Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/iebnJKZF4rVC8TruLytfrsVZIXc.roa
File: iebnJKZF4rVC8TruLytfrsVZIXc.roa (raw, json)
Hash identifier: 0wSc6EZVIslMv3P5cx8m8pLhXNCyZnslFSWztvviOx8=
Subject key identifier: 89:E6:E7:24:A6:45:E2:B5:42:F1:3A:EE:2F:2B:5F:AE:C5:59:21:77
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0185B14B1D9446B7F30BF04DFCD40ABA1903
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/iebnJKZF4rVC8TruLytfrsVZIXc.roa
Signing time: Sat 14 Jan 2023 17:19:28 +0000
ROA not before: Sat 14 Jan 2023 17:19:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 171.22.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b1:4b:1d:94:46:b7:f3:0b:f0:4d:fc:d4:0a:ba:19:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jan 14 17:19:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89e6e724a645e2b542f13aee2f2b5faec5592177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9e:4b:b0:45:e2:fc:e4:f5:45:30:24:7f:81:
4a:29:11:84:ec:5a:20:ad:60:d4:61:01:3e:b8:61:
42:9d:e0:fb:16:5d:0e:62:8d:af:ef:19:15:17:9f:
a2:96:5f:95:14:9b:e7:46:e6:23:a7:1e:51:c3:14:
7e:dd:2c:0d:11:a2:63:aa:0e:a7:dc:a3:25:17:e8:
b5:6a:db:21:9e:8d:86:12:1b:ee:17:64:1a:7c:e2:
36:bb:ef:70:f3:91:cc:80:91:91:1d:06:0a:d5:05:
e9:11:ec:8d:ff:54:01:67:87:f8:be:68:fc:ba:22:
ef:f3:32:cd:6b:7e:f0:71:4d:e7:08:4f:c8:3d:be:
ba:de:86:6b:b1:32:ba:f5:9a:f3:07:d5:0e:1b:38:
91:09:2c:4e:b0:80:17:e4:5f:e0:a7:c0:83:6f:60:
01:92:12:8c:cc:b7:e8:f9:71:35:19:b0:76:78:0f:
90:4e:0b:50:7b:85:e1:bc:d7:d7:5c:5d:02:73:91:
8c:8e:b2:07:cc:e1:59:3d:8a:51:b9:2c:ae:ab:6a:
6d:09:e6:7e:61:37:c9:7f:34:a0:07:2c:07:d7:c7:
ec:44:a4:11:6d:29:2c:d8:af:da:e0:21:d7:b6:e6:
08:57:3c:89:81:ed:89:5d:80:09:f3:bc:f4:b2:65:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E6:E7:24:A6:45:E2:B5:42:F1:3A:EE:2F:2B:5F:AE:C5:59:21:77
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/iebnJKZF4rVC8TruLytfrsVZIXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.147.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:cf:c6:66:f8:ed:c4:28:79:70:81:67:a9:4f:b6:23:39:d4:
90:f1:84:02:96:39:02:89:d9:d5:b7:b6:25:ca:75:50:6e:cb:
8e:fe:c5:2e:62:90:10:8f:58:93:0f:77:b5:6b:cb:7b:e8:a4:
db:84:ac:c1:58:d6:a8:1c:90:2c:df:d6:2e:e8:16:59:5c:81:
eb:97:52:41:a9:8f:86:ab:f0:a6:73:10:2e:7b:f4:f9:00:27:
74:9b:97:5a:ac:6a:16:cb:b8:fd:b0:ae:fa:44:36:af:dc:c7:
32:74:02:ba:2e:52:e5:d7:5c:29:4e:89:81:5b:51:4a:10:7c:
a4:60:8e:be:7e:f5:95:d0:5b:92:0d:6f:5a:62:34:15:5f:60:
f1:48:ab:f0:20:92:a9:eb:51:8b:09:73:cf:76:05:7e:a9:2e:
26:f2:6c:14:ce:95:6c:1d:70:aa:76:a9:aa:03:ae:4a:30:22:
3e:9d:af:65:f6:e7:58:df:14:04:9d:9f:80:56:d9:ca:36:7c:
57:40:f5:e9:c3:49:17:5a:06:2a:36:2b:ec:ef:ff:a3:3e:87:
50:bf:47:5d:1b:a5:56:b0:ed:63:bb:57:d5:88:f9:83:a5:be:
0b:13:68:bf:bf:3a:0b:ed:bb:77:73:8d:75:30:da:0f:1e:48:
65:c5:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org