Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/oQxsfoX0GosF2ataGWHmL_XyoZw.roa
File: oQxsfoX0GosF2ataGWHmL_XyoZw.roa (raw, json)
Hash identifier: GSU5sP7LlwP9oSwcxTNPnjRVrvT0gQHL654WMUeVpAA=
Subject key identifier: A1:0C:6C:7E:85:F4:1A:8B:05:D9:AB:5A:19:61:E6:2F:F5:F2:A1:9C
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018990D4BD00A4500EE601CEDC67D3FF9805
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/oQxsfoX0GosF2ataGWHmL_XyoZw.roa
Signing time: Wed 26 Jul 2023 06:13:28 +0000
ROA not before: Wed 26 Jul 2023 06:13:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 23
45.133.106.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:90:d4:bd:00:a4:50:0e:e6:01:ce:dc:67:d3:ff:98:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jul 26 06:13:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a10c6c7e85f41a8b05d9ab5a1961e62ff5f2a19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:ca:8c:e0:3c:31:e0:74:9e:ab:0c:92:16:
cf:4e:ee:76:94:a1:65:cc:f4:db:86:5f:bd:18:68:
c2:af:1d:eb:67:6d:a2:58:dc:da:df:4f:5a:47:b3:
36:48:5f:a2:43:ca:fc:10:00:d6:75:bd:ec:da:48:
4c:66:25:0c:ca:55:fb:db:f7:a4:6e:51:cc:df:24:
48:2a:89:ac:0c:dd:8b:84:fb:f0:8c:08:83:6d:08:
41:44:91:e4:81:3a:3a:3f:a0:44:a2:f1:48:28:83:
b5:51:8e:db:04:ec:f4:1f:d7:d5:42:9b:e5:c0:47:
1d:c1:76:0b:a3:66:6c:91:ea:5c:ee:ca:67:ce:1a:
19:d5:21:6d:f0:65:26:d3:02:06:04:39:09:79:45:
d7:56:c0:b7:ba:f4:bb:60:30:ad:5f:6f:88:79:ff:
57:40:13:77:2f:f3:cf:a0:5d:c6:a7:d0:f0:20:6d:
37:f9:80:b7:b1:cc:8c:4e:92:74:5a:0c:f3:0e:6f:
b0:55:b8:9c:92:f2:67:75:59:d5:60:d6:4a:3b:dd:
2f:7c:7d:43:20:5d:72:b2:12:e1:97:63:b1:b1:7c:
02:dd:e2:69:8e:50:17:5d:c7:5d:e7:f4:b9:c9:d3:
a2:62:5f:ac:87:73:f2:eb:67:e0:ca:94:26:e5:19:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0C:6C:7E:85:F4:1A:8B:05:D9:AB:5A:19:61:E6:2F:F5:F2:A1:9C
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/oQxsfoX0GosF2ataGWHmL_XyoZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.106.0/23
217.113.22.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:0c:71:83:9f:3e:99:4d:ce:22:15:1c:05:cd:77:78:d1:8c:
bd:69:d8:56:51:26:9c:ac:5c:fe:b3:98:12:2b:f8:51:b9:75:
dd:30:51:5b:4e:57:57:27:47:ed:d0:ec:ae:ed:de:49:ba:b9:
82:25:54:13:5f:02:a7:c1:57:21:81:d3:51:fc:8f:7f:8c:87:
28:5a:8a:cd:2c:00:5c:c3:5c:37:cf:d2:75:46:a4:b4:f5:40:
8c:87:de:00:29:66:17:a3:95:0f:ff:ca:cd:d6:36:73:04:e3:
61:b2:a3:7e:d5:bf:22:d2:99:9b:d1:1f:60:73:21:c9:b6:05:
78:ae:c9:cf:05:68:b4:5a:9a:2f:9e:84:4f:83:14:7e:ca:77:
85:59:2d:02:10:dd:16:72:fb:37:a1:15:1d:d5:84:75:8c:4f:
06:ae:16:e3:34:c8:07:90:6e:f5:3c:9f:82:f9:ed:b2:f1:29:
a7:75:60:e1:ef:33:09:1e:cb:a3:3b:bd:84:16:2f:26:95:87:
d9:da:70:02:e9:96:6c:71:4a:48:95:f2:76:d1:8f:53:81:49:
e9:16:ad:4d:b6:e5:3a:8b:23:0f:d0:09:6a:ce:50:a7:41:70:
ff:d1:67:a7:7a:2d:f5:2a:63:f9:79:ba:d8:6c:7e:4c:ba:73:
4f:3f:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 10:37:51 2023 by rpki-client on console-ams.rpki-client.org