Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Fz0ZDnoKJjMr_kvNRK8A8QyPudc.roa
File: Fz0ZDnoKJjMr_kvNRK8A8QyPudc.roa (raw, json)
Hash identifier: 81QgvM7Notct8WXKALEzuLNkdKnFH307Bw7JHadluHo=
Subject key identifier: 17:3D:19:0E:7A:0A:26:33:2B:FE:4B:CD:44:AF:00:F1:0C:8F:B9:D7
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01859D2449898CA3BDF1874B22E2F7CB02DD
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Fz0ZDnoKJjMr_kvNRK8A8QyPudc.roa
Signing time: Tue 10 Jan 2023 19:24:39 +0000
ROA not before: Tue 10 Jan 2023 19:24:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209262
IP address blocks: 217.113.21.0/24 maxlen: 24
217.113.20.0/23 maxlen: 24
217.113.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9d:24:49:89:8c:a3:bd:f1:87:4b:22:e2:f7:cb:02:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 10 19:24:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=173d190e7a0a26332bfe4bcd44af00f10c8fb9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:4c:5b:39:ea:83:4b:68:89:01:b1:88:15:
2d:e3:8c:2f:fb:ac:f4:02:69:94:c9:84:53:f2:8d:
7a:bc:b5:6f:1d:be:a9:78:e1:44:76:77:0b:33:0b:
c8:50:28:e3:fb:c2:98:f0:81:ba:ba:49:e1:6f:88:
bb:85:20:52:66:2c:62:a7:bd:d2:40:98:54:ee:db:
be:94:93:94:db:9d:99:9a:c7:c8:ae:ae:cd:c8:69:
9d:0c:ae:6b:df:dc:3e:99:3f:10:92:c5:2f:92:3b:
d5:8c:55:ab:12:cc:c6:bd:e8:cb:d0:fa:63:67:a7:
77:43:cd:43:80:8b:c5:76:cc:b3:79:9c:33:ba:52:
0a:37:8a:c1:cb:b7:4d:9f:a1:ac:66:46:a7:01:56:
bb:c9:5a:97:c4:3c:86:9d:8f:22:fe:b2:43:de:e9:
f5:3e:df:f9:91:d9:5d:4c:f0:e4:d9:54:66:0c:96:
fa:15:1a:61:1c:09:d7:69:f0:59:ea:b1:2c:62:76:
0e:80:d4:82:7d:fc:4d:89:49:04:fb:0a:d6:ca:7c:
37:d0:04:7b:5b:7e:f5:fa:bf:df:bb:80:eb:34:1a:
bc:7a:56:dc:45:02:eb:cb:46:fc:59:af:12:87:7c:
27:a0:fc:7e:3a:bd:77:31:16:6e:bd:9e:36:94:03:
59:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3D:19:0E:7A:0A:26:33:2B:FE:4B:CD:44:AF:00:F1:0C:8F:B9:D7
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Fz0ZDnoKJjMr_kvNRK8A8QyPudc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.20.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:3a:71:29:38:5f:21:c7:f4:c4:3e:a4:a4:91:78:61:87:ed:
35:59:ca:cd:e5:65:8e:76:35:4d:80:de:7d:5e:a8:d4:53:d0:
20:77:03:34:98:25:7d:b0:0c:13:bc:4c:88:4a:0d:8b:a9:05:
ee:a1:e7:af:93:2b:fb:18:32:15:68:14:aa:77:38:3a:16:65:
c6:0e:db:1c:6b:47:b4:4c:25:c8:de:77:c6:19:61:9c:55:68:
76:62:87:5f:e9:0a:a0:ef:84:da:f9:ab:ff:97:b3:1f:43:15:
5d:cb:2f:b6:37:c6:e1:65:5c:f3:c8:44:1b:98:c8:99:42:bd:
75:37:12:3a:0d:9b:cb:9c:62:b7:1c:a2:df:5c:f9:27:5d:5f:
52:19:5c:6b:28:69:c1:f2:fc:f1:82:a3:c5:35:27:43:8a:c3:
53:7a:f1:ca:1f:f0:9d:f4:26:07:2c:48:60:b4:f4:97:68:df:
d5:8c:3a:f3:63:55:a7:9a:d3:fd:f6:27:bb:23:07:93:4a:8d:
ef:e9:52:b0:ec:38:83:cc:08:39:01:98:60:7c:6f:78:b1:d1:
ea:39:f3:9d:af:d2:6d:db:35:5f:31:31:1a:92:02:07:d1:21:
40:44:21:73:03:85:0e:a4:d3:03:0a:57:31:a4:25:a1:7d:26:
de:8f:9a:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWdJEmJjKO98YdLIuL3ywLdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjMwMTEwMTkyNDM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzNkMTkwZTdhMGEyNjMzMmJmZTRiY2Q0NGFmMDBmMTBjOGZiOWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtZMWznqg0toiQGxiBUt44wv+6z0
AmmUyYRT8o16vLVvHb6peOFEdncLMwvIUCjj+8KY8IG6uknhb4i7hSBSZixip73S
QJhU7tu+lJOU252ZmsfIrq7NyGmdDK5r39w+mT8QksUvkjvVjFWrEszGvejL0Ppj
Z6d3Q81DgIvFdsyzeZwzulIKN4rBy7dNn6GsZkanAVa7yVqXxDyGnY8i/rJD3un1
Pt/5kdldTPDk2VRmDJb6FRphHAnXafBZ6rEsYnYOgNSCffxNiUkE+wrWynw30AR7
W371+r/fu4DrNBq8elbcRQLry0b8Wa8Sh3wnoPx+Or13MRZuvZ42lANZcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBc9GQ56CiYzK/5LzUSvAPEMj7nXMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvRnowWkRub0tKak1yX2t2TlJLOEE4UXlQdWRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2XEUMA0G
CSqGSIb3DQEBCwUAA4IBAQBtOnEpOF8hx/TEPqSkkXhhh+01WcrN5WWOdjVNgN59
XqjUU9AgdwM0mCV9sAwTvEyISg2LqQXuoeevkyv7GDIVaBSqdzg6FmXGDtsca0e0
TCXI3nfGGWGcVWh2Yodf6Qqg74Ta+av/l7MfQxVdyy+2N8bhZVzzyEQbmMiZQr11
NxI6DZvLnGK3HKLfXPknXV9SGVxrKGnB8vzxgqPFNSdDisNTevHKH/Cd9CYHLEhg
tPSXaN/VjDrzY1WnmtP99ie7IweTSo3v6VKw7DiDzAg5AZhgfG94sdHqOfOdr9Jt
2zVfMTEakgIH0SFARCFzA4UOpNMDClcxpCWhfSbej5op
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:40 2024 by rpki-client on console-ams.rpki-client.org