Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ANtt9ezV0gb5_OuSBkKhtIFK3EQ.roa
File: ANtt9ezV0gb5_OuSBkKhtIFK3EQ.roa (raw, json)
Hash identifier: uifxYi0nnwlUIFmmBAWw7pINIZXnWt4r2XW/OhqcwHY=
Subject key identifier: 00:DB:6D:F5:EC:D5:D2:06:F9:FC:EB:92:06:42:A1:B4:81:4A:DC:44
Certificate issuer: /CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Certificate serial: 01856FB111C03A38D2F8E5202EBF450E56DF
Authority key identifier: 00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ANtt9ezV0gb5_OuSBkKhtIFK3EQ.roa
Signing time: Sun 01 Jan 2023 23:35:53 +0000
ROA not before: Sun 01 Jan 2023 23:35:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47829
IP address blocks: 2.58.236.0/22 maxlen: 24
193.176.236.0/24 maxlen: 24
2a09:ed40::/29 maxlen: 48
2001:67c:2c8::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:11:c0:3a:38:d2:f8:e5:20:2e:bf:45:0e:56:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Validity
Not Before: Jan 1 23:35:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00db6df5ecd5d206f9fceb920642a1b4814adc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:4c:aa:21:eb:7e:1f:76:df:2e:c7:57:4c:
dc:f2:64:56:e8:84:55:5d:52:40:44:26:8b:1c:c1:
2d:5d:63:0e:8e:c0:af:5a:02:a2:56:9c:38:64:54:
bd:12:0d:b4:ba:94:e8:0e:41:a5:f7:34:fd:df:29:
4c:9d:42:49:dd:57:8f:dc:56:97:b1:46:7c:6b:86:
0e:ed:3b:91:53:be:b9:be:39:06:02:40:1e:f1:cd:
24:69:64:d2:38:85:a8:ad:54:1b:14:a5:87:c9:16:
15:b6:5d:0a:14:cf:ef:d7:3d:a1:7c:d0:b0:62:d2:
be:dd:39:94:d4:ad:a7:71:5a:81:58:b0:36:ad:56:
da:e2:ff:45:11:3f:dc:7c:8e:b7:72:19:e9:63:b7:
df:90:77:0d:ab:77:fc:b1:26:6c:37:81:a8:6e:7d:
ea:bc:1f:cb:40:8a:a6:a8:e2:95:a6:a3:de:4f:10:
38:ce:de:32:8c:d5:70:c5:db:6c:ad:f6:f6:13:67:
08:ef:53:eb:14:f1:ae:a2:12:19:e0:3c:f2:de:b7:
c5:20:e3:bf:5e:ce:d7:36:10:6b:8c:8d:29:73:8b:
80:b7:eb:7b:63:32:67:4d:31:65:8d:c7:63:a3:fa:
2c:2f:3f:74:35:ee:ee:04:52:29:94:c7:cd:9c:ed:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DB:6D:F5:EC:D5:D2:06:F9:FC:EB:92:06:42:A1:B4:81:4A:DC:44
X509v3 Authority Key Identifier:
keyid:00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ANtt9ezV0gb5_OuSBkKhtIFK3EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.236.0/22
193.176.236.0/24
IPv6:
2001:67c:2c8::/48
2a09:ed40::/29
Signature Algorithm: sha256WithRSAEncryption
01:79:12:8d:de:0a:c5:1f:44:30:03:e9:f0:77:1e:97:91:25:
65:d3:1d:87:10:c8:ae:bd:e3:59:c0:33:21:c3:96:b5:1b:01:
32:2e:60:77:c6:58:96:ec:37:91:29:b9:14:3b:49:7c:2d:7a:
2f:5d:95:84:2b:9a:74:76:13:e9:ff:d0:7c:20:db:ba:f9:30:
78:fa:2d:d6:d8:6b:db:9f:57:49:35:a0:a4:9f:63:48:ff:73:
58:db:57:b3:e3:3a:1c:4b:df:0a:d0:b8:ed:13:0a:40:77:11:
70:fa:ae:d5:ee:bd:f4:a7:75:7a:2c:98:ad:db:99:72:88:7c:
3a:ed:97:a1:87:5d:03:4a:fa:c6:2f:0e:84:e1:88:0b:08:89:
22:54:3c:62:44:e0:b1:1b:9d:a7:3c:0a:f3:aa:6d:c7:99:0c:
7b:c0:b8:f8:58:1e:eb:b3:ee:22:a5:d4:79:61:69:50:e2:93:
38:fc:1e:97:9c:bf:fc:51:ff:a0:fd:41:fa:78:0f:0c:20:1e:
ed:f6:46:18:c7:a8:d5:2a:d0:a5:eb:59:5c:d7:75:8d:e7:12:
b4:7a:fb:59:81:6b:57:29:4d:39:56:a3:93:9f:00:2e:98:8c:
67:f0:4d:45:34:62:19:0b:13:2e:00:25:c7:48:2b:14:92:be:
47:33:3d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:42 2024 by rpki-client on console-fra.rpki-client.org