Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/w8IqBUnKeQPVkdCh5MMZ8qLAsi0.roa
File: w8IqBUnKeQPVkdCh5MMZ8qLAsi0.roa (raw, json)
Hash identifier: UlGJhhzMC+k3czvXdWD7gfOPQhugfFYto+zPiBJNfHE=
Subject key identifier: C3:C2:2A:05:49:CA:79:03:D5:91:D0:A1:E4:C3:19:F2:A2:C0:B2:2D
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 01882087C758E26C587EE094CF148266503D
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/w8IqBUnKeQPVkdCh5MMZ8qLAsi0.roa
Signing time: Mon 15 May 2023 17:49:09 +0000
ROA not before: Mon 15 May 2023 17:49:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25317
IP address blocks: 213.244.44.0/22 maxlen: 22
213.244.48.0/21 maxlen: 21
213.244.56.0/21 maxlen: 21
2a0a:6840::/30 maxlen: 30
2a0a:6844::/30 maxlen: 30
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:87:c7:58:e2:6c:58:7e:e0:94:cf:14:82:66:50:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: May 15 17:49:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3c22a0549ca7903d591d0a1e4c319f2a2c0b22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:ad:3f:02:f6:76:71:11:9c:2b:36:90:ae:
48:17:98:2c:60:2b:d4:62:a5:e0:36:c9:c6:0e:f0:
a0:80:94:44:a9:9c:01:a9:39:71:ff:bc:3c:0d:ef:
20:b0:1a:49:58:f6:58:00:31:92:94:39:5a:f8:25:
8b:6f:ad:5e:98:41:74:6d:33:d4:95:b2:3e:a2:82:
b0:92:98:04:5c:28:b8:ed:87:97:36:63:6d:99:5c:
25:5f:d1:8d:27:91:fe:53:b5:f4:70:82:2c:d0:91:
8c:b0:d4:de:eb:96:27:e6:c6:c8:7e:9a:2a:23:57:
7b:88:97:d8:70:a9:68:05:cd:89:76:8e:85:70:27:
7e:54:1a:34:5c:98:dc:88:fb:e8:b6:a2:38:f0:84:
d7:ae:db:45:84:42:8a:6b:c1:08:a6:db:fd:5f:84:
22:5d:51:9e:df:17:e4:44:90:55:22:7b:cf:0c:8c:
1d:44:68:14:20:52:27:02:bd:6e:34:59:60:9c:f3:
0b:fb:00:a2:52:f1:cf:45:f0:cf:69:c6:db:3c:98:
d9:7c:8f:be:08:ba:9a:ee:81:e8:8d:3a:01:9e:bf:
c6:9e:b8:10:1d:dc:54:a5:62:1d:1e:15:a7:e8:05:
2a:bd:cb:ec:06:66:ed:2f:9f:03:86:52:63:76:ec:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C2:2A:05:49:CA:79:03:D5:91:D0:A1:E4:C3:19:F2:A2:C0:B2:2D
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/w8IqBUnKeQPVkdCh5MMZ8qLAsi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.244.44.0-213.244.63.255
IPv6:
2a0a:6840::/29
Signature Algorithm: sha256WithRSAEncryption
a4:16:89:71:60:f2:92:6d:7e:68:e4:90:50:3a:14:84:1f:64:
26:33:d9:7f:7e:b6:b4:d9:74:b8:33:cd:38:5b:6a:0f:85:3a:
cd:70:da:11:a4:a6:a5:cd:50:c7:5b:28:fc:d1:9a:28:9e:58:
03:f0:34:6c:2a:75:aa:f7:94:5a:73:d0:ec:c9:27:d0:ff:e7:
4f:10:87:c2:d8:16:fc:31:c4:3e:5d:ae:1f:1b:9b:63:ae:75:
cd:90:e2:aa:cf:6e:c8:6b:2c:7a:71:b6:93:62:9c:99:7d:18:
e7:5c:ae:16:54:3f:fa:f2:07:ad:d7:87:7d:7d:1b:0b:e1:44:
61:0f:86:32:31:e3:04:9d:40:85:c5:59:48:c5:4a:17:51:63:
65:97:50:7c:26:6c:aa:fb:27:18:8d:24:e1:5b:c6:e3:b9:d4:
60:1d:b2:5d:83:24:08:36:e4:2b:b7:e6:7d:90:e5:a0:e1:c2:
20:a8:8f:31:43:8f:d2:e7:f3:e6:a7:3d:7c:c4:78:b5:66:e8:
09:8c:52:6a:fc:9b:ad:25:4e:7d:89:8b:69:3d:e7:45:90:f6:
64:2c:e8:52:70:57:29:25:c0:f6:e1:35:df:cc:2e:21:ff:e6:
4c:31:3c:e4:82:b5:36:2f:0d:69:a6:ef:a8:43:e1:4e:9f:31:
95:de:6a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:58 2023 by rpki-client on console-ams.rpki-client.org