Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/T_4l-2C9ko7SLSzn5OSmvgCkReQ.roa
File: T_4l-2C9ko7SLSzn5OSmvgCkReQ.roa (raw, json)
Hash identifier: 9YEPmlRnCkIeFt6rzPaMP7ml6rvPURC/2IzHGybUKgk=
Subject key identifier: 4F:FE:25:FB:60:BD:92:8E:D2:2D:2C:E7:E4:E4:A6:BE:00:A4:45:E4
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018663FD1CF337CF8B1B4D53D8EFC3890793
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/T_4l-2C9ko7SLSzn5OSmvgCkReQ.roa
Signing time: Sat 18 Feb 2023 10:06:17 +0000
ROA not before: Sat 18 Feb 2023 10:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 164.215.102.0/24 maxlen: 24
188.64.10.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:63:fd:1c:f3:37:cf:8b:1b:4d:53:d8:ef:c3:89:07:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 18 10:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ffe25fb60bd928ed22d2ce7e4e4a6be00a445e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:db:8b:a9:ce:8a:ea:bb:cb:7d:82:6b:87:38:
91:bc:9a:3d:84:d4:57:1c:c1:99:df:bb:bb:a6:fa:
85:78:a2:be:30:58:cb:7a:7b:7f:37:8e:6a:7d:48:
9c:9b:06:e5:4c:e1:20:da:86:46:36:6d:26:2e:cd:
a7:ec:00:ec:16:69:35:e8:f0:09:7b:73:7e:d4:12:
bc:5d:a4:76:ac:5c:ee:c6:9a:1f:17:10:46:9d:94:
ce:75:6a:51:27:7e:c7:0c:39:3c:01:34:a5:0a:60:
64:53:2f:13:b5:2f:34:9d:b8:dc:15:4a:7a:69:b3:
75:6a:25:c3:53:0d:86:20:96:b5:62:c7:e7:eb:e0:
3c:a1:ca:aa:2d:dc:f2:9c:f7:5e:fd:47:f2:97:a3:
83:83:5f:8d:a9:39:d4:d8:90:90:f6:fc:06:2d:40:
82:2b:a8:b6:6c:65:95:cd:31:32:c3:69:94:e0:f6:
17:7a:88:f0:00:61:7b:f0:00:02:72:58:79:00:de:
90:ef:09:64:50:77:6e:20:b3:30:20:f0:de:42:44:
5e:d9:50:46:05:04:27:9c:b9:fe:bf:cd:42:cb:25:
4b:d8:72:1b:63:09:e7:9c:d4:87:09:f0:00:fd:46:
65:e7:d0:c5:98:18:66:4a:c4:6e:eb:da:18:72:9b:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FE:25:FB:60:BD:92:8E:D2:2D:2C:E7:E4:E4:A6:BE:00:A4:45:E4
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/T_4l-2C9ko7SLSzn5OSmvgCkReQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.102.0/24
188.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
35:21:07:a8:7c:12:1b:3b:bd:33:1e:f9:29:06:58:7c:e6:2c:
ee:3c:98:11:ed:7e:22:41:cb:28:98:57:5a:71:58:34:cc:55:
45:6f:1e:ab:58:1d:7c:ec:bc:3f:cc:9f:7d:bb:64:ca:6d:89:
c9:0c:18:45:ec:bc:42:36:1d:56:dc:c8:2f:0d:3f:a1:c5:3b:
2a:eb:46:a4:62:4e:85:9a:19:61:b7:c8:b0:51:c9:34:36:f7:
ad:3a:54:d6:a4:c6:3d:c3:6e:9c:38:4e:71:42:f0:c5:bd:7f:
93:f1:ed:37:b8:be:3e:fe:b0:8f:7e:2d:9e:89:0c:ee:d5:7c:
ec:ec:49:02:52:82:1f:34:55:81:bb:74:44:94:2d:1a:3c:64:
67:47:52:f0:5d:d4:20:17:d1:45:63:91:5c:dc:e9:5e:ce:71:
8a:3f:22:b2:8c:f9:6b:d2:e7:fe:2b:38:4d:ca:56:07:6e:f9:
13:49:b5:db:cb:84:87:20:77:84:9f:6e:b4:e5:33:9f:83:10:
4c:c1:8e:e7:45:47:4a:a1:68:b4:d1:22:be:b6:29:c5:82:20:
4f:69:6d:d4:45:82:3e:78:d7:b8:87:a9:ce:3c:47:24:2c:77:
4b:05:93:d5:48:1c:47:59:ab:a4:9f:e3:cb:97:7d:04:91:85:
ae:ab:81:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org