Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/9yEU0pE8lNbXOsK6MpebGHkd23g.roa
File: 9yEU0pE8lNbXOsK6MpebGHkd23g.roa (raw, json)
Hash identifier: aCwRBFHcIyVQeNBCVFEDtzHTFJBIwX4cUVzx6o+5Uj4=
Subject key identifier: F7:21:14:D2:91:3C:94:D6:D7:3A:C2:BA:32:97:9B:18:79:1D:DB:78
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018A8AD1587A9D4A114F2EDF81968932E3E3
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/9yEU0pE8lNbXOsK6MpebGHkd23g.roa
Signing time: Tue 12 Sep 2023 19:14:50 +0000
ROA not before: Tue 12 Sep 2023 19:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 23
217.113.26.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8a:d1:58:7a:9d:4a:11:4f:2e:df:81:96:89:32:e3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Sep 12 19:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f72114d2913c94d6d73ac2ba32979b18791ddb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:e9:06:69:b5:3c:59:11:4c:01:70:01:f6:
89:8a:b6:6f:ea:e6:bf:c9:7d:fa:01:bb:49:3b:2f:
da:b1:42:64:eb:8f:0b:75:c4:4d:1a:86:7d:9c:7f:
82:df:90:73:46:dd:b1:9c:13:51:90:3c:ef:c9:6d:
a8:f9:d6:31:e3:dc:87:e3:1e:d9:8d:34:20:d7:14:
cb:80:c7:1c:ec:5e:1b:ea:75:5d:f4:64:2c:66:9c:
41:3b:ce:cf:1a:cb:03:77:bb:20:77:af:58:e0:74:
8f:a1:c0:ce:88:89:5e:1a:b4:d0:6a:d1:a9:46:ce:
80:94:28:e2:b4:13:d0:68:d8:2b:a1:e2:47:31:37:
5f:a2:94:45:c6:95:39:52:e9:d7:73:24:85:57:5f:
cc:2d:cc:b7:28:76:5a:fb:12:4e:9c:72:9e:7b:23:
f1:65:1d:18:d1:bb:f1:ad:b0:02:d5:89:31:43:b6:
7e:2d:d8:74:66:a0:ec:99:bb:86:99:45:ee:aa:85:
28:4b:d7:43:9d:06:bb:a6:2b:2a:b7:86:88:6c:9c:
be:d7:8d:60:42:4a:1c:a4:ad:46:3c:bf:59:38:9e:
2f:a9:5c:dc:4f:c5:40:59:56:38:08:d1:bb:3e:c5:
7c:cb:1f:1e:db:bc:4e:24:fe:8e:cb:20:14:32:df:
b3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:21:14:D2:91:3C:94:D6:D7:3A:C2:BA:32:97:9B:18:79:1D:DB:78
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/9yEU0pE8lNbXOsK6MpebGHkd23g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.22.0/23
217.113.26.0/23
Signature Algorithm: sha256WithRSAEncryption
36:8f:10:7f:d6:f9:ed:58:3a:6c:cc:3d:a4:c9:b8:03:35:fc:
d9:9c:45:26:ef:1c:4e:d7:06:c9:f9:20:8a:45:e1:04:f9:5e:
7d:39:ed:2a:e6:88:58:6f:fc:b7:a9:cc:b0:c5:65:3a:c5:74:
16:90:61:e0:e8:f4:1b:7b:2b:f8:4a:0a:7b:44:e6:ad:db:ee:
3d:d9:c0:ca:30:29:61:47:f0:98:1c:97:f7:e2:56:dc:c6:f1:
71:71:ae:77:c3:2f:cd:c7:49:7e:45:d0:02:b3:af:44:6d:f9:
ab:1c:9c:1d:a8:e5:62:fa:e4:66:9a:f7:cc:f7:bd:ac:3b:e6:
8a:00:d5:07:1c:37:89:6e:63:6b:84:f8:c2:e5:fe:93:5b:bf:
14:85:92:a8:70:11:c0:f1:62:ab:57:b6:b1:fd:1e:03:4a:d7:
62:8b:f0:af:d2:63:8b:2c:a2:56:7d:41:b8:17:90:11:c2:d3:
88:df:96:d6:9a:7e:3d:05:71:f9:55:20:3f:9a:57:07:d3:c0:
d3:a2:0d:fe:16:37:3f:95:6d:ab:54:f5:13:85:af:77:42:95:
fb:18:e0:95:15:19:b9:87:07:4e:da:b6:fd:f3:35:26:a5:47:
b5:78:2d:95:96:a3:2c:23:ef:bd:89:9a:c7:3b:d1:68:83:6c:
6e:6e:50:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 09:34:56 2023 by rpki-client on console-ams.rpki-client.org