Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/1-Xv2fwsiTq6GKSDkuxPns4tdw1k.roa
File: 1-Xv2fwsiTq6GKSDkuxPns4tdw1k.roa (raw, json)
Hash identifier: it73ldQcI3WM1c6ebdLmIBMH2MGidXPauZoXIwjqAeE=
Subject key identifier: F9:7B:F6:7F:0B:22:4E:AE:86:29:20:E4:BB:13:E7:B3:8B:5D:C3:59
Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial: 018572A7FB185D1366340CCE46E63C275158
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/1-Xv2fwsiTq6GKSDkuxPns4tdw1k.roa
Signing time: Mon 02 Jan 2023 13:24:49 +0000
ROA not before: Mon 02 Jan 2023 13:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60027
IP address blocks: 213.243.48.0/24 maxlen: 24
213.243.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a7:fb:18:5d:13:66:34:0c:ce:46:e6:3c:27:51:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
Validity
Not Before: Jan 2 13:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f97bf67f0b224eae862920e4bb13e7b38b5dc359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:91:ae:9c:81:74:4e:a2:5b:1a:a4:7d:18:12:
93:35:75:a3:a2:64:02:93:be:8e:1d:8d:d1:3b:d4:
f2:d3:97:9c:d3:cd:fe:63:4d:40:bd:e6:be:a5:a7:
03:83:91:e7:f6:e7:65:d9:c5:60:e1:80:a0:fb:35:
4c:65:21:58:5f:f0:47:41:5f:65:50:e9:c9:7e:ff:
03:d7:3e:f3:5e:01:3a:16:0e:42:ec:63:8b:67:a6:
eb:16:90:cf:13:f3:a4:34:dc:71:b7:92:4c:6a:0a:
75:5b:df:5c:8d:b3:a6:cc:99:db:d4:60:49:cd:6d:
43:40:57:47:13:4e:61:4e:c7:1f:83:b2:87:6c:52:
01:3f:ac:43:39:e7:20:bf:6f:51:ee:3d:f8:da:0c:
cd:08:5d:d6:c6:02:d1:2f:3c:ae:b9:3a:1c:a0:76:
f4:2a:73:22:09:d0:09:eb:a1:08:42:2c:71:0b:0e:
10:fe:aa:68:e5:24:04:b6:c0:e9:af:e4:91:f5:51:
c2:a3:c2:20:80:fa:4d:45:96:ae:6d:19:21:ca:1b:
7e:d2:87:3c:1b:6a:67:c9:e2:8b:7c:bb:fa:53:84:
69:ad:b4:3e:4d:43:9e:43:2f:f9:ae:67:b2:33:4a:
3f:29:53:51:a9:dc:31:af:05:75:c2:eb:1b:99:35:
82:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7B:F6:7F:0B:22:4E:AE:86:29:20:E4:BB:13:E7:B3:8B:5D:C3:59
X509v3 Authority Key Identifier:
keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/1-Xv2fwsiTq6GKSDkuxPns4tdw1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.243.48.0/24
213.243.61.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c3:f4:a3:f9:7a:66:9c:bc:92:88:d9:90:2a:4c:34:8b:3c:
f2:50:b6:17:d6:af:34:d9:65:46:fb:f8:5f:12:7f:d1:62:d9:
b1:56:e7:da:d3:10:87:3d:90:b4:5a:7d:cf:39:36:98:28:6a:
11:49:29:8d:b5:3e:77:f3:78:cc:01:ec:87:da:3e:9d:49:1d:
9b:0b:bd:5f:22:d7:b2:90:de:d1:3f:69:cc:ab:44:ed:8f:ac:
47:ed:e1:42:06:06:8d:ca:b3:df:43:d2:77:44:db:70:b9:96:
92:65:a4:46:1b:ce:08:c4:89:d5:aa:30:6d:7b:55:d9:f0:c5:
3a:59:d3:c8:0c:9c:42:75:f9:1a:0e:bc:b0:71:ad:04:8b:7a:
d4:b4:34:74:f0:12:63:f8:e9:a2:18:cd:d3:e2:d4:9b:98:49:
dc:36:8a:04:c6:73:13:fa:e4:0e:8f:b2:52:0e:41:4a:b6:ec:
23:9f:8d:6d:8a:b0:2f:00:7c:bb:e6:92:2d:13:57:2a:a0:68:
5e:1b:0b:b0:e7:9a:31:bc:b0:34:ad:fe:ee:70:60:7a:0a:a3:
89:1a:7c:29:97:94:85:95:54:38:30:3b:ba:d0:84:46:4f:4d:
7b:10:cd:e4:02:ac:84:a2:a0:6d:f2:42:f2:34:83:46:a3:bf:
67:e7:ae:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:51 2024 by rpki-client on console-ams.rpki-client.org