Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/PZjO_cPjgsJKkMAE6eAOVUqR6Eo.roa
File: PZjO_cPjgsJKkMAE6eAOVUqR6Eo.roa (raw, json)
Hash identifier: B8c3KIA6PdH1gXLmtr44pZhx5avTVWAT2B6tmyiTEbw=
Subject key identifier: 3D:98:CE:FD:C3:E3:82:C2:4A:90:C0:04:E9:E0:0E:55:4A:91:E8:4A
Certificate issuer: /CN=26dc466e56225124ee805885441305662ceb1f23
Certificate serial: 01856BA5750F64A38D8B2F73AF15C265D36C
Authority key identifier: 26:DC:46:6E:56:22:51:24:EE:80:58:85:44:13:05:66:2C:EB:1F:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtxGblYiUSTugFiFRBMFZizrHyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/PZjO_cPjgsJKkMAE6eAOVUqR6Eo.roa
Signing time: Sun 01 Jan 2023 04:44:43 +0000
ROA not before: Sun 01 Jan 2023 04:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 217.119.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:a5:75:0f:64:a3:8d:8b:2f:73:af:15:c2:65:d3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26dc466e56225124ee805885441305662ceb1f23
Validity
Not Before: Jan 1 04:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d98cefdc3e382c24a90c004e9e00e554a91e84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:28:a2:89:22:21:60:6d:85:45:4e:12:0e:
8d:c4:c8:c2:a7:6b:58:bb:c6:68:f5:2b:60:b4:3e:
84:2e:2c:37:fe:20:1c:f7:c2:e9:0d:a4:b8:8e:43:
ec:d0:9d:12:2a:09:65:f4:a2:09:77:84:be:1f:83:
d6:ca:95:0f:4e:ff:c3:01:c1:d0:ea:32:cc:2b:34:
94:74:e5:51:2b:99:3d:d4:13:54:30:39:a1:56:8d:
08:c0:ae:b7:d6:01:85:ad:9e:7b:ec:d9:3a:4b:5a:
cd:00:b3:dc:af:c2:e7:bf:6e:c6:70:6e:f7:15:48:
52:c9:50:89:29:56:f1:a9:d0:a1:6c:1a:11:2e:19:
81:58:b4:8a:73:bb:cc:5f:f6:7a:2e:72:f1:44:14:
f6:b7:e7:93:ef:4c:0d:31:8e:ec:0f:15:b5:2d:ca:
d9:3a:ba:33:a0:eb:1a:d0:fc:3e:f8:c8:54:c2:08:
6d:3c:84:34:99:48:64:11:0a:33:60:25:02:9c:66:
ff:49:07:1c:b2:cb:be:17:bc:1e:69:18:b8:bd:d2:
3d:16:2f:8f:c9:09:69:1a:d9:ae:1a:17:11:21:c1:
d4:f1:c4:a4:46:87:16:48:e9:c4:e9:61:fd:88:b1:
5c:ad:33:e5:9f:e7:fd:f0:fc:97:e1:4e:af:2b:8e:
98:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:98:CE:FD:C3:E3:82:C2:4A:90:C0:04:E9:E0:0E:55:4A:91:E8:4A
X509v3 Authority Key Identifier:
keyid:26:DC:46:6E:56:22:51:24:EE:80:58:85:44:13:05:66:2C:EB:1F:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtxGblYiUSTugFiFRBMFZizrHyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/PZjO_cPjgsJKkMAE6eAOVUqR6Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/JtxGblYiUSTugFiFRBMFZizrHyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.143.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8f:f7:8a:ba:8f:1f:a1:be:68:94:17:f0:ae:88:60:1d:9a:
99:36:d0:de:51:04:b4:63:1f:8f:08:4e:9f:31:27:76:20:01:
98:0e:71:5d:c4:73:ff:e8:a8:a6:87:3f:62:37:1f:b2:e3:68:
e7:b1:5f:3c:bb:00:f5:11:6b:71:2b:a2:4f:73:81:af:0e:68:
9c:da:8f:35:26:5f:26:87:b4:09:8d:db:f1:09:9a:c7:b0:aa:
48:53:fc:c7:bc:f0:1c:c5:54:b8:ee:c5:62:40:23:39:13:35:
bb:27:0d:32:58:0d:6b:6b:e4:c6:4b:cc:8b:f5:64:1b:9a:3a:
1d:a4:61:81:f6:d4:fc:b3:7c:59:d4:7e:b8:13:9c:7f:e6:44:
98:6f:b9:84:07:55:dd:b5:28:c7:7e:3b:70:33:0e:ea:b2:0b:
72:74:b8:d6:b5:b4:1a:b5:0d:92:ec:d8:d6:d0:90:4b:c5:80:
b8:a0:5a:39:cf:63:a9:75:85:e8:94:7c:c8:c3:0f:d4:68:66:
eb:fc:8b:90:64:6b:28:1c:d2:3a:77:b1:b5:71:9f:7a:32:54:
ff:04:2c:a4:d7:6f:c4:68:e4:9f:26:85:52:44:6e:24:71:39:
b9:2e:85:1a:cf:b5:af:3c:18:a7:21:ce:90:89:d6:fd:c1:93:
ae:14:c7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:55 2023 by rpki-client on console-ams.rpki-client.org