Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/vj-yQ_Q7--EpKP1FE1OF3xAhYjo.roa
File: vj-yQ_Q7--EpKP1FE1OF3xAhYjo.roa (raw, json)
Hash identifier: kPMij9/ZAsXR10dikQLeh6RB1ZtrATeqGbGOIsxzFmM=
Subject key identifier: BE:3F:B2:43:F4:3B:FB:E1:29:28:FD:45:13:53:85:DF:10:21:62:3A
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0188593809213374F6BB51343C9846EC63A6
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/vj-yQ_Q7--EpKP1FE1OF3xAhYjo.roa
Signing time: Fri 26 May 2023 18:00:24 +0000
ROA not before: Fri 26 May 2023 18:00:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 94.228.168.0/24 maxlen: 24
94.228.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:59:38:09:21:33:74:f6:bb:51:34:3c:98:46:ec:63:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: May 26 18:00:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be3fb243f43bfbe12928fd45135385df1021623a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:ad:a9:ee:a3:83:a3:36:f0:c1:0c:b4:a8:
7e:65:b2:52:19:1f:c7:b4:9b:ce:87:82:3a:67:5a:
37:62:68:a0:39:cd:8d:cc:ae:ee:8a:ab:49:01:44:
1d:84:5a:a7:1f:47:b5:27:76:6d:bf:bc:cc:ec:ff:
06:2c:5b:58:3f:c0:35:1c:93:fe:0f:53:d7:f8:9c:
0f:92:f1:63:42:eb:6e:a0:cd:1c:5a:63:ec:f0:8a:
34:8e:b4:20:ea:ac:da:ac:d6:05:1f:85:fa:ed:1d:
60:42:b1:fb:ac:28:14:4a:28:1d:43:e6:31:e5:cc:
42:02:5d:e6:e5:dd:9b:9b:ce:5b:98:05:58:da:71:
da:d0:27:a6:a4:60:5e:cf:36:97:83:ce:87:e7:cd:
dc:c2:28:32:d7:a3:2f:ff:01:bb:e7:40:6d:5c:31:
a2:b9:75:ea:40:cf:98:d8:14:ed:07:c7:8a:b3:6f:
96:43:f2:6a:a3:39:8d:42:50:f6:90:12:d8:c9:0f:
4c:5a:87:90:28:ff:54:93:6e:94:49:06:f9:47:58:
b9:7b:43:fc:7a:2e:5b:11:fb:b1:0d:be:5f:db:21:
72:f2:3f:76:10:6d:57:d2:c5:28:06:06:d3:95:dc:
f0:75:36:7a:4f:aa:4a:00:62:17:48:0d:02:e5:bb:
87:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3F:B2:43:F4:3B:FB:E1:29:28:FD:45:13:53:85:DF:10:21:62:3A
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/vj-yQ_Q7--EpKP1FE1OF3xAhYjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.168.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:19:59:5e:c5:64:a3:9b:2a:ed:6a:7a:c0:41:27:25:72:10:
7b:8e:78:06:35:a2:41:34:db:c2:da:35:ec:2f:27:f7:76:2a:
f9:a6:e6:51:a6:0c:62:7b:f7:e5:85:6d:04:2e:16:c0:14:91:
ba:39:70:0f:1c:91:cc:95:60:6e:ee:3d:e7:f9:13:b4:e3:2d:
d3:10:37:19:03:2b:e9:68:b8:69:d7:9c:9a:26:ec:9a:e3:b8:
05:71:14:3b:c8:03:a1:c0:38:69:13:86:1d:28:af:4f:d8:39:
eb:0f:78:d9:c1:f2:43:06:c2:f6:1c:03:5f:30:fa:5a:e6:5d:
68:39:98:73:e6:45:7b:2b:6d:e2:47:92:ea:be:5d:61:b5:77:
d6:89:18:b9:96:98:c5:39:6d:95:bf:0c:1c:03:02:20:dd:20:
d7:19:0f:a1:39:bb:43:d4:61:0b:31:61:f3:54:4e:fb:26:6e:
0f:a8:53:97:f4:bc:59:71:11:33:e2:ce:c5:9d:d6:53:92:92:
4c:dc:22:ba:d7:c5:8b:6f:05:63:6b:2d:85:0b:28:5d:80:2e:
f8:35:c6:d2:89:dd:5e:89:88:4b:d5:a6:af:68:13:e6:14:db:
f6:5d:97:b9:63:7b:9d:2e:83:3e:2b:37:80:d9:46:a0:43:0d:
59:84:ce:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 17:44:57 2023 by rpki-client on console-ams.rpki-client.org