Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1-Ih_pTRvtjmVz4QodqJw-Gbbbp0.roa
File: 1-Ih_pTRvtjmVz4QodqJw-Gbbbp0.roa (raw, json)
Hash identifier: gUggkRdHjDcwVRI2B3EwZZxNSG9J8FwRLgV/KobOow0=
Subject key identifier: F8:88:7F:A5:34:6F:B6:39:95:CF:84:28:76:A2:70:F8:66:DB:6E:9D
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0188A2BF15F006C4BFB54A6773D78BF3BC21
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1-Ih_pTRvtjmVz4QodqJw-Gbbbp0.roa
Signing time: Sat 10 Jun 2023 00:40:11 +0000
ROA not before: Sat 10 Jun 2023 00:40:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 121.127.56.0/21 maxlen: 24
66.9.96.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a2:bf:15:f0:06:c4:bf:b5:4a:67:73:d7:8b:f3:bc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jun 10 00:40:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8887fa5346fb63995cf842876a270f866db6e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:54:ac:46:34:3c:9b:9b:72:51:6f:e1:7d:
66:7c:2c:4b:c3:41:51:a8:26:18:06:2e:ae:f3:6d:
21:2d:a6:8d:0d:9b:a4:c1:2e:ef:35:48:1b:e7:35:
d3:95:3c:46:09:35:53:91:d2:54:da:c6:91:e3:fd:
cc:2d:e8:f8:22:24:8b:1b:e5:be:53:ed:48:0c:96:
8c:65:71:e4:b4:11:62:a5:dd:c6:f3:d7:a1:e5:f7:
94:aa:a4:92:fd:e3:9c:aa:0d:ea:1c:d1:53:73:a9:
df:63:79:d3:7a:f0:dc:61:b1:1c:ff:5c:d4:0a:1b:
03:8c:4c:a5:48:e2:1b:2a:79:0e:11:1d:96:48:0e:
dc:90:70:06:a0:24:5f:a0:a7:bc:01:75:5f:7b:7f:
1a:97:f0:93:f2:d5:d8:8a:f7:31:dc:81:0f:9b:2b:
ab:5b:56:a7:65:c1:64:0a:ae:4f:cb:ce:73:76:fe:
75:00:e0:91:63:15:cb:e9:eb:e3:6c:c9:37:98:b4:
93:2a:2c:03:4e:2b:9d:79:a8:78:90:c1:a3:20:21:
63:0f:d1:2e:8f:55:4a:9e:78:49:1a:12:70:9f:44:
0f:66:84:9a:93:53:42:3e:5e:85:4c:7d:76:05:7e:
93:6c:4a:74:6f:be:ed:6e:09:77:5b:7b:4e:af:29:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:88:7F:A5:34:6F:B6:39:95:CF:84:28:76:A2:70:F8:66:DB:6E:9D
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1-Ih_pTRvtjmVz4QodqJw-Gbbbp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.9.96.0/20
121.127.56.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:a3:28:61:10:16:9b:36:2c:96:59:80:15:5b:88:2a:e0:da:
24:01:6b:82:82:94:c4:c6:49:14:0c:0d:ba:74:8f:06:98:9d:
a0:f5:2e:b0:bf:91:ed:ad:af:2c:6d:cd:aa:b2:f1:9a:b1:f5:
da:8a:fd:d3:9f:de:0a:74:d8:aa:e4:d8:bf:fc:e4:af:df:79:
f9:c4:27:74:b6:96:68:b0:e3:38:0e:0b:47:9b:4d:b5:26:30:
b6:c7:c6:be:0e:f6:a6:02:1b:ee:fb:73:51:0a:2a:a8:15:50:
67:bb:f3:fa:96:2f:38:f4:d0:60:ce:05:dd:cf:a0:1c:41:91:
73:1e:b6:ec:1d:6b:cb:13:d2:51:00:de:dd:1a:a2:84:9e:6b:
65:ba:77:0b:7d:df:67:21:b1:52:f6:f8:65:1d:2f:89:d0:f0:
fe:fa:8a:14:3b:f5:8f:2d:5b:4c:b3:71:86:af:6f:f4:18:cd:
d9:46:f2:74:11:66:2e:49:c3:c9:2a:58:3b:d3:b5:69:c8:d1:
e7:20:3a:26:64:43:e2:97:a4:60:c1:5e:42:af:3e:c7:b7:74:
41:62:8c:b1:b2:9d:a7:42:a5:93:2a:04:9f:8f:ea:78:17:1d:
a3:5a:31:9c:46:d2:32:6c:69:6c:68:09:11:8c:2e:b4:f6:51:
22:38:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 05:42:10 2023 by rpki-client on console-fra.rpki-client.org