Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/7thcCknz3XjHniEN-5wPwtsxZGw.roa
File: 7thcCknz3XjHniEN-5wPwtsxZGw.roa (raw, json)
Hash identifier: zghyp/jfzHO0GNCqX5x79KpbV+7KSgN9uGDKna/nj1g=
Subject key identifier: EE:D8:5C:0A:49:F3:DD:78:C7:9E:21:0D:FB:9C:0F:C2:DB:31:64:6C
Certificate issuer: /CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Certificate serial: 018833A90AE2C57B3B73BE35072A2F52A61D
Authority key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/7thcCknz3XjHniEN-5wPwtsxZGw.roa
Signing time: Fri 19 May 2023 10:58:16 +0000
ROA not before: Fri 19 May 2023 10:58:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212552
IP address blocks: 141.98.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:a9:0a:e2:c5:7b:3b:73:be:35:07:2a:2f:52:a6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Validity
Not Before: May 19 10:58:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eed85c0a49f3dd78c79e210dfb9c0fc2db31646c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:cd:e6:8f:89:db:f2:1c:b7:06:e1:80:e3:
d2:c8:44:70:f9:4c:a6:8a:13:aa:ba:95:ac:36:25:
c5:d3:86:56:40:c2:df:a4:33:b3:f3:55:93:b7:2b:
26:e0:2b:0b:c8:4e:ab:ea:cf:26:ba:7e:6d:c3:7e:
d1:55:f8:27:28:e9:3c:f1:90:9e:40:9a:ba:47:20:
55:eb:ed:73:45:e8:48:0b:b3:14:a3:1c:cd:26:f9:
d5:8b:48:c8:84:98:0c:0c:a4:a1:13:7e:b2:9a:61:
0b:38:15:f3:a7:14:29:e1:c4:ce:8e:cf:46:c4:fb:
4c:74:ed:21:58:9d:8e:7d:43:f9:ac:e7:58:7c:0f:
5a:a1:a4:ce:4a:c1:35:e3:40:0a:00:9e:01:e9:ba:
40:99:b4:41:f4:80:bb:59:99:3d:a8:66:a6:7a:61:
f1:dd:c5:fe:0b:b1:b1:b3:e9:13:dd:c4:2c:68:1c:
15:bd:54:fa:2d:04:20:b9:53:8b:68:0b:c6:5a:6b:
22:61:52:00:a6:cd:f2:c3:41:ec:76:30:61:e5:7d:
8c:0b:6d:08:fd:6f:f8:46:e2:cd:b9:5b:99:9f:87:
16:55:21:bd:97:fc:b4:bf:ee:f9:23:b7:c2:e2:3f:
4f:63:0c:e3:6c:d9:6d:80:c9:90:81:21:fa:12:b9:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D8:5C:0A:49:F3:DD:78:C7:9E:21:0D:FB:9C:0F:C2:DB:31:64:6C
X509v3 Authority Key Identifier:
keyid:C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/7thcCknz3XjHniEN-5wPwtsxZGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.210.0/24
Signature Algorithm: sha256WithRSAEncryption
02:71:21:ac:27:ba:80:8b:15:35:f8:ad:0a:c7:3a:a2:9d:9d:
82:0c:28:ff:6c:10:bf:0d:11:3a:a6:2c:b7:13:01:0c:19:9f:
9e:a7:ec:92:e4:6a:39:64:b4:3f:de:7a:0e:c8:36:57:67:dd:
34:41:e6:6a:d2:bf:01:2f:ac:ae:d5:17:c4:b1:35:70:7e:ef:
1d:79:d6:e9:68:1d:7e:46:9f:30:bb:c9:c1:b0:90:e1:72:bf:
32:fc:58:6a:63:bd:8d:66:7f:32:46:67:7b:51:63:ea:c6:00:
45:01:d0:29:5f:8b:ad:ed:0f:db:a7:06:b4:5d:63:bb:d6:db:
66:d9:57:d8:4c:65:19:b0:27:3c:a0:2e:fb:5f:aa:4a:22:93:
38:b5:69:d3:7e:ae:88:32:eb:98:21:dc:37:36:e9:df:80:e4:
1e:21:50:72:89:47:06:2c:dc:8a:4a:d3:ca:9a:8a:75:4d:88:
9e:68:79:33:09:b4:59:11:f7:78:76:69:9d:ad:da:e0:6f:cd:
5b:4b:dd:37:98:b4:d6:66:52:b5:eb:eb:a6:08:5c:46:b3:30:
fa:91:30:2a:7e:49:b4:0a:b9:31:12:61:27:f5:8c:ca:66:ba:
00:bb:72:c6:cc:a1:0a:b0:d8:df:e8:e6:7d:52:e0:dc:50:a1:
6b:16:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:10 2024 by rpki-client on console.sobornost.net