Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/4im6VsIhyc1DfzAH4YA53wq9bGQ.roa
File: 4im6VsIhyc1DfzAH4YA53wq9bGQ.roa (raw, json)
Hash identifier: h64veIth+Qfj4pfWW/2R5mbqpdTS9QvxR94HxtNkFkQ=
Subject key identifier: E2:29:BA:56:C2:21:C9:CD:43:7F:30:07:E1:80:39:DF:0A:BD:6C:64
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0185E33F57385CCE7DA5493A9444DC79E211
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/4im6VsIhyc1DfzAH4YA53wq9bGQ.roa
Signing time: Tue 24 Jan 2023 10:07:37 +0000
ROA not before: Tue 24 Jan 2023 10:07:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16190
IP address blocks: 217.113.0.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:3f:57:38:5c:ce:7d:a5:49:3a:94:44:dc:79:e2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 24 10:07:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e229ba56c221c9cd437f3007e18039df0abd6c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1e:76:1e:5c:06:55:58:86:44:a5:b2:f3:b3:
21:bb:28:1d:e8:61:ea:ef:f1:fc:f0:0b:69:da:ec:
a2:9a:ec:74:b0:42:46:69:a3:04:f7:15:89:59:a2:
ad:22:4a:b8:c7:70:c6:68:71:97:2b:bc:e1:68:94:
97:0c:ba:35:1f:7a:01:14:27:c5:0c:60:15:bf:f9:
cf:56:61:13:11:6c:99:08:97:8d:43:b4:55:3e:75:
24:19:f5:59:77:ea:2a:23:56:55:7a:09:9a:67:be:
0d:72:a3:4d:f4:89:cf:50:4b:71:d2:e6:76:18:46:
81:a0:a8:68:8b:b3:28:88:7f:67:eb:7b:83:7e:52:
40:30:8a:08:03:a8:c1:24:8a:1a:93:ba:de:3c:c3:
9b:58:44:75:57:dc:39:5d:24:9b:27:fc:b0:99:cd:
94:fb:e4:99:a2:f7:8f:ca:88:cb:21:f5:c9:18:a1:
da:36:de:dc:ac:75:ad:c0:6c:c5:e7:f6:6c:62:28:
61:c9:e0:c2:f5:ec:7b:14:4b:1c:4a:ef:5a:03:52:
30:61:01:61:97:86:54:eb:22:a4:e5:56:a2:d2:22:
0e:8f:24:ee:ef:b8:ca:88:da:09:47:9b:2b:3d:18:
33:70:b1:0a:d0:41:ad:0f:38:e4:a9:cb:cf:cc:b6:
6f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:29:BA:56:C2:21:C9:CD:43:7F:30:07:E1:80:39:DF:0A:BD:6C:64
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/4im6VsIhyc1DfzAH4YA53wq9bGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.0.0/21
Signature Algorithm: sha256WithRSAEncryption
26:e1:22:54:de:a0:01:45:55:1d:f7:74:b0:e6:35:99:08:43:
10:a3:96:cf:a7:81:42:7f:28:76:aa:47:65:d3:a4:f3:62:d8:
e7:e8:ef:c5:d7:76:2c:b9:a6:65:80:80:25:1b:d2:56:1c:38:
b4:f3:fd:c2:52:3c:cf:f9:7d:45:a9:8c:83:ab:c1:e3:1b:c6:
64:49:80:e1:e8:35:66:47:a5:6a:d0:a7:b2:d4:31:3f:fe:56:
da:b1:b1:74:c3:14:a1:a4:d3:39:8f:8d:d1:01:69:4f:8e:e0:
8f:91:85:0b:c6:80:7d:cd:c2:bd:82:1d:f7:e0:f3:45:93:f2:
a4:32:76:4e:d8:16:87:56:70:01:5d:d4:ec:f2:ca:df:c2:af:
57:4a:17:e8:0f:93:6e:7e:81:f4:78:f3:40:65:67:89:02:f7:
96:af:ac:a4:99:91:a6:be:1d:d0:84:f5:d9:77:b3:14:87:f9:
ad:29:b5:3e:c6:ce:0f:75:cf:be:0e:24:cc:49:cb:a1:c8:02:
5d:02:1c:d6:47:99:e6:c4:89:5f:af:fa:cd:a1:a3:b0:ae:84:
b0:67:8f:e2:e9:98:e0:da:27:52:01:51:f1:20:55:fd:03:ca:
ab:c2:42:6e:bd:07:ae:5a:3e:c0:76:5a:2e:73:75:04:cb:38:
a9:bb:b8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:40 2024 by rpki-client on console-ams.rpki-client.org