Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/k8KfZphGm6TlJDxWEf9k65UYlUQ.roa
File: k8KfZphGm6TlJDxWEf9k65UYlUQ.roa (raw, json)
Hash identifier: p8CekncAHaamP5xgRoR8qa+q06cILu1HjEdzUA5Bc+Y=
Subject key identifier: 93:C2:9F:66:98:46:9B:A4:E5:24:3C:56:11:FF:64:EB:95:18:95:44
Certificate issuer: /CN=7373c1ff55403d4792346493f769f8d033bef02c
Certificate serial: 01856CAF2A43ACD92D3A4BF47C1F2E678D4D
Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/k8KfZphGm6TlJDxWEf9k65UYlUQ.roa
Signing time: Sun 01 Jan 2023 09:34:56 +0000
ROA not before: Sun 01 Jan 2023 09:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 213.230.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:2a:43:ac:d9:2d:3a:4b:f4:7c:1f:2e:67:8d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c
Validity
Not Before: Jan 1 09:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93c29f6698469ba4e5243c5611ff64eb95189544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:67:9e:04:c5:33:3b:ef:d8:d4:69:23:f2:77:
1e:a1:d1:1d:c1:4a:09:ce:c4:f7:f2:af:06:89:1e:
80:52:b7:b6:4b:da:dd:5b:3a:08:53:d6:82:e3:14:
7e:84:90:49:cf:b1:5f:73:7b:71:92:b7:fb:a1:b6:
2c:14:3e:4b:d5:d1:88:5e:48:5c:0c:ad:e8:d0:89:
26:33:9d:1f:86:a7:78:70:30:07:57:ce:4d:cb:7c:
ec:c3:01:ff:73:cd:ce:25:a7:43:ab:7c:e4:7f:40:
0d:38:4a:fd:f1:50:7e:ee:65:d5:b8:d1:79:6b:a7:
c0:01:23:73:89:38:08:d5:8e:7c:c4:9c:b9:d0:56:
89:d1:3f:c3:56:30:ba:ad:9d:73:68:4e:18:a6:67:
0a:8d:3b:09:9a:83:99:b2:9c:c0:c8:bc:2d:3b:20:
0d:ee:00:9b:60:9e:5e:6b:a8:b7:28:d8:70:8b:ad:
86:e9:42:2a:51:42:70:55:37:0d:5b:15:61:89:47:
cb:f2:4e:ae:c2:05:3d:b8:94:72:f8:0f:ec:0c:c3:
ba:ef:42:be:eb:6d:49:e4:a6:2f:90:78:d2:30:33:
a2:6a:e8:ce:bf:59:07:98:69:89:f5:97:60:65:c5:
f8:48:f0:70:da:a6:1e:5c:02:9e:f5:50:b9:22:e5:
4d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C2:9F:66:98:46:9B:A4:E5:24:3C:56:11:FF:64:EB:95:18:95:44
X509v3 Authority Key Identifier:
keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/k8KfZphGm6TlJDxWEf9k65UYlUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.230.203.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:57:83:d1:de:1e:e2:4c:17:69:61:ce:98:4a:1f:22:b8:66:
fe:a5:c9:6f:44:ba:eb:56:48:f2:da:14:77:a5:f9:dc:61:1e:
60:e3:46:4d:da:63:78:e1:6c:3f:22:4d:85:9e:ff:46:7f:b8:
53:fd:37:bb:96:e5:a1:e6:70:42:61:b3:63:97:46:65:93:07:
a5:9b:66:2a:ed:b0:fe:a8:2f:20:77:95:a5:f6:bc:e9:0f:a4:
ba:e5:3b:6f:3e:03:24:77:0f:fe:35:cd:5e:f3:b3:f4:a6:71:
9b:a9:f4:30:9b:8b:ca:04:b3:5f:c7:96:7d:c4:1e:c5:c3:3d:
93:b3:92:3a:97:90:9d:98:80:d5:ee:f5:a3:ca:e6:fb:46:18:
d1:a0:f0:d5:a1:2c:e7:9c:27:e3:69:e0:e9:b4:50:de:1e:d0:
2e:f0:dd:5a:94:8c:23:a8:6e:a6:84:07:50:9c:5b:a3:f9:d9:
4c:92:14:18:f2:66:7d:37:26:7a:37:c7:96:42:0f:46:4b:98:
98:bc:91:0e:62:4d:9b:16:d9:94:5b:94:bf:fa:f9:b8:43:b5:
f1:6a:81:13:f1:a4:6d:e0:47:27:bf:5d:f9:46:6c:3a:0b:0a:
3c:f3:5f:9b:a2:42:88:65:fd:49:60:98:43:7b:f7:ac:07:bc:
92:ed:10:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsrypDrNktOkv0fB8uZ41NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNzNjMWZmNTU0MDNkNDc5MjM0NjQ5M2Y3NjlmOGQwMzNi
ZWYwMmMwHhcNMjMwMTAxMDkzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2MyOWY2Njk4NDY5YmE0ZTUyNDNjNTYxMWZmNjRlYjk1MTg5NTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2eeBMUzO+/Y1Gkj8nceodEdwUoJ
zsT38q8GiR6AUre2S9rdWzoIU9aC4xR+hJBJz7Ffc3txkrf7obYsFD5L1dGIXkhc
DK3o0IkmM50fhqd4cDAHV85Ny3zswwH/c83OJadDq3zkf0ANOEr98VB+7mXVuNF5
a6fAASNziTgI1Y58xJy50FaJ0T/DVjC6rZ1zaE4YpmcKjTsJmoOZspzAyLwtOyAN
7gCbYJ5ea6i3KNhwi62G6UIqUUJwVTcNWxVhiUfL8k6uwgU9uJRy+A/sDMO670K+
621J5KYvkHjSMDOiaujOv1kHmGmJ9ZdgZcX4SPBw2qYeXAKe9VC5IuVNAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJPCn2aYRpuk5SQ8VhH/ZOuVGJVEMB8GA1UdIwQY
MBaAFHNzwf9VQD1HkjRkk/dp+NAzvvAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzNQQl8xVkFQVWVTTkdTVDkybjQwRE8tOEN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xYWZmMTAtZGQyOS00MzlmLThkMjMt
YmM5YTVmNjYwNWZjLzEvazhLZlpwaEdtNlRsSkR4V0VmOWs2NVVZbFVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xYWZmMTAtZGQyOS00MzlmLThkMjMtYmM5YTVmNjYwNWZj
LzEvYzNQQl8xVkFQVWVTTkdTVDkybjQwRE8tOEN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ebLMA0G
CSqGSIb3DQEBCwUAA4IBAQCcV4PR3h7iTBdpYc6YSh8iuGb+pclvRLrrVkjy2hR3
pfncYR5g40ZN2mN44Ww/Ik2Fnv9Gf7hT/Te7luWh5nBCYbNjl0Zlkwelm2Yq7bD+
qC8gd5Wl9rzpD6S65TtvPgMkdw/+Nc1e87P0pnGbqfQwm4vKBLNfx5Z9xB7Fwz2T
s5I6l5CdmIDV7vWjyub7RhjRoPDVoSznnCfjaeDptFDeHtAu8N1alIwjqG6mhAdQ
nFuj+dlMkhQY8mZ9NyZ6N8eWQg9GS5iYvJEOYk2bFtmUW5S/+vm4Q7XxaoET8aRt
4Ecnv135Rmw6Cwo881+bokKIZf1JYJhDe/esB7yS7RAc
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:45 2024 by rpki-client on console-ams.rpki-client.org