Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/85c1ab-4321-4e67-8d6f-74b2ec0d406b/1/u-4ZiJffVfjCiae6frosf5weAKs.roa
File: u-4ZiJffVfjCiae6frosf5weAKs.roa (raw, json)
Hash identifier: ptzbUhMpPOonUvWT9xChh9YIqlAP7glMxRlu+SuCoU0=
Subject key identifier: BB:EE:19:88:97:DF:55:F8:C2:89:A7:BA:7E:BA:2C:7F:9C:1E:00:AB
Certificate issuer: /CN=3bc78458fa04acc0ce28e12fee96615df656535f
Certificate serial: 01857094DDA0563CA0D79781AD0837EE3A58
Authority key identifier: 3B:C7:84:58:FA:04:AC:C0:CE:28:E1:2F:EE:96:61:5D:F6:56:53:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8eEWPoErMDOKOEv7pZhXfZWU18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/85c1ab-4321-4e67-8d6f-74b2ec0d406b/1/u-4ZiJffVfjCiae6frosf5weAKs.roa
Signing time: Mon 02 Jan 2023 03:44:42 +0000
ROA not before: Mon 02 Jan 2023 03:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 213.109.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:dd:a0:56:3c:a0:d7:97:81:ad:08:37:ee:3a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bc78458fa04acc0ce28e12fee96615df656535f
Validity
Not Before: Jan 2 03:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbee198897df55f8c289a7ba7eba2c7f9c1e00ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:21:b7:f2:20:23:98:60:10:da:a4:ca:41:a1:
57:e1:95:8a:92:05:a4:bb:87:56:10:a6:b0:a8:dc:
59:90:dd:72:bb:44:a1:53:0f:04:ff:a0:69:4f:9f:
89:bc:7e:c1:5d:58:bf:a0:e0:fc:0f:c2:88:23:17:
08:77:03:47:19:c8:ee:75:93:39:75:f8:9b:e3:09:
4b:4b:d0:37:95:b0:f3:8a:de:34:59:1d:08:07:d7:
10:54:96:ab:f7:da:5f:7e:60:2b:bc:37:e2:04:bf:
04:15:9f:ca:77:50:8b:9c:d0:9d:59:1d:c8:ce:c9:
a9:81:40:d4:d1:f4:b2:0f:06:aa:a2:e4:77:02:4b:
f4:1b:24:dc:be:3f:5e:f6:9a:85:c1:aa:b6:45:af:
a3:e8:c2:4a:81:6d:e7:60:83:db:3f:1c:9a:82:df:
03:e8:62:c6:5f:bb:81:b9:93:d5:a4:b6:28:fa:75:
55:b9:b0:b6:af:a4:b7:91:85:ba:90:f4:ae:ce:20:
86:e5:bd:47:03:d4:05:fa:fb:54:38:a0:25:e5:b9:
55:28:f5:60:1d:08:e7:78:8a:f3:50:0d:43:56:4b:
1c:e8:db:9c:c8:c1:16:ad:4b:cb:ed:b8:9e:d6:ad:
8b:7a:0c:39:1d:75:d4:4c:27:2c:fc:6b:40:79:c7:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EE:19:88:97:DF:55:F8:C2:89:A7:BA:7E:BA:2C:7F:9C:1E:00:AB
X509v3 Authority Key Identifier:
keyid:3B:C7:84:58:FA:04:AC:C0:CE:28:E1:2F:EE:96:61:5D:F6:56:53:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8eEWPoErMDOKOEv7pZhXfZWU18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/85c1ab-4321-4e67-8d6f-74b2ec0d406b/1/u-4ZiJffVfjCiae6frosf5weAKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/85c1ab-4321-4e67-8d6f-74b2ec0d406b/1/O8eEWPoErMDOKOEv7pZhXfZWU18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.156.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d9:54:74:89:ed:2e:9c:fa:5a:7a:8a:3b:b6:bb:50:b3:bb:
45:c8:51:93:c0:07:c2:a9:06:24:ed:b0:b6:4c:c9:68:bb:f0:
2c:43:68:9e:cc:38:cc:45:30:3a:ed:11:41:bb:63:60:a9:e1:
6d:55:6c:fe:ed:59:ca:9d:0f:8d:7a:aa:bc:c5:9b:23:38:dd:
84:27:14:7c:08:60:1e:63:65:f5:24:4c:b5:4d:44:3e:43:42:
0c:24:c8:45:a6:ed:ef:63:8c:3a:4f:85:09:77:00:87:4f:0f:
ac:86:67:a0:76:80:75:f1:64:c6:c2:a6:7d:46:36:02:51:ce:
4c:f7:04:7c:4d:a8:7f:b0:02:be:6b:a3:6d:e0:df:ef:68:fa:
d9:63:9f:e8:d4:22:6b:03:62:29:84:81:90:83:18:c7:49:9d:
7f:ad:61:7d:b9:aa:54:1e:e4:81:e9:60:2f:c4:6a:7f:fb:31:
68:38:e4:6e:7e:b3:f0:b1:34:1b:fc:32:5b:0b:5a:f8:37:a5:
b4:f7:d4:1c:07:c2:d7:61:e5:26:ca:42:34:74:f1:14:36:22:
56:eb:c5:de:c1:2c:8c:53:51:ba:76:d0:bf:0d:c2:b9:bc:86:
c9:8f:ee:18:de:ee:b3:a2:b2:aa:cd:b9:27:40:08:c1:7e:41:
ef:b5:04:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:55 2023 by rpki-client on console-fra.rpki-client.org