Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/7vdHYbF2jxZ0m3m4z6j6GS4M3jQ.roa
File: 7vdHYbF2jxZ0m3m4z6j6GS4M3jQ.roa (raw, json)
Hash identifier: Ti23tAe39dNo62qVppEU6TVsTOOMPpx4XPYum0f1kU8=
Subject key identifier: EE:F7:47:61:B1:76:8F:16:74:9B:79:B8:CF:A8:FA:19:2E:0C:DE:34
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 018570D530E20A292DE7BEBC6B3E2814A871
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/7vdHYbF2jxZ0m3m4z6j6GS4M3jQ.roa
Signing time: Mon 02 Jan 2023 04:54:57 +0000
ROA not before: Mon 02 Jan 2023 04:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213245
IP address blocks: 84.17.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:30:e2:0a:29:2d:e7:be:bc:6b:3e:28:14:a8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Jan 2 04:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eef74761b1768f16749b79b8cfa8fa192e0cde34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c9:de:34:95:78:03:c3:8f:f3:3d:86:8b:70:
a5:40:25:16:ea:68:7d:cf:10:f1:63:fd:b8:23:1f:
a5:3b:37:18:57:34:45:3c:08:6c:28:b9:24:da:1d:
79:7c:bc:a3:99:e8:56:c2:a8:05:25:62:83:9c:87:
51:8f:43:32:49:d6:98:f8:91:e5:8c:79:36:5a:c7:
c4:f0:13:ca:67:b3:17:7a:77:ff:9d:28:ea:25:29:
e9:63:68:2f:17:a1:81:4b:37:f2:7e:cf:aa:5c:58:
20:0d:8e:e7:c4:cd:e3:4a:b5:12:63:12:da:01:c9:
b9:0f:b3:af:5d:1b:ba:4c:4b:73:f1:41:b7:62:0b:
e1:98:be:10:ff:b8:b1:27:8d:8a:68:82:9e:99:a4:
bc:e4:47:1c:14:48:41:ba:05:83:39:1f:b5:d7:6e:
5a:bc:91:29:78:1d:54:eb:9e:53:29:71:d9:bd:8c:
63:75:eb:0f:d9:f5:02:09:30:96:41:d3:a1:e5:40:
4a:b8:50:53:e5:1c:58:7f:e7:10:aa:d6:43:56:be:
63:02:37:5e:37:6b:7f:e7:12:87:31:50:f7:52:d8:
a2:cf:f9:20:c0:6b:6d:eb:bc:cb:3d:8e:79:56:6a:
66:42:2f:e0:2c:74:35:58:7b:f7:de:2f:83:00:20:
a7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F7:47:61:B1:76:8F:16:74:9B:79:B8:CF:A8:FA:19:2E:0C:DE:34
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/7vdHYbF2jxZ0m3m4z6j6GS4M3jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.17.88.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:57:a5:88:39:81:87:b4:79:16:0d:bf:06:72:5f:16:0f:32:
8c:f1:d3:e0:24:5b:ae:46:d7:f2:bb:56:74:0e:18:f8:0d:76:
5a:84:d0:71:de:0b:4d:3e:57:38:61:dc:db:5f:dd:0c:b4:68:
c7:17:9d:69:e0:72:39:9d:f5:7e:89:a2:17:65:9e:65:ed:db:
ff:89:0f:ef:25:59:13:12:c2:1f:b3:3b:6e:9c:1d:76:46:0c:
23:76:b2:4b:09:38:cc:63:59:84:09:9c:88:8d:7c:f9:24:2d:
0e:45:07:e0:41:0d:77:8c:f8:2b:06:cb:8b:42:d6:4f:64:a3:
d9:d1:f9:41:1d:6e:9f:1e:37:24:5b:f6:ae:1f:3e:fb:1c:ab:
29:ff:2c:3f:ed:9e:4f:ae:2e:bb:4c:3e:70:87:ab:27:b6:75:
91:92:c5:3f:e8:dd:34:c9:fe:75:6c:5c:b3:f3:f5:b5:e3:f6:
73:d9:51:27:19:70:f6:bd:63:c3:f6:ff:ae:c4:d3:35:61:29:
d6:c0:ec:fc:e9:77:29:02:f1:06:53:40:80:ee:1e:8c:9c:1f:
28:cb:bd:32:2f:da:6d:5b:d8:94:36:34:d1:e6:a2:16:f5:5b:
74:9d:59:a7:47:a2:1d:da:3f:d0:36:4c:f8:24:1d:d4:ff:c5:
77:0a:1b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:45 2024 by rpki-client on console-ams.rpki-client.org