Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/DuiygljV69cXC5H7hIptkFw7EiE.roa
File: DuiygljV69cXC5H7hIptkFw7EiE.roa (raw, json)
Hash identifier: 9JTbCUq1x0rKYE7el7D/QnFqR+FREqxcnBsj1MM8QEo=
Subject key identifier: 0E:E8:B2:82:58:D5:EB:D7:17:0B:91:FB:84:8A:6D:90:5C:3B:12:21
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 0189721B69D1408387BEC0CA82021E3C941A
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/DuiygljV69cXC5H7hIptkFw7EiE.roa
Signing time: Thu 20 Jul 2023 07:02:26 +0000
ROA not before: Thu 20 Jul 2023 07:02:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207106
IP address blocks: 147.234.8.0/24 maxlen: 24
147.234.10.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:1b:69:d1:40:83:87:be:c0:ca:82:02:1e:3c:94:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jul 20 07:02:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ee8b28258d5ebd7170b91fb848a6d905c3b1221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c6:05:89:e5:4d:4c:e1:7b:7f:08:01:ff:02:
f1:f4:ae:e1:3f:a7:8c:8e:e9:7b:66:69:58:e8:19:
7b:ce:9e:1b:c6:6c:d8:7d:b4:ec:18:ec:13:85:68:
06:44:82:0c:94:91:fe:22:4d:37:8d:5d:12:b3:6e:
1f:b4:3a:9c:d4:e4:71:36:a8:19:9f:74:24:d7:19:
ce:b3:bd:6e:bf:82:bf:9c:18:8e:73:62:c6:53:08:
ee:ab:a8:f3:d3:d9:d6:41:65:ce:89:8e:f0:f6:ac:
2a:9b:1b:10:a8:4f:7a:00:41:83:eb:1f:24:ac:57:
86:ed:e3:66:ca:1d:94:f0:94:c4:2f:bb:51:31:c5:
78:00:10:35:f3:4a:ea:bb:90:ba:5a:07:02:00:5b:
d0:1b:6a:d8:0d:e4:1c:cf:b8:9e:35:5d:7a:80:c8:
05:c5:55:ab:2f:8c:2f:43:59:b1:1c:fe:ef:93:1e:
7c:4c:b6:30:82:e0:0e:1b:fb:fc:ba:f0:48:8a:56:
e6:91:af:18:49:65:e8:3c:98:ff:a2:ec:ad:8b:ab:
10:79:82:97:ea:41:2e:c1:05:b5:1b:3a:d0:9e:d1:
e1:10:94:69:e1:62:f7:77:00:a7:ff:89:1e:0c:9e:
05:5d:da:c8:8f:fd:b3:c1:55:93:c1:11:95:57:96:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E8:B2:82:58:D5:EB:D7:17:0B:91:FB:84:8A:6D:90:5C:3B:12:21
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/DuiygljV69cXC5H7hIptkFw7EiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.8.0/24
147.234.10.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:c5:d5:96:e1:f1:95:fc:06:bd:71:d7:bf:c0:5f:c2:a0:91:
a1:bb:14:99:67:63:b0:b3:a4:1b:ee:c1:f3:cf:34:bf:8c:61:
29:4c:b0:96:5d:e6:54:7e:50:34:12:29:fc:73:9f:cf:57:fc:
38:57:e6:16:70:30:a1:9a:03:f1:aa:67:a5:e8:b9:47:e2:ef:
f2:a4:a0:a3:d3:b0:23:6a:01:c6:87:30:f0:1e:11:b6:2c:27:
9a:85:96:1c:54:3d:17:c4:99:a2:31:97:67:54:f1:40:f5:3f:
04:dd:ae:6c:91:79:8e:2c:c7:94:ac:77:96:3b:8f:32:18:07:
cf:35:9f:c0:2c:e6:96:96:66:0b:b5:38:97:f8:05:7f:ce:3a:
2b:99:cd:0b:fe:fc:dc:6b:91:01:e6:16:53:6a:9b:4c:ba:e8:
33:72:d1:2f:3e:4c:ee:00:51:d3:a1:3e:ca:9a:54:da:20:ad:
5f:8a:6d:2c:ca:99:2f:2a:46:7e:f1:04:fe:96:26:d3:64:8a:
42:eb:d5:88:5f:80:b0:b1:76:c8:01:c4:dd:1f:2a:71:2b:00:
3e:f5:77:e9:77:33:43:da:bd:9b:bf:cf:10:ac:82:2d:c8:e1:
3c:dd:58:7c:6a:79:fb:26:58:e6:4e:91:b8:53:2b:ae:36:58:
fe:89:a2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 25 11:28:57 2023 by rpki-client on console-ams.rpki-client.org