Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bbbafb-a396-4b91-b4be-3a9bc40edd4c/1/s5QuMFlgu8T_8aJyT3wENzZc5X4.roa
File: s5QuMFlgu8T_8aJyT3wENzZc5X4.roa (raw, json)
Hash identifier: GOmZa1CCKzgJVQxwHMvXHBA4dHNn8mjkxKx3GmMgg88=
Subject key identifier: B3:94:2E:30:59:60:BB:C4:FF:F1:A2:72:4F:7C:04:37:36:5C:E5:7E
Certificate issuer: /CN=121a56a3e7b5b7acfee88ba1860fab9f02090c7d
Certificate serial: 01875C86F9762B6D787142D3A9EF393ADA33
Authority key identifier: 12:1A:56:A3:E7:B5:B7:AC:FE:E8:8B:A1:86:0F:AB:9F:02:09:0C:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhpWo-e1t6z-6Iuhhg-rnwIJDH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bbbafb-a396-4b91-b4be-3a9bc40edd4c/1/s5QuMFlgu8T_8aJyT3wENzZc5X4.roa
Signing time: Fri 07 Apr 2023 16:22:42 +0000
ROA not before: Fri 07 Apr 2023 16:22:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 217.114.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5c:86:f9:76:2b:6d:78:71:42:d3:a9:ef:39:3a:da:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121a56a3e7b5b7acfee88ba1860fab9f02090c7d
Validity
Not Before: Apr 7 16:22:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3942e305960bbc4fff1a2724f7c0437365ce57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4f:49:e1:a4:9a:03:e2:35:80:de:98:e6:c8:
d7:c0:d7:dd:8d:59:3c:ed:7e:c9:5e:9a:32:66:4c:
38:cd:c9:f5:0a:b2:89:fa:5f:0c:83:52:c5:78:fb:
44:0e:51:d8:cf:cb:43:b2:1e:c9:25:c3:b4:d6:85:
77:01:69:e2:cf:de:ca:15:b9:29:30:7f:3c:6c:b5:
b9:dd:3f:1a:62:23:7d:de:ba:43:01:66:8d:36:99:
b7:dd:92:0b:51:0b:ac:57:08:f6:80:2d:39:37:e6:
73:74:46:55:29:6f:3c:04:74:14:01:bd:50:2c:cf:
58:c2:64:f9:d3:e3:55:88:44:d8:ae:9c:1a:5c:fc:
06:90:e5:0c:54:a2:0c:ce:c5:13:cc:aa:e3:74:d0:
0d:72:65:d8:a3:71:40:68:7b:c9:df:3c:30:a9:0b:
fb:ad:13:07:55:7c:f9:ad:50:a0:53:e7:6d:d6:3d:
59:06:07:11:65:17:9a:c6:7e:28:53:e8:da:69:af:
06:72:fa:f1:ae:1d:24:62:f8:7a:a4:d6:1a:b9:ba:
b5:93:fb:86:14:8c:89:9d:df:22:26:e3:be:46:0f:
37:5a:67:35:89:fc:bf:42:c2:3f:73:15:e3:db:3a:
b3:55:ce:e5:25:ed:ae:2f:87:dc:39:a2:8d:a5:e4:
b7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:94:2E:30:59:60:BB:C4:FF:F1:A2:72:4F:7C:04:37:36:5C:E5:7E
X509v3 Authority Key Identifier:
keyid:12:1A:56:A3:E7:B5:B7:AC:FE:E8:8B:A1:86:0F:AB:9F:02:09:0C:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhpWo-e1t6z-6Iuhhg-rnwIJDH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bbbafb-a396-4b91-b4be-3a9bc40edd4c/1/s5QuMFlgu8T_8aJyT3wENzZc5X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bbbafb-a396-4b91-b4be-3a9bc40edd4c/1/EhpWo-e1t6z-6Iuhhg-rnwIJDH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.41.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9a:01:d2:8b:51:94:ba:e6:4b:60:c1:cd:e7:37:d2:0f:75:
15:9f:0d:8c:51:ed:42:5a:c8:59:4e:36:e0:bc:03:51:4b:14:
a8:b7:cb:51:2d:16:30:d4:61:3c:41:81:8b:99:84:3d:a1:2e:
68:c7:03:88:99:9d:88:a0:c9:3c:fa:20:12:f8:0f:36:90:99:
cd:43:92:49:26:b3:4b:b5:a1:34:d5:ab:7f:99:ae:70:22:9b:
53:12:ec:18:d3:b4:e7:f6:1a:b7:aa:8d:7a:3a:23:e2:5e:88:
4a:b3:b4:09:5c:4a:a6:f2:24:67:6e:07:3e:ed:04:3b:ff:37:
ed:82:01:55:4c:63:18:72:67:0c:87:85:02:04:97:13:09:1d:
31:1f:e9:78:76:ee:0e:b3:ee:38:12:2f:65:d6:2a:90:67:e1:
b4:b7:1b:92:49:f1:a6:a0:d7:0a:c7:85:4b:05:3a:a4:7d:e0:
95:14:78:9c:1d:38:8a:8c:9b:0e:e7:cb:33:be:98:0a:76:02:
f7:08:43:a6:18:53:89:dd:8a:c6:0d:db:3f:e3:13:a6:12:30:
ae:ee:7d:e1:89:47:c7:b1:a0:d8:df:b2:a4:c1:43:d0:0f:ab:
1a:c3:50:f5:c9:e8:e7:35:0e:74:53:b0:b6:aa:73:b4:2a:6b:
9b:66:57:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:00 2023 by rpki-client on console-fra.rpki-client.org