Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/iizrPFFGeQwEgasMbNQ8HAMUPD0.roa
File: iizrPFFGeQwEgasMbNQ8HAMUPD0.roa (raw, json)
Hash identifier: n9UMU5bCra0U5U5kQ8LG24rh3s5CJhhAM9BF5KR963k=
Subject key identifier: 8A:2C:EB:3C:51:46:79:0C:04:81:AB:0C:6C:D4:3C:1C:03:14:3C:3D
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 019169F77A135486A4ECA4B7603302392E07
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/iizrPFFGeQwEgasMbNQ8HAMUPD0.roa
Signing time: Mon 19 Aug 2024 09:28:31 +0000
ROA not before: Mon 19 Aug 2024 09:28:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48266
IP address blocks: 206.245.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 14:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:f7:7a:13:54:86:a4:ec:a4:b7:60:33:02:39:2e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Aug 19 09:28:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a2ceb3c5146790c0481ab0c6cd43c1c03143c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:fc:7a:9d:ee:a7:ae:d4:15:9b:a4:9c:b6:
ce:9d:7a:f7:dd:90:8c:e4:0e:cf:6a:0c:25:61:60:
7e:36:cb:10:73:ea:c4:84:cc:ae:c0:b5:c4:91:1c:
36:71:77:42:9a:31:39:5d:40:38:ee:5b:15:51:32:
82:1a:97:7c:f7:01:c3:10:73:c3:f3:e8:b3:04:5b:
20:7f:f9:85:c0:20:cf:86:ab:5b:b1:57:8f:74:32:
aa:65:14:cc:5f:99:55:7f:56:92:80:2b:d8:0d:3d:
4e:07:a3:84:c2:5f:e7:65:bc:7c:41:7c:42:d2:fa:
ec:ea:37:44:95:6f:d6:cb:6b:41:42:84:80:26:6a:
45:5f:9b:99:51:22:f3:a6:dd:ff:10:65:03:df:c2:
d5:2e:8a:2e:db:38:3a:31:13:12:5b:68:50:d0:ed:
25:22:b2:d1:19:22:28:a5:5e:07:f2:f6:f2:6e:b3:
34:99:71:30:02:1a:86:ad:7e:7d:6b:ca:84:c9:2f:
15:c1:19:e1:6d:ac:de:30:ba:fc:7a:4e:ba:b3:6d:
9c:5b:78:fa:3c:18:02:a5:63:fe:c0:00:e4:c3:5e:
13:d2:57:92:34:8d:16:85:a4:a5:df:ba:ed:a6:44:
e0:09:3b:eb:0d:a0:e3:95:ed:e3:40:35:1f:f6:2e:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2C:EB:3C:51:46:79:0C:04:81:AB:0C:6C:D4:3C:1C:03:14:3C:3D
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/iizrPFFGeQwEgasMbNQ8HAMUPD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.238.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ca:b7:5d:ac:72:f2:85:eb:88:28:6c:5c:39:a7:dc:de:85:
dd:4d:a8:76:53:01:81:20:c3:b3:85:f1:fd:a3:13:36:6b:8a:
06:d5:6e:ce:dd:e6:38:a5:04:75:ec:07:e6:ce:df:c6:ae:43:
73:12:ec:0a:a7:90:30:f6:3c:a8:56:7b:6e:df:53:73:90:4f:
91:dd:6b:33:27:bd:d3:a5:2a:2f:e3:99:29:71:e4:c7:74:75:
40:bc:2a:f3:7a:00:e0:e3:ec:c6:aa:ad:4f:08:20:3c:64:87:
f4:c0:8c:92:83:3b:7a:da:54:28:c8:9d:32:2b:13:4d:02:ae:
c8:5e:eb:43:27:6e:59:63:53:3b:59:af:b6:87:44:b5:01:a3:
22:a8:7d:01:ff:1c:de:1e:61:11:a6:3c:98:d2:d5:4e:0c:7b:
6c:1f:62:81:d9:c3:32:18:a0:44:ec:e2:3e:d9:a4:ae:c5:87:
55:d6:49:72:03:20:43:79:0e:9d:b3:21:c0:25:c5:31:e5:3f:
72:81:0d:7f:d6:27:bd:92:56:7b:8c:32:27:49:d8:52:6e:3c:
30:93:6a:03:4b:94:ca:ed:8d:72:b2:d1:e3:38:71:52:e3:89:
7b:57:05:f9:f4:e9:8f:da:da:f3:03:81:d5:01:80:65:7c:a3:
fb:de:f9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 02:44:39 2024 by rpki-client on console.sobornost.net