Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/8x9NgMP1Kd4NK7YNl_bCPBtv4wU.roa
File: 8x9NgMP1Kd4NK7YNl_bCPBtv4wU.roa (raw, json)
Hash identifier: G2ErIQpCjK80W8v54KKJ/kpS3cOQ5LaB/xPdu8MTip4=
Subject key identifier: F3:1F:4D:80:C3:F5:29:DE:0D:2B:B6:0D:97:F6:C2:3C:1B:6F:E3:05
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018967C2441D11A6E1619C766C9301A163BA
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/8x9NgMP1Kd4NK7YNl_bCPBtv4wU.roa
Signing time: Tue 18 Jul 2023 06:48:51 +0000
ROA not before: Tue 18 Jul 2023 06:48:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 23
45.133.106.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:c2:44:1d:11:a6:e1:61:9c:76:6c:93:01:a1:63:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jul 18 06:48:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f31f4d80c3f529de0d2bb60d97f6c23c1b6fe305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2b:01:3f:44:75:9b:8e:07:6d:a9:88:05:a5:
45:7f:9c:9c:7f:5b:26:46:96:d2:c6:40:b7:e6:ee:
87:fa:7f:4d:0c:15:37:7f:43:df:ac:dd:47:90:eb:
e3:12:64:50:f4:8d:e0:da:4d:04:bb:1d:33:62:4b:
6e:40:cd:1e:52:b9:ff:87:a2:46:17:53:25:f6:7e:
99:49:2f:07:26:4c:02:23:eb:f2:38:34:24:ac:ee:
84:05:f5:03:f8:0b:f0:3b:ea:79:ce:49:2f:42:f5:
38:30:b8:16:37:6e:68:d7:36:48:56:c7:3c:7a:e0:
d3:49:c6:3d:d2:a4:01:f9:03:cb:ce:f7:37:91:d0:
b6:63:75:3a:b1:7e:3d:cf:a1:20:13:6c:58:3f:46:
18:ce:01:51:ea:a4:1b:af:67:d7:1d:f1:c6:37:a3:
1b:c8:ef:78:64:34:9a:07:55:8f:01:e9:75:81:cb:
29:5e:12:3e:3f:19:d5:35:2b:96:bb:5b:5c:fc:dd:
e5:03:c2:9a:41:71:5b:12:04:29:ad:19:62:e0:85:
b8:40:3c:85:45:b5:51:71:4d:22:10:90:db:40:cf:
dc:29:86:dc:b6:21:e6:cc:12:b7:e7:2c:f3:68:33:
86:54:c6:10:7d:c3:74:82:f9:28:ea:42:e1:6d:d6:
a0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1F:4D:80:C3:F5:29:DE:0D:2B:B6:0D:97:F6:C2:3C:1B:6F:E3:05
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/8x9NgMP1Kd4NK7YNl_bCPBtv4wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.106.0/23
217.113.22.0/23
Signature Algorithm: sha256WithRSAEncryption
58:02:df:66:d8:c1:fa:1f:69:dd:0c:f5:f6:83:2a:d7:1e:c0:
81:a7:29:7b:fb:65:be:c0:da:62:59:c1:f4:30:8d:2d:ac:57:
2e:9f:1f:91:77:d3:7f:1c:4f:ba:51:cf:52:77:49:40:04:ee:
1a:00:18:7c:07:10:36:56:b9:9b:83:6a:fc:48:4c:c9:f2:3f:
60:56:e9:15:fe:da:ce:5e:18:2d:ef:67:54:a6:54:48:70:ad:
99:c5:db:8d:df:77:ea:3e:88:67:81:42:5a:b2:d8:a6:59:2c:
77:6f:9f:4f:1f:18:d6:f8:49:5c:3b:de:b6:e0:1f:99:94:22:
64:8d:be:8e:41:f8:d8:e8:a4:f8:ad:13:81:35:e2:2c:07:41:
de:f5:4b:2e:d7:13:98:52:46:7b:8c:ce:dd:18:6e:1e:05:8d:
1c:ba:dc:20:18:99:9f:3e:17:82:6a:d8:f6:a0:fb:99:6b:a0:
db:e6:e6:88:67:53:e4:43:73:24:16:79:c3:f9:e9:2a:bd:4b:
b3:a1:27:67:ca:50:1a:9f:da:26:bd:00:be:b1:67:84:7c:58:
4a:01:a6:68:b1:07:de:1c:f8:cf:67:44:41:18:29:d2:18:46:
d6:ab:50:2f:26:c6:f6:28:b6:ca:2e:cb:de:2d:e8:85:a9:68:
87:bd:7b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 25 13:17:01 2023 by rpki-client on console-ams.rpki-client.org