Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/P5BL5S4GYsa8g5o0Y5HCwr8gXTU.roa
File: P5BL5S4GYsa8g5o0Y5HCwr8gXTU.roa (raw, json)
Hash identifier: NVeMKPBm4GpFWqGLmcDV1ta61MEvBi51C7I1AAxOIqo=
Subject key identifier: 3F:90:4B:E5:2E:06:62:C6:BC:83:9A:34:63:91:C2:C2:BF:20:5D:35
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01879B2E164C3F33D94842F65A47A021829C
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/P5BL5S4GYsa8g5o0Y5HCwr8gXTU.roa
Signing time: Wed 19 Apr 2023 20:21:41 +0000
ROA not before: Wed 19 Apr 2023 20:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 23
217.113.18.0/23 maxlen: 23
45.133.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9b:2e:16:4c:3f:33:d9:48:42:f6:5a:47:a0:21:82:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Apr 19 20:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f904be52e0662c6bc839a346391c2c2bf205d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:90:90:05:63:98:02:69:30:eb:6b:cb:a5:55:
ff:4e:13:d7:88:6e:67:97:2d:62:15:da:84:4b:2f:
cb:e2:5d:e2:b2:11:08:a3:b5:f3:5d:49:69:a0:bd:
d3:71:40:17:43:5d:24:aa:03:76:f5:96:a1:41:33:
b8:5d:cb:9a:55:e8:92:49:60:9c:56:d1:e2:fe:86:
f7:1e:34:c0:18:d5:f2:b4:a7:d1:b0:a6:cf:30:ef:
0b:6d:5c:8c:bd:1f:ed:c3:61:45:ab:a2:23:5d:0d:
37:ed:2d:b2:e1:8c:84:48:f0:85:a7:c8:b7:d3:ce:
1f:dc:57:44:62:0a:90:9d:a4:46:90:e1:6b:4c:82:
7a:4e:e0:08:39:8b:e8:4c:00:67:d2:cb:4f:26:b4:
dd:c4:f0:57:38:c5:b2:90:4a:d2:ce:6c:0c:4c:7d:
6e:bc:3b:9c:ab:45:24:ea:45:87:50:e3:d6:e3:3a:
0d:3c:54:51:d7:2c:f7:af:20:c5:c9:0f:c0:b7:e7:
f4:f1:74:86:f4:ce:af:94:81:a7:86:98:b1:47:99:
eb:33:c8:95:cd:05:10:e4:98:d7:2c:37:d7:e4:39:
9a:e8:53:8e:b2:cd:43:c9:2e:2a:82:4c:b0:84:c8:
30:1c:02:e3:3e:f0:1b:44:eb:f0:78:af:31:e8:f3:
41:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:90:4B:E5:2E:06:62:C6:BC:83:9A:34:63:91:C2:C2:BF:20:5D:35
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/P5BL5S4GYsa8g5o0Y5HCwr8gXTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.104.0/22
217.113.18.0/23
217.113.22.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:36:3b:7c:4f:99:1b:76:72:26:3f:c1:36:57:30:24:39:e3:
1b:18:f9:6c:96:58:fc:26:6e:cf:c7:bf:4a:82:3f:50:c4:27:
25:16:32:36:ef:c5:a3:0a:09:28:ff:ef:18:c0:3f:24:3a:6e:
2c:9a:3b:68:f2:a9:1d:f0:3d:4a:80:f1:7a:ba:b2:ac:05:5b:
6d:f6:3e:60:d7:df:29:28:b5:95:ee:f3:3b:69:52:1c:f8:6a:
bc:8c:37:d1:a8:c2:45:f9:50:64:69:dc:f9:b8:22:78:f9:71:
e8:92:47:dd:89:07:7a:b1:32:f4:74:22:42:14:70:87:a3:bd:
01:75:2b:0a:9c:b6:89:8b:b9:db:e6:d6:8e:26:50:d8:69:e7:
4a:86:96:d0:d9:ec:43:e6:e5:85:be:38:5e:4f:2a:a5:d9:5f:
8f:56:20:97:39:09:ec:59:4e:9c:4f:92:30:53:c5:ed:8a:8d:
2b:43:d6:98:2c:2c:3a:78:58:65:e6:fd:72:39:8f:b5:b3:d4:
a5:1f:6e:9a:55:8c:e4:7e:fb:0c:3a:94:37:6d:73:28:21:55:
97:b6:37:5c:45:fd:a4:52:94:df:4a:0e:35:21:6c:90:1a:e1:
30:be:4b:23:ab:44:9d:f5:1a:91:1e:dd:30:3d:6a:a7:80:75:
7d:f7:6d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org