Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/jexhhSMyiiPsW1XOOr3z6EcIsRQ.roa
File: jexhhSMyiiPsW1XOOr3z6EcIsRQ.roa (raw, json)
Hash identifier: 0rKO2KcHQwkPPBZHNLysjpW8Cw3OspplD1Ord4TLMcE=
Subject key identifier: 8D:EC:61:85:23:32:8A:23:EC:5B:55:CE:3A:BD:F3:E8:47:08:B1:14
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018572BA7094DAB533CB86F2C5693770416C
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/jexhhSMyiiPsW1XOOr3z6EcIsRQ.roa
Signing time: Mon 02 Jan 2023 13:44:59 +0000
ROA not before: Mon 02 Jan 2023 13:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50635
IP address blocks: 217.113.10.0/24 maxlen: 24
217.113.10.0/23 maxlen: 23
217.113.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:70:94:da:b5:33:cb:86:f2:c5:69:37:70:41:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 13:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dec618523328a23ec5b55ce3abdf3e84708b114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:32:51:0c:1b:4a:a8:04:f5:22:25:68:ef:
ee:a2:bc:82:77:fc:45:45:c4:9a:de:9b:14:3c:5b:
00:87:c4:25:e0:fa:fc:0a:51:8c:53:e9:d5:e1:e3:
49:52:9c:aa:3b:25:ef:ff:b1:2b:20:92:44:4a:ce:
45:e1:a2:69:0b:66:f3:8a:44:35:40:6d:36:03:5c:
bf:7c:77:b5:bc:9e:e9:f2:ec:a1:94:a1:b6:95:72:
08:14:2f:3a:6f:28:b6:ac:50:54:59:fa:8a:8b:24:
fd:1f:86:35:e1:54:db:a1:2a:bb:72:f1:1b:b3:b9:
c3:31:55:c9:c1:20:6a:2c:44:6b:d3:4d:52:a3:f2:
e5:9f:d6:ac:dd:52:af:fa:fa:6e:ba:1c:4d:72:a6:
3d:87:80:e4:ea:0e:85:f2:0e:6b:34:ba:2c:27:59:
07:ec:b5:b9:e2:a5:c2:91:10:ce:62:8d:fb:15:ef:
ed:66:b3:97:24:3b:33:c8:b4:44:21:83:60:27:1f:
cb:07:51:ec:62:ce:a8:95:9c:36:97:af:54:f2:22:
d2:8d:10:31:67:17:ba:a9:30:f5:74:a1:04:5b:e0:
74:75:83:10:84:74:f6:75:2a:1d:31:e4:de:84:28:
a8:b3:d5:31:57:30:3f:6c:51:8f:29:56:40:eb:93:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EC:61:85:23:32:8A:23:EC:5B:55:CE:3A:BD:F3:E8:47:08:B1:14
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/jexhhSMyiiPsW1XOOr3z6EcIsRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.10.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:b9:3c:ca:45:59:a6:c4:04:4e:6c:f8:9a:eb:99:ed:0e:d0:
ac:a2:b8:0c:a1:45:3e:ba:9d:93:8f:9f:84:a0:f5:a4:71:ba:
2c:aa:b3:42:88:06:a3:4f:b1:0a:7b:1f:0e:95:5c:1f:dc:b3:
c8:1a:28:e8:37:dc:83:e5:6f:ae:7e:b4:23:61:65:e7:fa:12:
36:6f:7d:11:e1:59:fb:5a:57:2d:a1:77:fc:85:87:a3:63:93:
e2:a7:dd:22:25:cb:2f:10:e2:8f:56:90:d3:e5:32:43:08:50:
97:17:1e:bc:c1:91:d2:7b:92:9f:e9:41:16:df:30:6f:10:a3:
34:c3:f6:d8:03:0a:84:c1:48:31:4b:91:1e:06:c0:e0:f2:13:
db:cb:3a:91:96:03:06:67:47:1a:fa:19:86:c4:74:5d:71:12:
15:02:76:7a:79:1c:fd:b5:de:f1:92:d8:9e:29:e1:b8:d6:0a:
3e:1b:04:8e:73:29:8d:a5:88:70:5a:9d:b6:9c:dd:b9:7e:81:
ff:e1:7b:05:fc:91:d8:76:84:75:25:c1:47:89:61:2f:29:00:
40:ed:fc:23:50:20:d1:4a:27:03:e3:ce:2d:41:d2:24:00:f1:
2b:1e:98:68:f4:0b:d1:90:b6:fb:3f:5f:68:0e:d2:4a:ea:83:
98:3b:34:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:49 2024 by rpki-client on console-fra.rpki-client.org