Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/jLf2WOnqtoqa4mm1v8d7t6yNIo4.roa
File: jLf2WOnqtoqa4mm1v8d7t6yNIo4.roa (raw, json)
Hash identifier: AT1LBt7ptK/cilWjCRgaeMdykKg6r9wnJFMYMuRuBjM=
Subject key identifier: 8C:B7:F6:58:E9:EA:B6:8A:9A:E2:69:B5:BF:C7:7B:B7:AC:8D:22:8E
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0186745B7A5BBA599788825961AEC0056DCD
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/jLf2WOnqtoqa4mm1v8d7t6yNIo4.roa
Signing time: Tue 21 Feb 2023 14:23:17 +0000
ROA not before: Tue 21 Feb 2023 14:23:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49353
IP address blocks: 171.22.164.0/22 maxlen: 24
2a05:a780::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:5b:7a:5b:ba:59:97:88:82:59:61:ae:c0:05:6d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Feb 21 14:23:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cb7f658e9eab68a9ae269b5bfc77bb7ac8d228e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:7e:2c:92:4a:61:d3:8a:74:25:7f:4f:d8:
0d:39:64:e9:25:60:d9:1b:41:15:98:b7:5d:b5:87:
39:e3:83:7a:30:e4:3c:91:30:27:cc:95:aa:e9:94:
e6:5c:e5:87:b9:34:0c:ca:d5:e3:05:b9:fc:13:bd:
19:eb:dd:c9:37:d9:17:16:61:45:d6:d7:a6:78:ab:
0b:4b:8f:b9:4c:3d:eb:25:d8:f3:44:5c:d8:ca:34:
68:f8:dc:10:17:f2:c0:1c:40:24:3f:d8:8c:05:7e:
f0:6a:f9:19:bb:09:ba:50:cf:2e:de:42:32:f2:eb:
e3:8f:60:63:89:4c:3d:58:aa:50:87:a4:c6:63:e5:
6a:b6:d7:17:13:62:f5:33:1f:14:dc:dc:94:7c:52:
5b:5f:8d:91:01:b2:32:51:8f:39:70:d1:7f:7a:dc:
fc:8a:f7:ac:54:d7:76:33:09:3f:88:cf:f6:6b:b3:
a3:bc:e6:31:4f:4f:d3:d8:41:74:aa:f6:72:7f:c5:
19:45:2a:cc:e5:5e:2e:32:d4:e6:d9:1d:ce:40:14:
e4:11:d3:63:da:e1:b9:68:12:cc:b2:45:3c:0f:cf:
2e:09:a4:4a:f0:5b:ea:ee:d0:61:b7:96:ae:46:18:
7f:54:3a:18:72:1f:b2:55:2c:b8:34:5a:2e:df:21:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B7:F6:58:E9:EA:B6:8A:9A:E2:69:B5:BF:C7:7B:B7:AC:8D:22:8E
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/jLf2WOnqtoqa4mm1v8d7t6yNIo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.164.0/22
IPv6:
2a05:a780::/29
Signature Algorithm: sha256WithRSAEncryption
26:ce:55:5e:34:a2:52:47:87:d5:a4:a1:4c:1a:b3:51:90:48:
8f:ff:14:bd:c9:ff:d2:cf:83:1a:4e:31:5a:4f:98:89:82:90:
01:4b:02:66:ff:07:d1:a0:2a:77:bf:ae:fa:1c:bf:92:1e:f8:
39:da:6d:1b:d3:72:8c:9c:4e:60:d9:60:87:ff:12:ed:4b:5f:
1a:25:0c:17:7b:17:17:60:02:8b:a5:6a:9c:74:95:5f:e2:e6:
01:6b:95:9a:e0:85:1f:99:88:ea:73:8b:e2:d2:47:47:e1:4b:
4e:26:c3:f2:54:9c:f7:d3:be:5c:2c:c5:6b:cb:e3:70:77:18:
03:d5:d5:22:96:22:92:bb:88:37:8e:0e:d2:f0:66:d5:ae:9e:
57:28:20:ba:c7:8c:e8:98:bd:0c:f7:e7:73:8e:09:8e:3a:fb:
b6:42:97:e4:93:1c:7c:3a:c7:b6:24:1f:36:1c:d1:ae:fb:29:
9f:95:8d:72:f6:f0:3c:0a:ec:be:90:f0:86:35:44:97:61:74:
07:b0:89:fd:62:39:86:74:2f:0a:0e:0f:4e:52:d8:c3:ff:41:
70:67:7b:da:ea:ba:c7:22:a4:91:9d:08:89:a5:9e:7e:71:33:
49:76:2f:6f:81:62:8c:dc:9b:17:e8:33:58:7e:87:48:44:fe:
2a:11:3e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org