Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/9wtICTLEDoDhyolx7slynFS21iE.roa
File: 9wtICTLEDoDhyolx7slynFS21iE.roa (raw, json)
Hash identifier: m+lbYTGFUFG8Yj+C1hDW0z+thyupLsexs2CXUxldZ9s=
Subject key identifier: F7:0B:48:09:32:C4:0E:80:E1:CA:89:71:EE:C9:72:9C:54:B6:D6:21
Certificate issuer: /CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Certificate serial: 018570D53DD79DEE8250D74AB863F6E3ED71
Authority key identifier: 31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/9wtICTLEDoDhyolx7slynFS21iE.roa
Signing time: Mon 02 Jan 2023 04:55:01 +0000
ROA not before: Mon 02 Jan 2023 04:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 202.22.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:3d:d7:9d:ee:82:50:d7:4a:b8:63:f6:e3:ed:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Validity
Not Before: Jan 2 04:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f70b480932c40e80e1ca8971eec9729c54b6d621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:bb:60:47:b8:a2:80:66:71:ce:52:92:5e:
1b:a1:44:2c:f6:17:11:1f:9d:b0:ab:33:22:93:dd:
0c:4b:b2:fc:0e:d2:23:29:1b:32:df:4a:fc:10:6b:
b4:56:59:6d:a1:66:0c:03:05:64:87:ab:27:5e:55:
42:17:f4:18:8f:56:d3:e3:de:2e:ac:a4:09:33:8d:
b9:38:58:63:03:2d:2c:46:76:5b:8d:d8:fd:8f:3d:
d9:4a:94:76:23:e3:dc:f9:4b:66:90:b3:d5:2a:c4:
38:86:e1:e0:c2:ec:30:70:ec:c1:50:11:63:13:b2:
d3:12:e5:6a:29:64:93:aa:2b:30:0c:11:d7:68:22:
2e:5a:a1:b8:a3:34:84:8a:32:9a:e1:94:41:6c:db:
32:12:3f:d2:6d:ff:4f:43:6a:9a:47:8d:e0:33:61:
5e:40:6f:e3:ee:3b:5d:43:32:14:40:1a:bf:95:29:
f2:da:17:19:d8:ab:2e:0f:ab:18:d0:da:23:2e:b2:
3a:21:fd:1a:d4:cd:2f:38:56:5c:24:42:38:33:1f:
c1:9b:ac:2d:5e:4a:dc:1b:e5:ce:81:b0:6d:c6:c6:
6e:af:b5:f6:da:0c:59:56:c3:eb:47:3f:bc:02:b8:
2d:3c:04:2e:f0:63:db:f8:04:bf:55:24:19:c3:1e:
97:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0B:48:09:32:C4:0E:80:E1:CA:89:71:EE:C9:72:9C:54:B6:D6:21
X509v3 Authority Key Identifier:
keyid:31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/9wtICTLEDoDhyolx7slynFS21iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.22.173.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4c:7c:a5:9e:b8:37:02:bb:43:05:29:77:7e:02:68:86:1c:
a1:fc:86:09:37:02:6e:65:43:9e:bf:e3:34:76:9d:27:7b:3a:
3d:8d:f0:76:2c:c5:51:1c:09:31:2a:a7:d6:3e:a9:75:db:e3:
0b:4a:87:bc:7c:d5:df:51:59:99:fb:d9:a1:c5:5a:41:a5:9c:
9d:e7:e9:d7:81:d6:87:7d:64:da:b0:81:ae:b9:eb:65:31:11:
29:02:a8:f5:4f:86:90:09:79:3b:85:5e:9d:e9:63:6f:f1:6e:
ce:be:83:1d:c0:50:ff:0d:1c:7b:d0:93:9b:72:6d:53:8e:47:
3f:f8:4f:9f:d7:88:10:80:40:c6:f5:4c:d9:dc:8a:e3:9e:27:
7a:57:71:58:65:52:a0:08:fb:6c:f1:3e:e5:e9:05:79:1b:67:
1a:fd:da:34:83:55:91:f4:50:8f:a5:53:d0:7e:35:ad:8a:41:
eb:0b:7a:b5:04:75:ca:60:07:2d:b3:e1:c4:be:83:62:dd:b3:
32:50:54:a6:40:e1:1a:ee:7b:bc:a4:2f:57:69:f5:12:31:ae:
15:6e:ef:ae:7c:9e:1d:da:e4:ee:31:ff:d8:28:40:e7:d0:4b:
a6:8a:19:cb:e7:6e:f5:19:d2:eb:c9:26:39:3b:9a:67:a4:4d:
e2:f9:63:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:59 2023 by rpki-client on console-ams.rpki-client.org