Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/j3hk9zXs8XPsVF_mIDSiM_Gw0Vo.roa
File: j3hk9zXs8XPsVF_mIDSiM_Gw0Vo.roa (raw, json)
Hash identifier: I79aYZoMKzoMN+tMVAWnVkVZovoUN7pJm1L3ssBlrzY=
Subject key identifier: 8F:78:64:F7:35:EC:F1:73:EC:54:5F:E6:20:34:A2:33:F1:B0:D1:5A
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01872271CE848C492CB07A911BD7CABB2FCB
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/j3hk9zXs8XPsVF_mIDSiM_Gw0Vo.roa
Signing time: Mon 27 Mar 2023 09:41:36 +0000
ROA not before: Mon 27 Mar 2023 09:41:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30846
IP address blocks: 212.170.114.0/24 maxlen: 24
195.53.217.0/24 maxlen: 24
195.235.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:71:ce:84:8c:49:2c:b0:7a:91:1b:d7:ca:bb:2f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Mar 27 09:41:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f7864f735ecf173ec545fe62034a233f1b0d15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:53:ab:1d:03:23:14:31:34:4c:52:eb:4a:
f3:d9:4d:a6:5d:2b:c8:2f:9b:7e:19:24:50:ff:4a:
6c:6b:f5:d2:cc:ff:e4:a3:74:fd:bb:6b:24:92:ab:
5a:9e:88:4b:8d:7c:1a:d5:96:95:0c:c2:16:d4:58:
8b:4d:5b:c9:27:e9:46:59:5f:40:53:0b:58:75:bc:
b8:51:53:26:57:40:da:06:7f:e1:7a:51:1e:ce:41:
c9:91:f4:0e:f7:01:82:db:00:05:cd:fe:96:e1:9d:
ba:f1:80:de:a5:ee:bc:6c:ec:67:b0:37:71:fa:a8:
2f:8c:61:b3:c3:69:b6:47:ca:4e:c7:6c:11:45:7e:
78:86:b4:6b:c8:b2:b9:93:a7:22:e4:3c:8d:52:df:
17:f9:db:8c:49:93:0d:2d:78:8d:f3:2a:7c:e5:b0:
5d:90:66:a9:0d:d6:66:74:f3:42:76:3a:c3:7e:44:
03:cc:78:9f:8c:f5:b6:45:62:70:1a:de:09:b4:a9:
95:6c:4d:e4:9e:4b:4e:ea:0e:ac:e6:69:55:26:32:
0e:9b:42:4e:1e:cf:02:8c:6a:06:0a:59:d0:9d:9d:
99:a4:f6:b3:b8:34:0d:ba:cd:cf:2b:f9:ee:97:b2:
f9:42:a3:6f:1e:5a:18:08:6f:cc:b2:5e:66:68:49:
42:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:78:64:F7:35:EC:F1:73:EC:54:5F:E6:20:34:A2:33:F1:B0:D1:5A
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/j3hk9zXs8XPsVF_mIDSiM_Gw0Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.53.217.0/24
195.235.248.0/24
212.170.114.0/24
Signature Algorithm: sha256WithRSAEncryption
41:98:af:65:da:26:7b:96:f5:ff:fe:87:16:c7:2f:64:3a:64:
dd:53:fc:4d:2f:89:5e:06:62:8a:47:2d:d0:85:a3:82:fa:f5:
99:6e:e8:41:45:08:08:66:46:9a:df:7a:63:00:97:a9:ed:55:
66:cb:3f:f7:d5:5a:f1:49:a5:57:25:bf:7e:a1:83:57:d1:7d:
1c:28:79:2d:5d:3e:8f:e4:76:7a:af:ba:a9:b9:cd:a9:96:13:
60:69:9a:ce:70:e3:f6:14:5c:f6:56:e0:15:ff:e2:77:16:54:
30:d8:18:ff:0a:f1:d2:19:42:9c:d4:1b:80:dd:d3:6a:9d:a9:
25:aa:b7:f6:81:c3:a2:28:aa:49:47:fa:dc:1d:7a:73:28:df:
4b:f1:5a:8a:07:db:a0:b4:fa:c7:c7:c1:f8:14:14:8e:2d:b5:
f5:55:8f:04:ca:94:ac:e2:e7:b3:65:a7:f7:e6:e9:64:20:03:
97:12:51:56:a1:54:6b:35:3c:b7:b6:a8:51:1e:69:d3:25:b9:
9e:f7:04:7c:12:a3:a7:64:f3:87:92:42:d3:62:c2:f4:8c:e0:
f2:52:9d:c5:10:f8:df:6f:2f:c1:b2:24:d2:85:3a:02:15:d1:
8e:5c:52:6f:fa:ba:49:41:f9:f3:ff:e6:da:b3:20:d2:31:6f:
cc:ea:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:42 2023 by rpki-client on console-fra.rpki-client.org