Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/advyPP2XP7ZOWbWZ-KUxEC7DLtk.roa
File: advyPP2XP7ZOWbWZ-KUxEC7DLtk.roa (raw, json)
Hash identifier: D05OxTIKAMRXqIaYbt/i1pw2/zoZZ+Ppx1z11KzjBX0=
Subject key identifier: 69:DB:F2:3C:FD:97:3F:B6:4E:59:B5:99:F8:A5:31:10:2E:C3:2E:D9
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 018691A2DC92D3CCCC6281EB179381CC6D19
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/advyPP2XP7ZOWbWZ-KUxEC7DLtk.roa
Signing time: Mon 27 Feb 2023 06:50:14 +0000
ROA not before: Mon 27 Feb 2023 06:50:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61347
IP address blocks: 213.226.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:91:a2:dc:92:d3:cc:cc:62:81:eb:17:93:81:cc:6d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Feb 27 06:50:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69dbf23cfd973fb64e59b599f8a531102ec32ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:38:f9:36:7b:ff:20:64:fc:6d:0e:38:b7:50:
0e:92:95:f5:93:29:46:3a:a4:6f:df:1a:68:96:7c:
af:f3:e8:4e:b3:21:55:d9:25:6f:b2:38:14:a3:ca:
f7:48:0e:f5:72:42:f2:3f:9b:fd:62:4f:02:af:fe:
5d:42:31:6c:9c:67:d4:8f:74:0c:26:a3:dd:40:7a:
1f:ea:80:e5:88:8f:48:a4:90:2c:7c:35:6e:d9:bc:
6f:da:c9:d8:fe:31:37:17:c7:33:9e:78:e8:58:91:
dc:a0:93:49:94:24:3e:05:31:26:dd:55:8c:6b:44:
a6:dd:59:d3:df:b8:de:99:e6:5d:3e:0d:90:2b:f6:
99:a9:26:d2:0a:29:fd:0e:95:6a:02:43:35:e0:3a:
e1:75:b2:92:7e:97:04:c5:0d:40:87:18:d3:e8:82:
11:ac:f0:51:94:52:b9:34:ef:60:e5:be:95:b2:3d:
9b:14:10:42:c4:2e:4e:36:77:4d:8b:86:db:d5:c3:
50:44:25:15:28:ef:1a:bc:ac:00:20:03:60:be:f4:
5d:88:fe:03:4b:73:82:e1:7a:bb:19:39:c8:9b:66:
4c:c4:36:63:ab:2b:3b:58:01:98:cb:bf:66:08:5a:
28:7e:5f:e8:72:28:b7:e6:af:07:e8:ab:b1:71:99:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DB:F2:3C:FD:97:3F:B6:4E:59:B5:99:F8:A5:31:10:2E:C3:2E:D9
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/advyPP2XP7ZOWbWZ-KUxEC7DLtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.116.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:a7:08:bf:1d:1b:52:a8:4b:03:53:3c:f4:69:32:4f:07:3e:
46:b4:18:7e:34:27:d7:a8:96:f4:54:bd:c6:f1:60:90:3c:c6:
66:6e:82:d4:b3:07:d6:8c:0a:e6:45:d9:0e:cc:df:ce:2e:e6:
fa:94:57:eb:e3:84:14:fc:b6:b9:dd:7a:c5:7c:4a:29:67:13:
ce:11:19:04:78:27:9c:15:8d:1c:f4:c3:2e:49:ee:7a:6a:1a:
69:07:44:9e:89:6c:bd:42:38:b0:bc:e2:df:ec:70:60:83:94:
8b:64:1c:cf:34:55:e7:1c:9f:f6:57:7e:7d:8c:29:0b:af:2a:
2f:5f:71:75:c0:de:c2:a6:02:80:8d:b7:54:41:01:34:35:4e:
5e:7a:bb:09:a4:ff:f3:2a:07:eb:63:54:3b:14:59:8e:86:ff:
ed:99:02:8e:6e:2f:76:63:5f:f9:7c:6a:64:e0:0e:65:f0:f1:
f1:2e:67:55:0e:78:c8:28:63:d5:c6:c3:6b:03:3a:7c:ee:51:
3f:d8:63:e6:70:a9:4e:53:8e:4a:bf:4b:ec:cb:92:65:18:af:
a8:09:3c:fb:e5:05:1b:71:c4:10:62:25:fe:e9:d3:02:74:35:
03:ae:6d:b4:54:a6:be:52:88:88:24:f6:cc:33:23:c0:fb:1e:
6b:43:a9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 10:15:00 2023 by rpki-client on console-fra.rpki-client.org