Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/xvHRbW67wL1Fh1jUSrx_4IZS9_8.roa
File: xvHRbW67wL1Fh1jUSrx_4IZS9_8.roa (raw, json)
Hash identifier: ihkKbAHSHcc14VphIoHPRAwv0mB18P2zIDigSFls438=
Subject key identifier: C6:F1:D1:6D:6E:BB:C0:BD:45:87:58:D4:4A:BC:7F:E0:86:52:F7:FF
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018610BCC5FFC4D0EBCAE62696E0B4CBF858
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/xvHRbW67wL1Fh1jUSrx_4IZS9_8.roa
Signing time: Thu 02 Feb 2023 06:07:32 +0000
ROA not before: Thu 02 Feb 2023 06:07:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 217.113.24.0/22 maxlen: 24
217.113.28.0/22 maxlen: 24
5.134.84.0/23 maxlen: 24
5.134.86.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:10:bc:c5:ff:c4:d0:eb:ca:e6:26:96:e0:b4:cb:f8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Feb 2 06:07:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6f1d16d6ebbc0bd458758d44abc7fe08652f7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:66:34:1c:a3:99:49:e6:76:56:46:ee:b9:
6b:5b:f8:6f:77:b4:dc:3d:8b:fd:cd:c4:04:06:48:
da:64:fb:fc:0b:e3:01:3d:27:41:ea:82:f4:6e:26:
29:7e:64:83:76:e2:1e:83:8f:04:c2:cc:98:4b:a8:
a3:53:92:bf:8b:37:93:d0:89:73:b8:07:1a:c8:42:
2e:92:78:2e:ab:24:c9:51:e8:46:b1:ce:a2:81:27:
f4:28:b2:f3:69:28:b2:a1:29:29:18:a9:9b:6f:84:
78:b1:75:b3:ab:b4:a5:1e:a3:41:b6:36:69:68:a2:
bc:de:db:b1:a7:35:4d:1a:2b:ba:ed:d7:12:34:93:
71:7d:cc:98:83:6c:66:77:53:73:e9:f7:67:8e:ba:
54:b3:2b:5d:50:8e:3e:5b:47:4b:55:93:4d:ff:12:
bb:67:86:d8:12:fb:94:6e:f3:d6:6a:23:d2:33:ba:
c7:23:25:c1:93:92:98:79:7b:0e:81:69:56:5f:64:
f5:44:d7:3c:a2:40:eb:5f:57:21:00:91:57:97:5b:
b2:2d:9f:c3:a9:46:e6:60:c4:bf:cd:5f:09:55:d8:
e7:14:23:03:a8:c3:3c:43:24:e2:20:b0:bb:a7:80:
ac:32:b9:8e:30:08:e5:a1:7d:4f:55:45:7c:51:36:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F1:D1:6D:6E:BB:C0:BD:45:87:58:D4:4A:BC:7F:E0:86:52:F7:FF
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/xvHRbW67wL1Fh1jUSrx_4IZS9_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.84.0/22
217.113.24.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:b4:10:27:34:74:49:57:0e:f4:23:a3:ca:8e:57:ed:eb:30:
ac:0b:ee:c7:eb:11:c3:88:6d:cd:3e:56:ee:dd:24:36:71:f5:
cc:52:59:05:cb:67:14:88:f7:e5:67:67:93:e0:6f:69:30:1d:
e5:77:5c:ba:43:c9:a5:01:4e:72:18:2a:6a:8a:de:07:4e:b9:
80:67:37:ad:cb:7e:56:c2:64:61:de:51:40:cc:ab:46:f0:1b:
0c:da:c2:90:d7:bb:07:db:9a:38:16:49:58:72:26:39:ff:ef:
9f:21:b8:f9:f5:83:40:bf:b3:7a:1f:3c:11:83:bf:71:7a:09:
97:63:9b:28:10:a3:a0:56:15:5f:be:c5:5c:6e:57:7f:fb:a7:
64:6a:a8:21:0f:a2:02:90:41:0b:16:cd:f5:b3:32:cc:da:7c:
86:f0:40:41:95:e3:c6:b8:89:04:ed:75:f4:05:5f:44:98:b1:
5a:37:88:1c:1b:22:b5:26:cc:3f:1e:4c:b7:2e:70:62:72:96:
34:59:b5:44:fa:08:bf:f4:24:e7:6b:8e:e6:e9:73:25:9f:96:
05:29:1c:3a:60:53:36:39:9e:41:39:5e:99:eb:3d:4e:da:ed:
53:ae:9c:c0:fd:d5:8b:70:47:2d:c7:a4:e7:23:cb:b8:71:49:
81:46:14:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org