Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/JsvXq7xWbUy2mktOeVQYVFCQCJI.roa
File: JsvXq7xWbUy2mktOeVQYVFCQCJI.roa (raw, json)
Hash identifier: lio1BcDV166fblVEj5BvXBjWf/+5mO0vBSPxRoQR3hc=
Subject key identifier: 26:CB:D7:AB:BC:56:6D:4C:B6:9A:4B:4E:79:54:18:54:50:90:08:92
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01856F14EABD83785DFA436498BEAF64364F
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/JsvXq7xWbUy2mktOeVQYVFCQCJI.roa
Signing time: Sun 01 Jan 2023 20:45:19 +0000
ROA not before: Sun 01 Jan 2023 20:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60713
IP address blocks: 213.199.246.0/23 maxlen: 23
82.160.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:ea:bd:83:78:5d:fa:43:64:98:be:af:64:36:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 20:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26cbd7abbc566d4cb69a4b4e7954185450900892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:2b:66:3a:03:0c:c6:a1:c1:9d:c3:d0:2c:
78:43:3b:e9:1f:ed:3f:bd:49:b6:4c:a2:ae:19:89:
bb:40:2f:88:12:5c:35:db:d6:16:04:50:11:de:97:
9e:14:96:fb:ee:61:8f:b8:c7:b3:54:88:6d:8a:2c:
92:74:dd:8b:12:25:56:04:c0:53:a8:cd:bb:00:68:
b7:57:c4:8b:f0:eb:5f:aa:b9:96:08:97:65:cd:0d:
14:45:78:b5:a6:0e:88:c3:3a:33:cf:12:aa:78:03:
65:f6:98:37:f5:fa:20:7d:3b:c8:f5:5c:53:f8:0b:
26:27:16:39:7e:0e:c1:21:a1:41:00:b4:e0:65:3d:
e9:5c:61:cb:db:ba:b7:ee:fe:e3:dc:be:0b:b8:ed:
4d:50:f2:fd:6f:ca:4c:73:31:0b:ff:cb:de:79:4a:
af:38:7d:55:f0:9d:b8:59:f8:c8:ad:7c:d5:c0:f1:
7b:1d:7f:10:02:33:7c:45:c7:f5:b8:d8:04:43:34:
b2:5a:c3:39:c3:d8:c1:97:dd:2e:7d:5f:c3:81:d5:
12:db:f8:8f:fe:58:dc:0b:65:90:c8:32:13:da:02:
8d:eb:95:72:d2:99:8f:97:2a:15:4c:00:f1:38:1e:
ef:e0:89:6a:2f:e8:bf:63:d7:2f:72:99:21:e9:f5:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CB:D7:AB:BC:56:6D:4C:B6:9A:4B:4E:79:54:18:54:50:90:08:92
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/JsvXq7xWbUy2mktOeVQYVFCQCJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.50.0/24
213.199.246.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:05:bc:7e:eb:bf:b9:f0:d7:b8:aa:d7:09:06:82:24:d0:9e:
26:5d:2c:0a:ce:e0:11:54:8e:ec:47:d1:08:e5:7f:bb:56:ae:
84:f3:75:b0:09:09:25:fb:08:55:a0:26:e9:82:c5:ba:a6:6a:
fa:b3:14:f0:d8:b4:95:73:09:78:5b:79:2f:54:5a:5c:06:d9:
61:9b:00:3c:c7:f3:0f:39:50:d9:0a:7e:d2:94:f9:d0:8e:15:
c0:9d:e1:e1:09:31:c3:e8:f8:c1:27:b3:5a:6f:48:95:79:18:
ef:23:e6:f5:e9:74:5f:bf:3d:d3:cf:5f:0c:dd:33:bb:2e:8d:
c5:b1:b0:3f:93:ce:f3:f2:16:a9:9a:ae:2d:26:e0:88:4c:99:
37:95:bc:62:80:4e:94:b4:39:95:21:60:bf:fe:3f:45:c8:46:
a8:1e:35:00:4f:4b:dd:d1:1f:ca:5e:e4:1d:ec:5d:b1:61:13:
fc:03:bc:6f:98:56:fd:62:24:7b:92:46:e1:a7:46:a6:7c:8c:
a8:28:21:fe:c0:57:df:b2:02:9d:64:11:95:b3:0a:d0:7a:23:
bb:46:7f:d2:de:48:6c:53:f4:cd:35:a5:3c:78:dd:eb:bf:7d:
19:e5:61:5f:19:f1:fd:f3:9a:be:19:85:27:d8:2f:c6:38:16:
ad:38:34:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:58 2024 by rpki-client on console-ams.rpki-client.org