Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/F-sVKSHWPf4N5QXxxG6O3_LEVE8.roa
File: F-sVKSHWPf4N5QXxxG6O3_LEVE8.roa (raw, json)
Hash identifier: oBN73vJxWjvzxR/zN2FmvV7CKNmyiRFSYmKgA5FgUeY=
Subject key identifier: 17:EB:15:29:21:D6:3D:FE:0D:E5:05:F1:C4:6E:8E:DF:F2:C4:54:4F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187364D19FE506F7F9BEBA6CCD7B6333322
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/F-sVKSHWPf4N5QXxxG6O3_LEVE8.roa
Signing time: Fri 31 Mar 2023 06:13:55 +0000
ROA not before: Fri 31 Mar 2023 06:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133900
IP address blocks: 171.22.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:4d:19:fe:50:6f:7f:9b:eb:a6:cc:d7:b6:33:33:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 31 06:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17eb152921d63dfe0de505f1c46e8edff2c4544f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:33:9f:c6:7f:21:f4:76:56:c5:b4:5b:71:
3f:47:81:e7:17:42:86:a0:f1:06:10:e9:b7:21:1f:
8d:d2:c8:fa:80:d6:6e:70:74:32:73:6f:29:85:20:
94:1f:dd:2d:a4:c6:57:0e:79:5a:77:be:c3:6b:79:
99:10:7c:ee:85:0d:83:0f:4a:07:25:9e:a8:0e:c6:
35:d5:f5:e7:6a:89:b4:eb:d9:d2:7e:2f:cc:56:fc:
1f:3b:31:c3:44:e5:6d:59:73:55:78:ee:61:cb:e7:
e0:a3:c2:f5:00:a8:e3:cc:34:93:4a:5f:cd:10:6d:
ba:bd:32:9a:60:32:ce:8a:ff:75:0a:4a:ce:21:cf:
4b:58:a2:55:70:93:3f:e2:9a:52:be:24:de:50:17:
28:00:72:9e:78:a2:b1:77:42:e4:da:e9:4c:b6:d2:
b7:75:7f:91:4a:73:ff:d8:ef:71:a2:8a:2e:08:11:
bf:bb:17:f2:bd:5a:83:f5:ca:ee:8c:ee:c8:b4:8c:
60:2d:e4:b8:0b:f4:10:68:e9:a6:a0:28:3a:63:d8:
7c:44:a6:b2:fa:a0:75:54:40:32:f5:c1:35:5e:f6:
13:08:1f:b9:f5:cb:e3:d6:41:b2:3a:03:52:06:84:
b5:df:8c:e6:05:6d:89:64:7d:a8:49:b7:40:68:67:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EB:15:29:21:D6:3D:FE:0D:E5:05:F1:C4:6E:8E:DF:F2:C4:54:4F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/F-sVKSHWPf4N5QXxxG6O3_LEVE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.100.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bb:44:7a:41:c7:82:48:01:e3:1b:4a:36:69:2c:5c:89:7e:
e8:59:87:45:e1:1f:c5:59:10:9f:0c:ef:a4:8d:20:a2:88:ab:
e8:0c:d0:c2:10:f1:61:af:da:2e:23:8d:2a:9f:e5:0a:f2:3d:
e4:59:c1:2c:fa:d1:b0:d7:8b:f6:18:50:7d:40:da:30:3f:e3:
15:bd:b1:ea:9f:37:51:de:37:78:91:6e:b6:81:3a:0e:86:c0:
9a:f7:44:3a:34:ab:f4:12:03:6f:e9:1e:54:17:31:0c:a1:0a:
c0:a7:e3:db:99:a2:a2:c4:3b:bc:7a:be:20:c0:af:1e:b1:3f:
00:92:f9:a1:41:cc:e6:4a:36:80:7b:ac:e1:a0:ea:77:ac:6e:
41:dc:25:4e:23:1b:43:2c:11:92:bf:da:9b:36:d6:f9:89:17:
ba:0f:38:5d:25:8e:e8:94:dd:0a:58:06:45:c1:7b:ee:bc:51:
d0:b4:a8:91:93:7a:e0:b5:4a:25:51:f7:98:4e:40:a1:e5:ad:
69:cf:80:2c:61:c3:e3:a0:68:c3:2a:f8:40:9b:ed:26:59:b5:
3a:55:59:cd:79:ff:a9:0d:8c:d7:31:de:eb:31:5b:30:ee:db:
12:69:91:ab:40:8b:68:69:1a:b4:79:cf:ca:2b:88:00:40:f2:
22:95:2b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org