Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/itoLHaTjI8NyKbMKvTX245KKQS8.roa
File: itoLHaTjI8NyKbMKvTX245KKQS8.roa (raw, json)
Hash identifier: YnZjtxBcUIm4Z364tlHIWVmdXGKL+hil+7CrKStOSrA=
Subject key identifier: 8A:DA:0B:1D:A4:E3:23:C3:72:29:B3:0A:BD:35:F6:E3:92:8A:41:2F
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 0185710BEFDEDFCC45C811C2306286BE880C
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/itoLHaTjI8NyKbMKvTX245KKQS8.roa
Signing time: Mon 02 Jan 2023 05:54:45 +0000
ROA not before: Mon 02 Jan 2023 05:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42947
IP address blocks: 213.181.78.0/23 maxlen: 23
176.57.98.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:ef:de:df:cc:45:c8:11:c2:30:62:86:be:88:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 2 05:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ada0b1da4e323c37229b30abd35f6e3928a412f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:82:54:3d:80:af:5e:e3:ca:7a:cf:4b:e0:04:
7d:3e:b8:96:2a:96:10:08:43:c5:9c:00:50:34:ca:
eb:cb:2b:f4:27:89:9f:a2:e5:c5:41:61:d0:59:bd:
5a:2d:d4:3c:8a:44:8b:6b:f4:4e:58:af:c8:84:1e:
bf:c8:94:6f:20:62:bc:63:4f:02:61:73:90:d0:ad:
90:86:25:2f:17:29:d3:0b:e7:52:03:da:bd:4d:22:
09:2f:e8:86:a8:25:66:e1:a1:aa:52:84:a6:5e:bd:
78:a9:75:31:a7:d3:20:91:97:26:c2:a0:b6:63:71:
fa:72:2b:f7:b2:c3:59:51:44:ea:95:3b:56:41:3e:
6b:ed:4a:25:cd:a1:b3:78:1e:6c:ea:5c:7e:7e:64:
20:04:ee:93:21:48:7e:02:21:5b:cd:e1:17:9f:2e:
4a:03:19:cc:8d:38:81:3b:85:b5:13:70:92:03:7e:
77:2f:f3:48:95:7f:7b:03:13:d1:97:39:4a:84:51:
26:46:af:80:69:e9:36:bf:10:72:ca:32:d4:42:7b:
13:40:39:20:47:8a:4b:bc:3e:62:04:d1:76:6b:fe:
4f:c5:55:26:e5:85:83:2f:db:7b:9c:99:cc:e3:49:
04:81:48:10:89:54:e2:7c:9d:b6:2f:98:a2:95:f7:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DA:0B:1D:A4:E3:23:C3:72:29:B3:0A:BD:35:F6:E3:92:8A:41:2F
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/itoLHaTjI8NyKbMKvTX245KKQS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.98.0/23
213.181.78.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:ae:4d:2f:24:81:fb:e8:26:ee:a5:50:02:8c:94:48:54:2c:
ec:2d:94:24:a9:1c:b5:26:f4:b0:b4:ac:11:f3:3e:dc:4f:1a:
f6:f4:33:0c:0d:21:1b:6c:01:59:73:43:d3:6d:7f:ff:ac:26:
35:37:dd:59:7a:7f:92:16:be:60:6d:ec:47:8c:a9:ec:c9:54:
37:37:10:75:1a:98:02:aa:9b:a5:41:e9:18:95:22:17:2a:28:
1a:73:c6:36:92:50:d1:bd:76:48:45:c9:ac:0c:1f:d1:e6:76:
e8:47:bb:24:7e:0d:2b:4c:27:7f:3a:42:82:bb:6c:44:cb:e4:
de:8b:9f:b8:14:2c:d0:32:cd:9b:92:c1:cb:0c:b0:49:3c:f1:
d3:77:9d:4d:39:25:53:de:d9:dd:61:d1:ba:81:b5:96:93:aa:
9b:18:a9:99:ae:a5:51:94:cc:c3:5b:43:c6:52:5f:92:29:f1:
0a:d0:a1:96:b1:87:b0:86:97:46:7a:24:36:88:f2:1d:ee:91:
ea:e3:96:dd:d8:e4:63:34:92:64:d3:87:e0:82:04:f3:2b:dc:
45:db:ff:fd:73:45:d1:67:76:bb:e6:35:15:10:8d:a1:58:2d:
cc:76:11:13:ee:b5:0f:98:4c:da:c7:5c:17:b3:e0:d6:0b:72:
02:f0:fd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:53 2023 by rpki-client on console-ams.rpki-client.org