Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/202romGZ9X7b8AZ0oCAy73BhMlI.roa
File: 202romGZ9X7b8AZ0oCAy73BhMlI.roa (raw, json)
Hash identifier: zlvJ5KCLn1CuR8QmtQzJtWBB2nTzOkrrc9CPZWnXqhI=
Subject key identifier: DB:4D:AB:A2:61:99:F5:7E:DB:F0:06:74:A0:20:32:EF:70:61:32:52
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018856C8903C5C210584D9E2C1CBA0BA0AFB
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/202romGZ9X7b8AZ0oCAy73BhMlI.roa
Signing time: Fri 26 May 2023 06:39:24 +0000
ROA not before: Fri 26 May 2023 06:39:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206252
IP address blocks: 213.99.42.0/24 maxlen: 24
217.124.172.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:56:c8:90:3c:5c:21:05:84:d9:e2:c1:cb:a0:ba:0a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: May 26 06:39:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db4daba26199f57edbf00674a02032ef70613252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a5:be:95:f2:c0:b7:d2:a5:47:63:b1:c3:85:
52:e6:b0:84:bb:0c:89:eb:7b:11:5d:08:fb:b6:ac:
2c:63:ac:b0:08:20:15:6d:3a:73:df:32:eb:ba:48:
5b:e6:cf:40:5c:2d:6d:7c:6b:c8:c4:cf:02:c0:cb:
fb:4b:e1:ab:cd:7e:7a:1c:a4:a7:c1:30:6c:ff:22:
af:1d:db:2c:6b:2c:57:61:a4:7a:af:d8:45:66:d3:
6d:a5:1f:78:70:f1:b0:f5:40:ce:62:25:4e:52:e8:
28:fe:d0:3a:76:d6:42:4e:0b:41:c7:49:bf:79:30:
63:e9:b0:b0:da:a6:c4:d5:cd:5d:1a:06:88:b8:05:
6b:b8:93:66:32:1d:d2:29:96:a1:0d:04:b6:96:73:
00:89:59:2b:a2:70:a1:ab:40:28:d9:06:8f:94:bc:
cf:8f:41:e7:ac:bb:12:a3:17:a9:31:5e:49:96:dd:
16:5e:3e:50:99:4c:cd:7d:88:25:b5:0e:2b:50:79:
10:09:c6:7a:f1:c6:53:86:63:f7:fc:08:ec:13:1c:
a9:59:7b:3b:1a:12:66:95:3f:a7:d3:f3:e8:86:22:
d8:ce:fb:ba:48:9f:94:d6:24:1b:aa:30:03:81:04:
e1:9a:ff:00:1d:d8:fe:70:b5:67:3e:53:84:5a:77:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4D:AB:A2:61:99:F5:7E:DB:F0:06:74:A0:20:32:EF:70:61:32:52
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/202romGZ9X7b8AZ0oCAy73BhMlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.99.42.0/24
217.124.172.0/23
Signature Algorithm: sha256WithRSAEncryption
e1:73:76:1d:1d:2b:cb:9b:fa:32:89:44:88:28:83:7b:b3:df:
3c:b2:0a:03:c5:1f:e4:73:eb:3d:61:be:68:34:79:c3:74:03:
cb:84:e7:b1:a2:d0:aa:1e:6b:9e:81:78:b8:71:31:ed:44:d8:
65:fe:e1:73:d0:7d:90:64:b9:5c:20:95:0e:7d:c9:89:1b:30:
37:ed:15:22:2e:0d:13:a4:0b:7a:f6:1a:c4:f8:b1:d4:bf:5b:
83:08:b3:91:f9:0d:c3:19:0e:70:ce:06:2b:08:0d:00:f1:86:
4c:27:a5:c5:82:de:ef:f7:ed:3f:48:91:8f:27:9f:ac:3e:2c:
63:1f:23:5f:0b:60:e9:0a:bd:f2:68:7c:3d:f5:4a:b8:b5:de:
4e:d4:a9:bb:aa:37:ac:0b:05:3a:e9:1b:ed:d5:aa:3a:68:5e:
40:64:b3:06:7c:87:10:98:1b:af:be:26:97:ac:05:cc:80:fa:
62:47:ac:f6:51:6f:51:c5:9a:4d:c6:72:b6:44:c1:f2:05:79:
48:42:54:af:fb:08:43:21:99:94:50:b4:9d:ea:e3:e9:ce:02:
19:fa:cb:bf:69:39:41:f5:f6:6a:e7:d9:c4:09:db:8c:85:12:
0d:57:ab:55:4b:20:4e:0a:fd:2e:9c:37:ca:fd:44:da:06:65:
61:a9:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:05 2024 by rpki-client on console.sobornost.net