Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/NY77kRBDLyf473aWjhvAUcjr2uU.roa
File: NY77kRBDLyf473aWjhvAUcjr2uU.roa (raw, json)
Hash identifier: Bh9LRu5a0JrQmzYCq3LZCWGxB9lxyfyUldC9WS1T1AE=
Subject key identifier: 35:8E:FB:91:10:43:2F:27:F8:EF:76:96:8E:1B:C0:51:C8:EB:DA:E5
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 018572B42775A3D3311DB05257D8C3E8E291
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/NY77kRBDLyf473aWjhvAUcjr2uU.roa
Signing time: Mon 02 Jan 2023 13:38:07 +0000
ROA not before: Mon 02 Jan 2023 13:38:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 171.22.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:27:75:a3:d3:31:1d:b0:52:57:d8:c3:e8:e2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jan 2 13:38:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=358efb9110432f27f8ef76968e1bc051c8ebdae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:db:9b:52:90:b3:f1:7b:81:75:fc:2b:30:
d6:cb:10:7b:97:e2:14:f7:2f:eb:d4:93:16:01:04:
16:93:c2:39:2f:fd:4c:83:55:08:02:d2:6f:4d:42:
ef:56:9b:11:2d:05:3a:5c:73:c6:c7:b8:a9:60:18:
36:e7:2d:11:7f:c0:b2:74:2f:32:7b:57:da:d8:58:
b9:56:87:20:72:8a:b7:39:65:1d:1a:0e:8c:59:98:
32:e3:f0:bd:96:23:51:16:d3:6a:c9:2d:a9:6a:cd:
4f:0d:ef:22:79:27:61:3e:8f:60:d2:5e:4c:d4:39:
9f:65:09:84:e8:74:fa:02:e7:a4:80:50:7a:19:1b:
1f:76:04:a9:8f:6b:1d:c4:d3:1b:90:13:ae:4a:a4:
ae:79:ac:98:ce:9b:35:30:d6:7c:ed:74:22:f9:41:
41:8d:71:e9:8c:37:18:05:34:60:a3:35:b4:3c:a8:
39:a6:5a:54:a8:7e:96:7d:28:5f:19:45:18:82:95:
bb:0a:63:f4:f0:40:99:f6:fd:90:86:4c:c5:d4:1d:
01:75:60:42:ed:a3:54:87:ef:2d:6c:95:b3:df:11:
55:3e:a5:a7:f0:91:1c:84:80:24:16:2d:4d:29:17:
8b:e3:4e:53:ed:0f:47:32:3d:05:27:01:cc:f7:8f:
f3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8E:FB:91:10:43:2F:27:F8:EF:76:96:8E:1B:C0:51:C8:EB:DA:E5
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/NY77kRBDLyf473aWjhvAUcjr2uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.144.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:45:1c:c0:f5:e4:bf:a1:20:ef:9f:9c:98:60:d8:68:27:dd:
44:94:5e:27:1c:91:87:b1:bc:6b:13:24:9f:b4:0a:6f:bb:2d:
94:8f:b4:80:71:fc:6e:49:ca:43:1b:c7:eb:61:b3:66:5a:37:
6d:87:a5:8f:a2:6a:1e:79:0d:df:36:de:d2:ad:be:21:2e:71:
4c:72:5e:fb:7c:55:05:19:ae:4d:f0:32:2e:d7:c8:f3:66:01:
b8:a7:34:e6:99:ec:8d:02:43:57:74:5d:84:d8:ec:23:7e:a2:
11:c7:a0:eb:03:40:ec:f8:5e:69:ed:d6:f5:bd:4d:93:41:2d:
ed:5f:75:ac:68:c4:5d:97:d0:09:62:c1:db:87:d0:36:fd:49:
7c:d2:b3:ef:ea:ce:ba:9e:33:9f:1d:17:5a:e3:50:25:a9:5a:
45:63:fb:88:ae:d9:af:44:78:87:b0:d7:c2:1a:5f:0b:8a:0f:
e4:a8:7a:15:54:ab:6e:0b:a2:66:d9:7a:96:18:67:79:28:f7:
34:75:fb:c6:b6:2f:3f:1c:06:a4:82:66:0f:9b:84:f3:24:80:
bf:d0:ec:b0:4f:99:06:51:ce:37:69:5c:24:c7:65:02:d3:08:
3c:b6:d6:e4:50:3b:a9:d7:35:9d:46:c7:2f:75:cb:45:16:4d:
75:f9:1d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org