Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/siEp7zagfK_piOQbQxwdkjVqKCg.roa
File: siEp7zagfK_piOQbQxwdkjVqKCg.roa (raw, json)
Hash identifier: FwO6Xdq19K9ad9FWk4bhb8fXagyCmWY8Su0VrxGcHU8=
Subject key identifier: B2:21:29:EF:36:A0:7C:AF:E9:88:E4:1B:43:1C:1D:92:35:6A:28:28
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0185809A6AAD7546007EC18CFDABA4F9D503
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/siEp7zagfK_piOQbQxwdkjVqKCg.roa
Signing time: Thu 05 Jan 2023 06:24:41 +0000
ROA not before: Thu 05 Jan 2023 06:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210147
IP address blocks: 217.113.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:80:9a:6a:ad:75:46:00:7e:c1:8c:fd:ab:a4:f9:d5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 5 06:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b22129ef36a07cafe988e41b431c1d92356a2828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:56:d1:7f:47:bc:f5:9c:47:a5:9d:4a:a6:
37:ee:8d:45:c7:01:0d:f7:c4:1e:2e:6f:de:5f:0b:
59:c4:35:f1:f1:bb:67:70:28:e3:d2:b7:ea:94:0d:
02:72:66:7f:ff:c6:13:2a:60:66:26:b9:eb:5d:64:
8e:72:85:23:11:67:73:40:6f:f3:ca:0b:c9:67:b7:
36:85:4d:53:55:bb:e7:2c:1c:9a:2c:17:7e:bf:43:
9b:33:be:a0:76:d5:39:f5:8d:29:88:59:da:1b:dd:
28:91:81:b4:9a:1e:66:5f:bd:ee:86:48:86:9a:bd:
2f:10:bb:75:5b:6c:41:a2:bc:93:7d:5f:61:e3:fa:
d8:ee:b2:b7:8c:47:f6:7b:f6:4b:25:a6:1c:3e:87:
ba:d8:1e:0e:fe:ba:6c:df:9e:67:55:26:71:41:80:
b4:cf:5f:78:9d:42:f1:33:dc:cb:55:c0:0d:c9:db:
54:30:d0:30:19:1b:de:6a:41:a8:a9:49:bf:ef:6d:
63:59:d1:cf:d0:25:fd:b2:e7:c9:e5:dd:fd:d8:df:
95:c1:8c:85:5d:73:f6:5c:83:ed:5e:87:5e:81:ef:
25:06:f9:73:2c:46:e1:54:3e:0c:ae:e4:df:f6:b6:
99:a5:0b:bc:06:be:54:68:b0:05:45:e5:18:c3:8b:
fe:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:21:29:EF:36:A0:7C:AF:E9:88:E4:1B:43:1C:1D:92:35:6A:28:28
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/siEp7zagfK_piOQbQxwdkjVqKCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:9d:14:bf:58:e8:0b:91:dd:56:12:9b:4e:7c:4b:ad:96:83:
67:66:2a:cd:78:84:bb:cc:84:58:14:77:09:5c:1f:57:2f:78:
dd:9f:da:35:a9:6c:2b:4a:28:9d:17:3b:b8:e8:cc:3b:b9:57:
3f:50:41:35:47:73:06:7c:23:a3:65:57:81:38:a5:1d:61:50:
09:ca:c8:75:da:f6:5b:35:3f:80:56:c1:c7:18:31:ec:3b:f9:
b9:83:7f:9a:42:e1:8b:72:a1:30:37:1e:e6:9d:4d:73:1c:7a:
93:ed:ff:11:d7:ea:0b:e1:bf:b9:a5:36:07:31:51:2c:1f:a2:
6e:46:98:15:01:94:5e:cc:76:f6:75:c6:be:6e:ae:a6:dd:a4:
82:7a:a3:c3:38:8b:ba:db:ec:67:be:da:b4:a8:9e:51:43:2d:
d7:1e:a7:00:f4:1b:f6:6f:40:9d:02:da:4e:fd:68:64:02:b6:
45:a0:a5:f7:9a:e3:b7:38:89:00:e9:7f:9c:f2:36:3c:ad:32:
75:39:92:25:50:cb:f0:ca:0e:e4:f0:a8:4b:af:1f:a9:5f:b7:
a9:4d:de:da:fc:d1:26:ad:32:a6:41:27:22:db:95:90:b8:1a:
eb:a5:6d:c1:f3:7a:61:c8:f6:53:7f:07:eb:7c:b0:b7:37:2d:
10:6d:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org