Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/XckRIyFrWpuoYb7J228n_Johc-k.roa
File: XckRIyFrWpuoYb7J228n_Johc-k.roa (raw, json)
Hash identifier: 5WYy8cr9bj7WiCkQsoxI6QTiEpwjUsjNERbbKVOhyEk=
Subject key identifier: 5D:C9:11:23:21:6B:5A:9B:A8:61:BE:C9:DB:6F:27:FC:9A:21:73:E9
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01883E2DBF033387C86413E8D531A430020F
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/XckRIyFrWpuoYb7J228n_Johc-k.roa
Signing time: Sun 21 May 2023 11:59:25 +0000
ROA not before: Sun 21 May 2023 11:59:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199417
IP address blocks: 94.228.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3e:2d:bf:03:33:87:c8:64:13:e8:d5:31:a4:30:02:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: May 21 11:59:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5dc91123216b5a9ba861bec9db6f27fc9a2173e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:b0:9c:27:6a:fd:b8:38:ea:98:17:74:d2:
f4:f8:9d:b4:95:20:5a:78:12:49:76:ca:be:07:51:
44:4b:40:0e:93:c2:a4:2b:b9:00:77:e3:5b:3d:f1:
f7:30:91:39:c7:39:2a:d6:8e:94:28:74:69:d3:37:
d8:cb:71:2f:88:a2:b1:85:13:4b:5c:89:0e:8c:40:
d0:6c:11:16:a2:b1:f8:05:04:b2:07:4e:00:fe:d1:
18:25:57:06:d9:52:25:30:e9:c0:77:a6:06:96:44:
fe:00:18:8d:37:91:64:73:82:d6:67:5e:51:00:48:
8b:79:c6:80:5f:c9:dd:53:3f:7e:09:3d:7d:56:58:
65:9e:f0:f8:ed:c3:e9:64:30:94:24:b8:e5:e1:ca:
c0:c7:ff:3f:52:fa:91:1c:47:8c:b7:ef:9a:b0:67:
3f:fe:7c:f3:60:4a:2c:93:b2:c9:dd:2f:fc:a9:4e:
ce:0b:40:37:e4:4c:ad:62:fd:41:d2:35:1b:74:4f:
6d:b5:9c:5c:99:cb:bf:fc:c2:1d:b9:cc:bc:5d:45:
eb:9e:a9:90:3f:ea:1e:9b:f5:df:58:0a:27:8c:08:
91:95:a5:f9:5c:f4:5c:e8:e9:b3:85:c1:68:f5:1b:
4f:ab:55:80:83:df:c3:5c:ae:18:e7:f8:d8:9a:a3:
2c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C9:11:23:21:6B:5A:9B:A8:61:BE:C9:DB:6F:27:FC:9A:21:73:E9
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/XckRIyFrWpuoYb7J228n_Johc-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.170.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:84:4c:e6:31:ce:dd:9c:3a:9b:dd:7f:ab:15:75:a5:e0:4a:
82:da:c9:c3:60:34:3c:4e:f9:90:b1:9f:1b:ee:54:16:e0:76:
d8:c1:67:ce:48:f8:03:21:7e:82:78:fc:fb:ae:c5:1a:80:1c:
7a:7f:8d:f6:24:6f:83:5b:09:37:fe:bc:1c:b1:db:a6:b2:1b:
db:f4:17:04:c1:53:f4:10:63:2f:8f:e5:fc:62:fd:59:8c:4c:
18:99:51:13:77:fd:8a:e8:00:eb:8b:85:4a:1e:b8:0a:48:3b:
73:f7:11:7d:96:95:d4:14:20:56:d9:d6:82:d9:02:2d:4f:c9:
5f:13:5a:f7:4f:a7:51:ac:39:0e:f8:5a:a3:fb:09:b9:a3:1f:
d8:fa:68:22:6b:c1:0b:fa:05:76:c4:6a:79:01:11:df:d3:ef:
29:17:9f:a3:65:4f:df:04:a9:70:63:9e:dc:7a:3a:8e:ea:61:
d0:7f:23:49:9f:2f:34:2f:b7:e0:f6:b8:15:1c:9f:5e:9e:8c:
ec:04:72:6b:d6:32:5b:d4:17:a6:df:7e:00:de:a4:34:02:f2:
83:d3:3c:84:6a:a6:6f:82:16:fc:63:99:3d:2c:56:a6:4f:ef:
5b:bb:87:58:b0:6f:3c:a1:33:2b:e9:54:24:a5:e1:e6:a5:ad:
af:6e:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:11 2023 by rpki-client on console-ams.rpki-client.org