Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/i5TuP-qZtzsO3nrXb2ald4o0YCU.roa
File: i5TuP-qZtzsO3nrXb2ald4o0YCU.roa (raw, json)
Hash identifier: qTEzGKoeBsGTdel5rZvivPCI0nqv5BO1eBZ+fwmqMPI=
Subject key identifier: 8B:94:EE:3F:EA:99:B7:3B:0E:DE:7A:D7:6F:66:A5:77:8A:34:60:25
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0188F95CCEC536410A8152962F44416A0B51
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/i5TuP-qZtzsO3nrXb2ald4o0YCU.roa
Signing time: Mon 26 Jun 2023 20:19:48 +0000
ROA not before: Mon 26 Jun 2023 20:19:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 272939
IP address blocks: 171.22.166.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f9:5c:ce:c5:36:41:0a:81:52:96:2f:44:41:6a:0b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 26 20:19:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b94ee3fea99b73b0ede7ad76f66a5778a346025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:04:f1:e8:3a:11:08:7f:9e:96:a6:ad:2c:18:
8d:26:92:3c:51:4b:d4:e7:36:5f:05:4e:05:60:fe:
88:cf:5c:ad:50:f0:6e:55:3e:cd:5b:8c:66:e4:b7:
4c:bb:ae:05:65:1c:16:43:30:31:af:d0:e8:12:5d:
db:a1:bc:74:e0:81:0b:72:12:ac:80:34:db:91:c8:
c4:9c:e3:32:58:a9:ef:b8:5a:e5:05:32:9d:07:cb:
62:46:c3:2c:dc:22:1f:48:82:e3:49:8b:d1:54:59:
f4:3e:45:2d:57:f2:24:30:30:e8:24:26:d3:a4:7c:
cb:e4:d7:81:f3:ee:66:76:59:90:e0:cf:6e:fd:fc:
bf:33:7e:ef:b9:31:71:ae:e4:50:10:e2:1b:10:e0:
d8:ad:a6:a3:d4:15:5c:07:ba:b8:c7:33:b3:64:31:
5a:23:c0:07:57:14:c0:20:33:cd:0c:90:a0:4d:79:
5b:e7:ff:35:e6:5e:71:d5:a7:9e:7a:3b:44:2b:0e:
01:47:e9:56:63:c4:af:56:5c:b6:5c:b6:fd:49:6e:
b8:f4:f6:26:c1:96:f4:53:fd:fe:f9:11:07:56:e7:
bc:bc:8c:02:12:85:7f:6e:fa:d5:cc:8b:df:14:c3:
61:bd:af:ea:d2:cc:91:a8:05:08:92:5c:80:6d:40:
f4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:94:EE:3F:EA:99:B7:3B:0E:DE:7A:D7:6F:66:A5:77:8A:34:60:25
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/i5TuP-qZtzsO3nrXb2ald4o0YCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.166.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:7b:1c:01:4b:a3:93:63:74:5f:ba:71:ab:09:11:cb:13:94:
21:da:fa:fe:d4:05:17:24:1a:28:86:9e:28:86:ee:fb:f6:c0:
2b:e0:2c:12:b3:27:2f:5d:45:6e:d6:bf:03:4f:63:41:b3:cc:
c5:4d:c7:df:b1:2f:02:90:3e:c7:11:35:14:90:21:13:68:3b:
f8:67:d5:8e:38:38:b7:e7:7f:0c:f9:12:ff:c9:10:56:28:4d:
52:f1:fc:64:8a:b4:40:6f:4e:90:44:13:80:93:f0:09:b2:59:
2d:68:27:03:46:cd:bc:0c:8a:e2:11:aa:2f:26:cd:2a:ca:10:
d0:ec:37:e8:02:30:9b:9d:5c:aa:9d:03:75:aa:53:4e:a3:be:
1b:7b:26:7c:70:a8:18:81:35:6a:41:b3:07:80:b1:45:5e:bc:
39:51:8d:53:77:27:10:0f:5c:23:a8:fd:69:8a:3a:17:85:3e:
25:9c:4a:81:a0:d9:50:f8:43:f6:f7:6f:be:6d:29:0b:7a:5e:
51:46:c5:c0:0b:ef:0f:35:04:72:51:c3:71:fa:cf:a8:18:52:
af:f4:7f:c7:79:30:79:17:76:fc:5e:ce:02:c2:6d:52:3a:e8:
59:30:85:12:30:79:62:b3:7a:88:44:a4:c2:48:b5:43:df:66:
4d:04:df:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 3 11:49:30 2023 by rpki-client on console-ams.rpki-client.org