Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/b_PntzegJ37KRxnMmQXSmKZ_oDk.roa
File: b_PntzegJ37KRxnMmQXSmKZ_oDk.roa (raw, json)
Hash identifier: VX0P2/CQ65Ky0JAujWRIVZS1C0A36nbgCVjSE+tL2Ks=
Subject key identifier: 6F:F3:E7:B7:37:A0:27:7E:CA:47:19:CC:99:05:D2:98:A6:7F:A0:39
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01856DAF6B9B547F72C55C405424A53DC218
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/b_PntzegJ37KRxnMmQXSmKZ_oDk.roa
Signing time: Sun 01 Jan 2023 14:14:50 +0000
ROA not before: Sun 01 Jan 2023 14:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 2.57.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:6b:9b:54:7f:72:c5:5c:40:54:24:a5:3d:c2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 14:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ff3e7b737a0277eca4719cc9905d298a67fa039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:0f:99:af:73:eb:48:c6:3a:6e:95:16:2e:
27:7e:cd:fa:84:75:cf:8e:c8:78:9c:07:23:b3:b1:
de:f0:77:7c:68:89:dc:b5:9e:27:23:05:b1:17:21:
d8:91:df:89:54:c2:34:8e:a3:52:8e:ec:66:61:d6:
e7:4b:3f:36:65:e7:6a:ce:eb:94:d0:25:b2:45:4a:
1e:dc:34:20:d7:f3:14:54:b9:b1:26:f0:e9:1c:44:
f5:45:ff:0d:fd:2a:25:d0:0a:8b:b7:a1:73:54:43:
e2:59:8f:82:b0:2f:92:83:94:98:f3:dd:0c:b9:54:
df:94:46:ce:6b:de:4c:87:71:ef:a3:ac:ef:42:c1:
54:23:48:84:f8:1e:d6:01:f8:53:f0:0c:18:94:90:
55:5f:18:d1:26:97:64:c9:7d:4f:86:13:ee:7c:0a:
b6:bd:ae:a5:7c:cd:ba:61:88:d4:76:51:ac:ee:a5:
9b:bd:96:f3:04:52:9e:85:ea:a9:24:ca:c9:f3:6f:
65:a7:78:b0:99:19:ff:2d:29:a2:1b:b4:ff:54:a0:
ed:aa:aa:05:04:07:33:a4:86:a4:bf:ee:ae:fb:88:
78:ee:bb:a2:14:fc:ad:0c:53:e7:c5:50:74:e5:c4:
91:6e:ae:1e:b1:57:3d:23:b8:97:2d:f1:5e:9c:da:
e7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F3:E7:B7:37:A0:27:7E:CA:47:19:CC:99:05:D2:98:A6:7F:A0:39
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/b_PntzegJ37KRxnMmQXSmKZ_oDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.170.0/24
Signature Algorithm: sha256WithRSAEncryption
96:1f:63:3c:7a:4d:1b:08:d0:99:8b:0a:95:7c:0d:89:ec:59:
da:82:d2:41:7f:b9:64:b8:1a:15:13:ec:a9:bc:05:61:80:7c:
31:e0:17:42:fe:0e:ce:9b:81:37:61:f8:4d:f5:ff:24:c2:6a:
66:b6:f1:9e:33:96:71:dc:0e:c5:25:4f:5b:40:4a:ab:df:06:
43:41:52:0c:40:d6:c3:d0:60:94:23:86:57:25:7d:9c:66:90:
dc:69:84:e7:1d:f0:94:e3:68:a4:b6:d8:e8:f7:54:eb:41:33:
a0:5c:65:92:7b:23:1a:b8:93:40:a6:dc:8b:14:77:53:58:2f:
d0:0d:2e:6f:99:0f:dc:56:5e:d0:82:04:b8:e9:42:65:fc:1f:
d4:7d:0e:3d:61:85:27:b9:87:dd:de:ed:f1:57:5b:96:76:f2:
41:0b:d9:c8:6d:6b:5c:6e:d1:e3:11:b9:81:5c:d6:96:a3:bb:
fc:19:51:34:08:01:1a:4c:d3:1b:7d:69:d0:9e:bd:bc:0b:a8:
fd:00:3f:fc:90:94:bb:0b:4a:19:8f:a5:cf:20:4c:0b:9a:c4:
39:72:6a:db:eb:99:50:9c:0d:be:04:67:d1:84:bb:f9:9a:c1:
34:8c:fa:91:b7:d4:5b:be:42:20:c1:ab:e5:45:82:e2:3d:d9:
8d:ea:6d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-ams.rpki-client.org