Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/etec48KTnFqv5Ohoi1Tg7mpjFGE.roa
File: etec48KTnFqv5Ohoi1Tg7mpjFGE.roa (raw, json)
Hash identifier: T6oT6pb/I0yqdq7MlgAdKohMNfCYet2MekbrNiIN12s=
Subject key identifier: 7A:D7:9C:E3:C2:93:9C:5A:AF:E4:E8:68:8B:54:E0:EE:6A:63:14:61
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0188028A2BF50B7846A5D04520077EDB300E
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/etec48KTnFqv5Ohoi1Tg7mpjFGE.roa
Signing time: Tue 09 May 2023 22:03:09 +0000
ROA not before: Tue 09 May 2023 22:03:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 121.127.48.0/21 maxlen: 24
168.75.224.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:02:8a:2b:f5:0b:78:46:a5:d0:45:20:07:7e:db:30:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: May 9 22:03:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ad79ce3c2939c5aafe4e8688b54e0ee6a631461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:13:be:a2:ba:94:56:a0:3e:4a:32:7f:d2:
17:87:cd:c3:15:a7:b7:5d:87:f7:68:4a:8f:cf:eb:
53:8e:c7:47:8c:36:e5:12:b5:43:11:a0:62:01:28:
37:3f:14:6e:10:a7:86:1e:a5:bf:6e:53:16:03:df:
77:54:b2:7a:9b:97:98:3c:28:b5:ed:9f:0a:75:15:
ae:9e:f5:bb:fd:7a:90:de:52:9b:71:2f:a0:9f:1f:
52:5f:8f:43:e5:51:de:b6:d7:b2:6f:a6:fa:2a:33:
06:41:24:94:03:20:32:56:bc:4a:c9:d5:63:4d:d8:
8b:06:fe:c4:83:21:c8:27:a5:49:5c:7e:ed:9d:6a:
fe:66:d4:41:57:89:22:dc:0c:8d:17:2e:2f:3f:54:
f6:e8:78:7d:e4:19:18:82:84:55:ee:44:2c:d3:a1:
ac:69:e7:51:52:47:e0:ca:8d:6f:82:b4:0e:40:dc:
b0:73:0f:db:aa:02:38:cd:36:e6:c5:74:01:11:90:
ef:bf:ea:98:eb:9b:8c:bf:28:a4:1c:ad:03:99:a4:
7d:90:09:96:e9:36:85:84:32:a0:80:7d:8e:e2:51:
d4:bf:ba:1e:51:71:ad:fe:f8:b8:26:33:37:18:13:
f6:85:4f:f5:6d:5c:9a:e6:2a:98:3a:7a:6e:0b:7c:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D7:9C:E3:C2:93:9C:5A:AF:E4:E8:68:8B:54:E0:EE:6A:63:14:61
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/etec48KTnFqv5Ohoi1Tg7mpjFGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.127.48.0/21
168.75.224.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:05:c6:f9:e2:61:74:b8:99:ef:aa:55:e7:08:ba:c6:78:92:
39:bf:46:93:2c:4f:cf:32:21:08:f5:8f:cc:67:24:16:e3:0c:
2f:a3:eb:9a:2c:f0:6f:30:fa:22:e5:a0:3d:5f:b1:2f:43:e2:
10:25:06:0c:0c:58:9f:8c:e0:f2:43:e1:a1:9a:2e:ad:92:8f:
ea:1a:a0:2f:52:98:ca:20:65:f2:22:7d:e6:98:48:c1:61:77:
f6:af:3d:11:0c:9a:30:7e:35:34:a1:1d:e7:89:73:f8:19:bc:
1a:50:4a:c3:d8:01:18:6a:63:60:06:d6:5e:58:a6:b9:2c:8e:
bb:8d:40:3c:aa:81:d6:68:41:73:e9:db:ee:1c:19:cc:ef:14:
67:74:de:51:24:77:2f:fd:7c:f1:fd:2a:52:4d:7f:98:45:79:
eb:05:36:23:55:b3:26:1d:54:52:f5:8f:94:10:c7:93:cd:10:
70:f2:bf:bc:97:a3:0a:6f:a4:80:77:ca:63:dd:50:48:df:bc:
79:87:49:b6:e4:2e:64:f8:4a:b8:49:8e:90:b3:01:98:42:59:
bc:51:30:7a:02:2d:3f:dc:eb:84:ae:37:84:19:6f:77:a7:16:
c6:be:71:16:31:7c:1d:b5:2a:4e:19:db:bd:65:a4:42:19:d4:
5b:1d:5f:51
-----BEGIN CERTIFICATE-----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Generated at Sat Dec 2 23:18:20 2023 by rpki-client on console-fra.rpki-client.org