Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/wLY0a-oQ0MfN_RzEQII39CMfufc.roa
File: wLY0a-oQ0MfN_RzEQII39CMfufc.roa (raw, json)
Hash identifier: GOjcSoW5iv6PyKqLeCprx4nFinCLZ2S/dzxT4hDSgyc=
Subject key identifier: C0:B6:34:6B:EA:10:D0:C7:CD:FD:1C:C4:40:82:37:F4:23:1F:B9:F7
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 018572B425D30ABF8EBCC18B7571F15A718F
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/wLY0a-oQ0MfN_RzEQII39CMfufc.roa
Signing time: Mon 02 Jan 2023 13:38:06 +0000
ROA not before: Mon 02 Jan 2023 13:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 171.22.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:25:d3:0a:bf:8e:bc:c1:8b:75:71:f1:5a:71:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jan 2 13:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0b6346bea10d0c7cdfd1cc4408237f4231fb9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:15:f1:d7:b9:5f:6d:c1:e3:48:34:16:b8:
da:23:67:c6:14:86:69:09:34:c1:17:ca:8b:99:1f:
7f:8c:71:b9:4a:e2:78:44:d5:08:1c:ea:e3:14:14:
c7:5d:7c:87:9a:f8:57:16:ab:f9:0d:a5:18:28:da:
54:1b:d3:be:88:9b:21:5e:2c:7a:92:8a:d0:e0:c5:
8b:be:ae:17:f1:29:46:9d:52:74:24:df:26:05:3d:
26:e6:68:5a:32:db:a4:6b:c3:d2:3d:74:fb:d2:9e:
70:4c:e3:5b:ab:2a:57:fa:7e:d2:03:58:30:24:23:
26:3a:02:75:80:51:63:81:de:86:b2:fe:6e:34:75:
8c:4d:7b:ce:a1:91:c3:c5:48:19:ee:aa:a5:74:cb:
cf:c6:bb:49:08:23:78:f8:db:d2:68:eb:57:45:18:
cb:94:40:2e:9b:f7:e2:ea:fd:64:0d:8a:dd:6c:db:
76:1e:e4:43:09:6b:49:5c:be:93:d1:34:a4:9f:2a:
60:32:4b:aa:f9:36:bb:c5:a2:c5:61:0f:39:ed:80:
93:8e:84:be:b2:b6:1c:cb:80:f3:b6:4d:39:22:87:
8f:4a:98:7a:b9:34:f4:2f:fa:36:8a:ba:ce:f5:37:
af:91:fd:98:7f:32:12:08:73:52:56:0d:3f:5f:f0:
94:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B6:34:6B:EA:10:D0:C7:CD:FD:1C:C4:40:82:37:F4:23:1F:B9:F7
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/wLY0a-oQ0MfN_RzEQII39CMfufc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.147.0/24
Signature Algorithm: sha256WithRSAEncryption
09:3f:88:40:3b:be:83:49:d8:3a:25:df:86:ac:b5:ab:ac:2e:
63:ac:da:2a:db:ef:ba:10:62:a8:fa:eb:15:da:eb:22:3b:5a:
0c:8e:6d:2a:b1:6c:42:35:96:d7:21:98:c3:42:8a:ae:21:c4:
11:d0:1b:a2:df:ca:72:da:e9:44:8d:bc:8f:5e:2f:98:67:d5:
39:78:2a:31:cc:1f:4a:5c:d3:50:f7:a3:be:c0:ac:d3:26:64:
e5:81:f0:c6:60:f1:e7:15:3c:7c:f2:6c:14:5d:93:d7:6f:55:
65:35:9c:8d:df:7d:7e:1e:63:25:80:28:96:7c:c7:df:0d:ed:
a5:7f:74:e4:ea:a1:1c:55:0b:a7:87:d0:af:c2:2d:df:9f:d8:
0b:86:8d:52:f0:f7:0a:69:f9:ae:92:cb:8d:b3:63:f2:df:41:
e5:ef:f6:0f:41:46:80:d6:e9:e9:bf:a8:51:1a:d7:06:fb:91:
d4:ed:90:b9:a2:6d:22:97:f8:ec:b7:5c:c6:a7:af:8c:2b:65:
c2:43:8e:d5:e0:05:98:39:8e:18:67:96:0a:5a:57:ea:2b:e6:
21:63:4e:20:16:b7:8e:d3:4b:ba:d3:70:78:73:db:f5:cb:aa:
8a:78:58:fc:f8:b6:fd:83:6c:63:a2:2e:6b:52:d0:73:c7:e3:
d2:3c:0a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:42 2023 by rpki-client on console-ams.rpki-client.org