Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/Rr-r3wcIejLcuhD4S_4WZ7Ckyk4.roa
File: Rr-r3wcIejLcuhD4S_4WZ7Ckyk4.roa (raw, json)
Hash identifier: 073F9wvRP7Wj+wPWX6Bgaso+YxRUpMyJNbvBA4WkYSQ=
Subject key identifier: 46:BF:AB:DF:07:08:7A:32:DC:BA:10:F8:4B:FE:16:67:B0:A4:CA:4E
Certificate issuer: /CN=9beaa3f4124ae4fb8d36c416a6b190026a9edb79
Certificate serial: 01856CAEF8D28E1226196CA988F3FE8793F0
Authority key identifier: 9B:EA:A3:F4:12:4A:E4:FB:8D:36:C4:16:A6:B1:90:02:6A:9E:DB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-qj9BJK5PuNNsQWprGQAmqe23k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/Rr-r3wcIejLcuhD4S_4WZ7Ckyk4.roa
Signing time: Sun 01 Jan 2023 09:34:44 +0000
ROA not before: Sun 01 Jan 2023 09:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 213.217.10.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ae:f8:d2:8e:12:26:19:6c:a9:88:f3:fe:87:93:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9beaa3f4124ae4fb8d36c416a6b190026a9edb79
Validity
Not Before: Jan 1 09:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46bfabdf07087a32dcba10f84bfe1667b0a4ca4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:2a:fa:fb:4f:65:6d:20:2d:a1:4e:00:3c:
0a:f7:41:65:35:71:f3:4c:47:06:94:a5:60:3d:54:
70:5b:eb:6d:c6:73:6f:95:5b:fc:53:f3:a9:6d:1b:
9d:77:ba:bd:2d:30:c8:5a:eb:f8:67:33:ac:ab:63:
a5:c8:8e:9b:e9:62:00:55:de:38:29:7d:5f:4e:7c:
86:15:c6:6d:dd:cf:21:0a:2b:97:d3:bd:54:e3:48:
cb:7c:26:94:38:98:67:2e:10:99:ff:69:cb:0b:53:
6d:4f:36:54:b0:6c:b8:c9:ae:48:61:6d:12:ca:9b:
1b:a7:79:04:59:dd:94:5d:62:46:2e:fd:6c:97:e7:
bb:fd:a2:8c:c7:71:e9:7e:ac:58:46:99:24:a1:49:
db:16:60:b7:ad:cf:fb:0d:8d:25:7d:54:d5:b5:0e:
ee:84:4c:d5:42:4b:5a:b4:9f:ac:ae:82:b5:47:4f:
cc:3c:9f:c0:01:14:dc:94:f4:73:a6:3b:70:0c:fa:
20:16:f8:c6:e4:fb:19:cf:43:7f:5f:0c:93:5f:cc:
32:2e:39:40:c3:e0:f7:85:95:9a:85:c8:a1:9f:75:
78:72:71:49:4b:65:1b:ea:8d:aa:33:6d:0f:d4:e6:
ad:93:2d:19:9a:bd:af:af:dd:5c:ee:7c:97:22:ba:
40:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BF:AB:DF:07:08:7A:32:DC:BA:10:F8:4B:FE:16:67:B0:A4:CA:4E
X509v3 Authority Key Identifier:
keyid:9B:EA:A3:F4:12:4A:E4:FB:8D:36:C4:16:A6:B1:90:02:6A:9E:DB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-qj9BJK5PuNNsQWprGQAmqe23k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/Rr-r3wcIejLcuhD4S_4WZ7Ckyk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/m-qj9BJK5PuNNsQWprGQAmqe23k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.10.0/24
Signature Algorithm: sha256WithRSAEncryption
51:41:9b:75:58:17:e9:c1:6a:26:48:7a:14:c1:43:6a:5f:ae:
a9:f8:0c:27:1b:13:ca:50:ee:b5:35:e9:38:4f:04:f2:dc:39:
44:36:2e:83:e5:67:77:52:b1:7c:83:05:6d:26:71:77:08:80:
90:c1:38:c3:b6:79:da:82:a7:63:b2:0f:0c:d0:1e:ec:1f:a4:
0d:07:1a:7b:28:56:2e:2a:8c:11:a3:e6:97:9a:25:7b:19:06:
f7:0f:39:fd:0e:50:8f:eb:2f:60:7c:a8:8d:8c:85:80:86:6c:
10:28:49:46:f6:94:87:62:7f:32:db:2e:17:d5:d4:b4:9d:5d:
13:7e:69:a0:2e:09:c9:cb:a8:22:48:c2:4d:29:b9:f9:a3:e1:
d5:5d:ac:e2:a2:e0:f4:61:a0:2b:4a:eb:7d:cf:4c:c0:36:42:
5b:2f:9f:a9:7b:f3:6b:8c:f8:70:e8:9d:5c:d1:a9:20:ac:b2:
16:e6:09:88:a8:20:be:97:ad:d1:8a:c6:1f:bd:2e:79:01:2e:
eb:b5:f9:ef:68:62:e1:3a:46:98:16:0b:50:09:08:ca:71:7c:
0d:ae:28:48:92:58:3c:29:ea:aa:a5:c3:84:d5:87:c5:60:c2:
93:27:c3:81:f3:2b:11:00:a1:73:52:28:24:cb:ea:2d:4e:f5:
a3:3a:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:35 2024 by rpki-client on console-ams.rpki-client.org