Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/ICE8tw_fjlb3QPr9wwdLqNVdqKo.roa
File: ICE8tw_fjlb3QPr9wwdLqNVdqKo.roa (raw, json)
Hash identifier: SV+7la+0d1oTAXRrmeQqXw/TOQQhOWwQ0ZbISoOjZYs=
Subject key identifier: 20:21:3C:B7:0F:DF:8E:56:F7:40:FA:FD:C3:07:4B:A8:D5:5D:A8:AA
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 0185730CD4C05E7BC2C8AFF846ACF2B8FC35
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/ICE8tw_fjlb3QPr9wwdLqNVdqKo.roa
Signing time: Mon 02 Jan 2023 15:14:58 +0000
ROA not before: Mon 02 Jan 2023 15:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205650
IP address blocks: 147.234.18.0/24 maxlen: 24
147.234.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:d4:c0:5e:7b:c2:c8:af:f8:46:ac:f2:b8:fc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20213cb70fdf8e56f740fafdc3074ba8d55da8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:7c:d5:aa:cf:88:cd:5d:d0:17:68:bd:c8:
82:64:c2:f7:38:f9:c4:dc:78:56:a9:8a:e4:97:34:
e2:1e:b7:7c:4a:fd:f0:b4:27:93:d6:74:c8:1a:d7:
bc:2c:41:55:0f:5b:02:78:fd:cf:b3:4f:06:4e:29:
f0:9a:66:d4:04:8b:bd:40:25:18:6e:8c:2d:1b:4d:
9e:14:b6:0c:ad:25:67:72:09:c1:ac:4e:1f:22:d3:
9c:d5:5c:7b:d5:ec:b9:1d:ca:92:7a:12:b2:18:eb:
46:d8:48:a4:17:3d:cc:0e:58:ef:f3:b3:4d:37:da:
90:7b:53:fb:b9:ec:68:c4:f5:6d:dc:17:85:67:c8:
b4:bc:79:ca:1b:e1:15:ef:c9:90:b6:f7:c7:39:0a:
31:46:01:fd:a6:7d:4a:50:b3:d7:3b:28:ee:69:d8:
85:2f:ac:9c:c2:eb:a7:70:b6:eb:e8:36:bb:43:ba:
b1:99:fb:1c:4b:f9:ff:af:c4:3c:9f:d4:a6:91:47:
ff:52:0d:de:22:d7:ab:e6:09:f3:20:50:0e:d1:6c:
ab:ea:ae:b7:7a:3a:e8:66:a7:51:62:dc:65:0f:22:
ca:59:97:f0:17:c9:b4:41:9f:83:c7:24:28:b9:b1:
3c:b9:91:03:93:ca:25:87:eb:4a:1c:b9:65:cb:54:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:21:3C:B7:0F:DF:8E:56:F7:40:FA:FD:C3:07:4B:A8:D5:5D:A8:AA
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/ICE8tw_fjlb3QPr9wwdLqNVdqKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.18.0/23
Signature Algorithm: sha256WithRSAEncryption
25:1f:da:ec:15:11:8f:76:f2:ae:1c:84:e9:f8:3b:55:79:77:
80:e1:68:c2:d2:d2:d2:4f:f9:68:d5:47:ba:77:9f:a2:fe:74:
94:ab:e2:82:43:ec:f3:ba:18:82:9e:eb:da:5f:81:d2:f6:cb:
95:df:de:1d:52:2f:be:5a:93:d9:1e:c1:38:de:b6:fb:48:02:
c7:a3:fc:bf:f4:4a:30:03:f2:ea:6c:81:fd:c6:39:d8:19:c3:
59:ee:d0:95:6d:0d:1d:11:70:62:df:a9:c9:b3:03:36:5c:fb:
a7:38:d2:55:b4:02:d9:ba:f3:59:dc:cd:22:6f:0c:74:4f:cd:
eb:ea:a6:5a:95:07:ea:b6:64:d1:a1:31:75:11:34:33:c3:1a:
21:97:7d:65:96:a0:50:29:6e:e2:7d:d5:d8:69:d3:77:ea:5c:
f8:78:51:16:6a:d6:87:91:97:eb:b6:e6:15:2f:2b:06:35:ea:
85:c4:1f:a9:21:06:bc:87:72:9b:c2:30:01:9f:cb:fd:3d:1b:
59:34:3d:95:47:0f:c5:3c:48:f3:a6:5f:b1:82:59:42:4e:bf:
6e:52:53:4d:d2:b2:fd:00:9e:f9:73:49:84:73:28:74:e7:62:
3f:04:7d:ab:91:5a:93:d6:66:80:40:7b:5f:82:64:24:f8:84:
ec:99:4a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:23 2024 by rpki-client on console.sobornost.net