Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/2YcJpb4WQX3Qi5MwbgV4Jk5KL9w.roa
File: 2YcJpb4WQX3Qi5MwbgV4Jk5KL9w.roa (raw, json)
Hash identifier: DNmzojP5SBbApSO5NZqbKSgMIQZ69/fo33WenfQ15FY=
Subject key identifier: D9:87:09:A5:BE:16:41:7D:D0:8B:93:30:6E:05:78:26:4E:4A:2F:DC
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018B6CEB35A97E0D0C761C4DB9BC076C78CA
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/2YcJpb4WQX3Qi5MwbgV4Jk5KL9w.roa
Signing time: Thu 26 Oct 2023 16:57:15 +0000
ROA not before: Thu 26 Oct 2023 16:57:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 23
217.113.26.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6c:eb:35:a9:7e:0d:0c:76:1c:4d:b9:bc:07:6c:78:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Oct 26 16:57:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d98709a5be16417dd08b93306e0578264e4a2fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fb:65:c7:74:12:81:d8:7d:4b:a2:2d:f6:95:
1a:c2:fa:52:22:ec:a7:36:77:86:66:06:2d:16:12:
38:09:d6:7f:cd:9d:91:84:6d:4e:03:e8:b9:54:e6:
a2:06:a9:92:c6:2a:44:93:4e:5e:af:fe:84:9f:dc:
f1:9f:b0:8a:13:8b:05:87:0f:09:b7:a5:8f:ec:2a:
21:0e:d0:c9:af:40:12:52:36:b5:3b:fe:d7:da:e4:
cf:cc:8d:9a:8d:df:a3:50:fb:05:e7:ea:e0:54:5e:
5d:ae:f1:11:d4:e7:10:51:f4:64:0e:bd:8d:a2:0f:
02:34:64:37:06:21:87:3a:6f:db:fa:49:99:66:8d:
1d:6a:ad:c4:97:23:cb:66:a3:48:1f:9c:23:64:36:
00:65:64:c1:84:20:bb:3a:23:b6:08:36:68:d6:24:
ad:a8:b6:6e:d5:22:45:c3:48:e5:33:86:2a:33:cd:
d8:ba:6e:21:4e:94:99:4a:2e:a9:84:84:86:37:3e:
31:2c:09:0f:76:3d:88:e6:f7:82:5d:68:0b:13:51:
86:f5:1f:30:95:e5:34:4d:0c:3f:9e:4a:a8:49:f1:
ef:ce:c6:70:3f:5d:17:72:e6:53:89:62:8b:1c:2b:
3e:e5:3e:27:83:0d:f6:c0:5c:45:27:ae:43:5c:35:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:87:09:A5:BE:16:41:7D:D0:8B:93:30:6E:05:78:26:4E:4A:2F:DC
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/2YcJpb4WQX3Qi5MwbgV4Jk5KL9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.22.0/23
217.113.26.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:d6:81:eb:c0:52:0e:24:2c:2e:84:61:c6:c6:33:24:19:8d:
b3:0e:b8:2e:21:28:a9:f6:f2:eb:e4:a9:45:91:0e:96:76:d8:
22:f0:29:ca:ee:93:92:16:75:60:b5:75:85:3e:e4:36:0a:54:
29:43:34:37:0b:89:4f:df:1a:9f:53:27:83:ad:39:7e:71:ae:
48:a7:90:80:7f:ec:43:51:c2:81:5c:0d:77:54:8b:ae:6a:f9:
d7:7b:97:c8:fd:40:65:45:45:f3:25:20:19:b6:24:59:ad:53:
5d:7e:b6:0d:a0:f6:7c:f7:9c:78:c8:84:88:61:b4:52:72:a5:
ab:a3:a3:d7:89:4e:13:aa:e7:3a:c1:f2:5c:31:5d:81:74:7f:
31:15:4d:a7:0a:86:f2:e1:ce:43:f4:a4:12:25:bb:e1:4b:26:
ad:0b:ff:20:8d:1c:34:a6:cf:74:1b:c1:d4:1e:67:91:9c:01:
a3:03:63:2b:46:38:f2:39:10:62:f6:dc:e2:e1:8b:d4:c3:39:
22:00:90:47:be:ae:5b:11:85:11:b8:33:d8:fe:65:6f:5f:c4:
43:b1:8e:bc:7f:53:77:32:3c:9f:b9:0d:f1:21:82:92:68:f7:
65:e1:2d:cc:9d:ec:a6:9e:32:bf:6e:91:81:0c:26:be:cc:e3:
99:12:1a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 11:48:42 2023 by rpki-client on console-fra.rpki-client.org