a0:f9:73:1f:36:
e4:0b:96:4f:a2:2f:5c:b5:ea:79:82:30:c3:5c:a4:99:0c:6b:
b4:51:18:ff:4c:a0:52:a1:31:b3:fe:14:f4:8b:89:ad:29:e1:
4b:b8:c2:ba:0d:48:24:51:43:eb:7d:6a:02:03:7c:4b:42:a7:
b6:01:0f:67:00:c0:97:d3:16:c7:6e:1e:e1:e6:11:91:5a:1e:
56:d4:20:b6:b0:9f:4f:be:53:bc:06:e8:6d:cb:11:27:3d:57:
fa:fd:6d:ee:e7:18:68:38:67:dd:d7:d8:78:e6:bd:f7:5c:c0:
23:43:63:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:34 2024 by rpki-client on console-ams.rpki-client.org