Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/1-D3WRQqj-2D1zIQhJihRutrmhAc.roa
File: 1-D3WRQqj-2D1zIQhJihRutrmhAc.roa (raw, json)
Hash identifier: aFKvVy3gFUv2F5gyZdbFn8zdCHnV8r/Vnbq1xB4I4ws=
Subject key identifier: F8:3D:D6:45:0A:A3:FB:60:F5:CC:84:21:26:28:51:BA:DA:E6:84:07
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01870DA2837620F93D61C638C6FA9C6BB207
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/1-D3WRQqj-2D1zIQhJihRutrmhAc.roa
Signing time: Thu 23 Mar 2023 08:42:46 +0000
ROA not before: Thu 23 Mar 2023 08:42:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206252
IP address blocks: 213.99.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:a2:83:76:20:f9:3d:61:c6:38:c6:fa:9c:6b:b2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Mar 23 08:42:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f83dd6450aa3fb60f5cc8421262851badae68407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:13:16:42:fa:52:00:97:2a:d3:19:06:a3:a2:
27:95:47:12:2e:0b:d4:09:ee:e2:a0:b5:84:30:b9:
c2:58:b6:ef:4c:92:b0:86:de:e0:fe:81:a3:75:8b:
38:0f:22:22:6d:69:d1:f2:1e:40:80:81:a4:8e:d7:
5c:cc:42:a9:d4:c2:b0:0b:ac:9b:06:30:d2:e8:96:
0b:58:43:6b:ab:e3:40:12:ef:90:aa:80:8c:d2:48:
8c:bc:4d:d0:64:f0:36:17:49:67:2b:16:b3:e7:b3:
63:fd:b7:02:88:5d:e8:e5:a7:18:1e:ba:3d:75:31:
29:23:19:d2:62:89:47:e0:38:46:9e:9e:ec:50:e6:
fb:13:49:c1:70:87:2a:33:91:72:85:0b:43:ab:2c:
92:c6:ca:fc:26:f8:c6:38:23:0b:ab:db:99:b1:ea:
e9:6d:5b:d4:5b:86:ed:da:ac:e0:4a:43:e1:e4:5f:
b6:69:e3:7e:e0:60:23:53:2b:f6:84:1c:e8:8e:e6:
4a:ac:26:65:e7:3c:05:e8:4d:9c:a5:18:cf:7b:25:
99:69:ff:e6:48:2f:b4:39:41:82:d6:6b:17:62:08:
74:6d:46:58:cf:65:5b:8e:aa:52:62:ee:0e:9a:4a:
ff:56:9e:ea:f9:14:9d:13:4a:3d:8a:c7:2d:c6:97:
20:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3D:D6:45:0A:A3:FB:60:F5:CC:84:21:26:28:51:BA:DA:E6:84:07
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/1-D3WRQqj-2D1zIQhJihRutrmhAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.99.42.0/24
Signature Algorithm: sha256WithRSAEncryption
15:6d:1c:20:62:60:6e:bd:cb:d8:01:6c:0a:ad:2a:9f:78:4d:
95:5b:cb:56:28:fc:2d:1a:b4:12:70:33:32:0d:38:89:9d:ba:
1c:3f:48:c6:19:d0:da:49:17:1e:21:67:d5:da:4f:28:1f:fa:
e4:9f:5e:a5:1f:5e:27:13:e4:b6:fe:71:9f:1b:2d:6f:db:81:
d5:5b:0d:65:e7:fd:a7:9f:8e:8c:a5:6e:94:ea:d9:68:30:15:
f6:38:1e:b0:48:27:2a:e0:a8:62:17:5f:fd:88:cb:b7:df:40:
a4:d4:bb:ba:17:d6:78:df:af:ce:19:aa:ff:a9:7a:4f:ee:5f:
08:d1:73:75:40:06:48:3c:0b:2e:d2:1b:8a:bb:b2:ab:1d:ad:
47:12:9c:a1:f1:99:4a:5b:86:27:26:b0:6b:6b:c3:78:55:9a:
78:e9:bc:27:0f:9b:c4:6e:68:8d:27:23:37:6c:84:6a:25:fb:
5f:37:33:d3:7e:12:9f:b1:f5:ae:39:36:74:3c:0a:07:43:50:
68:1c:bf:ce:d0:eb:e0:b9:d2:15:ff:76:cb:29:63:76:46:99:
16:21:ae:bf:ee:8e:64:97:ef:78:f8:c8:0f:52:2b:05:68:bb:
21:4f:18:a9:ef:2e:d6:e6:98:78:24:a6:fe:63:76:45:cf:d5:
86:b3:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:42 2023 by rpki-client on console-fra.rpki-client.org