Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/F24hOg4_iWcmZcizEQlVUslWyX8.roa
File: F24hOg4_iWcmZcizEQlVUslWyX8.roa (raw, json)
Hash identifier: AQIZQrmqLQwrvUaFJKcBmUCKbONwwr5ql7fcFBVMIfs=
Subject key identifier: 17:6E:21:3A:0E:3F:89:67:26:65:C8:B3:11:09:55:52:C9:56:C9:7F
Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial: 018572034F7686B68FD51E9247DB7ADD4933
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/F24hOg4_iWcmZcizEQlVUslWyX8.roa
Signing time: Mon 02 Jan 2023 10:24:57 +0000
ROA not before: Mon 02 Jan 2023 10:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13101
IP address blocks: 80.66.192.0/22 maxlen: 22
113.30.180.0/22 maxlen: 22
185.181.128.0/22 maxlen: 22
113.30.220.0/22 maxlen: 22
185.152.144.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:4f:76:86:b6:8f:d5:1e:92:47:db:7a:dd:49:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Validity
Not Before: Jan 2 10:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=176e213a0e3f89672665c8b311095552c956c97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:69:0e:0d:e2:f8:ca:1e:11:43:ce:31:69:74:
ce:4e:8f:92:4e:c7:ae:32:e3:6c:56:43:5e:30:f1:
a4:8d:e7:76:e5:eb:49:fb:a6:9d:7a:63:00:ff:14:
14:73:c1:87:af:cc:65:22:3b:e6:6f:ab:8e:e6:6a:
c8:f0:ee:f2:49:bc:6d:d2:4e:77:e3:8d:00:2e:b1:
a6:ef:38:b0:aa:6d:70:13:4d:02:52:06:fb:12:49:
39:bb:5c:d6:7f:dd:e3:0e:e2:87:fe:c6:e5:5f:a8:
80:d4:90:1f:22:a4:75:56:c9:ee:dd:8c:cf:7e:cd:
03:57:24:dc:71:ad:bc:38:39:3f:a0:c9:e6:f7:d6:
22:fe:b2:ac:93:ed:5a:33:9a:46:56:7f:e7:d1:76:
01:82:fb:a7:80:1f:73:07:24:3d:61:5a:78:01:23:
2a:7c:74:9f:a7:7b:71:84:b6:ee:fb:a1:42:dc:c3:
16:08:54:a9:39:c2:25:fd:78:5d:06:92:20:d2:2c:
d7:75:20:9d:0d:94:00:85:76:e5:9e:3f:f1:df:b9:
a1:eb:bd:81:2f:c0:92:4b:bd:db:79:a1:f3:48:55:
8e:35:b9:83:fc:71:51:58:df:e8:46:1d:dc:49:28:
41:74:5d:33:4c:25:f2:aa:b8:7d:75:3c:75:95:ba:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6E:21:3A:0E:3F:89:67:26:65:C8:B3:11:09:55:52:C9:56:C9:7F
X509v3 Authority Key Identifier:
keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/F24hOg4_iWcmZcizEQlVUslWyX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.192.0/22
113.30.180.0/22
113.30.220.0/22
185.152.144.0/22
185.181.128.0/22
Signature Algorithm: sha256WithRSAEncryption
60:dd:c3:c0:cf:5e:ec:66:f5:97:b0:2b:0f:a4:12:3e:5b:7f:
17:e7:ec:ac:7e:8a:ed:52:e1:17:6c:fa:85:e1:19:30:b3:10:
78:b4:de:03:91:92:ae:7b:ea:80:a2:c4:ea:21:2a:6b:84:93:
49:58:80:66:50:b0:23:c4:4c:98:ef:5f:08:ab:a8:0e:92:17:
de:23:ef:ae:c8:89:e2:13:45:54:9a:19:8f:93:23:56:93:18:
08:81:77:4e:6a:ab:94:a2:4d:38:46:c0:9d:43:61:ac:94:6f:
1d:2a:3f:8d:fd:df:96:31:b3:11:3e:d8:9d:19:85:0a:2c:9c:
d8:39:25:bb:ac:db:e5:c7:ec:41:99:cf:55:3a:73:8e:22:45:
3b:c7:22:2d:29:24:1c:ea:7e:4f:3c:9d:95:8b:9f:9a:9a:c4:
29:c4:da:2d:e6:6b:a3:ec:be:6e:f8:ae:1b:ad:c2:88:9a:ec:
88:e2:5c:3e:11:2c:15:43:09:ee:04:bd:18:30:cf:cb:b4:26:
ec:11:ad:76:15:29:71:f7:52:78:a9:bf:9b:6e:be:43:26:70:
14:d6:eb:52:a2:0a:9a:1b:72:5d:cd:d0:93:d8:66:54:42:c1:
2c:5f:5a:b5:a1:de:56:37:cd:23:1d:21:6f:74:1b:80:1c:1a:
59:1e:6b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:59 2024 by rpki-client on console-ams.rpki-client.org