Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/IIJDFOhpTv4DdZMzSBaYrFdz2F4.roa
File: IIJDFOhpTv4DdZMzSBaYrFdz2F4.roa (raw, json)
Hash identifier: idw0y9BtbkI/PqSGkShsaFyBX8CSwVzirpz9Cz04XOc=
Subject key identifier: 20:82:43:14:E8:69:4E:FE:03:75:93:33:48:16:98:AC:57:73:D8:5E
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 018B9B9F15565D85BBF4EBEF470534D7BA2F
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/IIJDFOhpTv4DdZMzSBaYrFdz2F4.roa
Signing time: Sat 04 Nov 2023 18:36:16 +0000
ROA not before: Sat 04 Nov 2023 18:36:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47594
IP address blocks: 213.171.1.0/24 maxlen: 24
213.171.2.0/24 maxlen: 24
213.171.11.0/24 maxlen: 24
213.171.13.0/24 maxlen: 24
213.171.16.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9b:9f:15:56:5d:85:bb:f4:eb:ef:47:05:34:d7:ba:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Nov 4 18:36:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20824314e8694efe03759333481698ac5773d85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e7:d5:57:0c:9d:76:8d:f0:9b:b1:5d:89:9d:
b0:6a:15:26:3a:bb:84:43:a5:7e:20:0d:d2:5e:a0:
e1:97:69:e3:60:a1:72:1b:98:73:b1:86:1d:4f:5d:
27:a5:06:a4:6c:41:45:b7:c9:31:e3:a3:b7:fd:b1:
9e:a7:ea:76:0a:4f:8c:08:ed:b9:0c:3a:72:c8:d2:
db:a1:dc:8c:06:70:dd:97:7e:40:83:a4:2d:8f:23:
d2:78:ca:8e:46:a4:d2:fa:e4:a4:06:6b:f9:7c:10:
d5:ff:9b:64:59:57:8f:06:5d:90:56:72:f7:5e:0d:
11:36:58:75:f7:8c:b7:60:5d:dd:14:fe:77:8b:87:
47:be:12:24:dd:c0:f8:03:cd:30:35:86:a6:38:0f:
58:b8:08:83:c6:12:ab:d4:af:4d:c5:95:32:55:f1:
fd:9c:e8:84:54:e5:95:d1:de:fc:17:53:3c:9e:8e:
09:e2:7a:91:90:ff:c4:cc:0a:1d:5a:ee:62:f7:74:
c9:0f:d2:d9:c2:27:f7:6c:aa:1c:21:e6:3f:30:c5:
ea:45:89:3f:02:ff:bc:4f:b7:87:f5:b0:69:ae:13:
9a:61:ef:b7:e3:dc:24:43:80:7f:0e:88:48:5d:28:
5b:67:95:52:7c:84:70:3e:1a:5f:31:b3:25:6d:d1:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:82:43:14:E8:69:4E:FE:03:75:93:33:48:16:98:AC:57:73:D8:5E
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/IIJDFOhpTv4DdZMzSBaYrFdz2F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.171.1.0-213.171.2.255
213.171.11.0/24
213.171.13.0/24
213.171.16.0/20
Signature Algorithm: sha256WithRSAEncryption
31:bd:43:11:e3:9e:59:e8:ce:eb:50:36:21:e8:2c:af:f8:46:
95:a5:7b:e3:92:87:10:70:cc:b4:a0:38:29:f1:92:46:57:38:
16:d3:cd:a7:b4:f6:89:08:15:4c:d3:f6:57:c7:f5:df:3b:fa:
65:ae:99:d0:17:98:7a:a1:ef:a0:5c:90:85:ea:2c:08:6c:b0:
da:0e:f0:40:d1:b5:51:68:62:cf:e2:6e:61:6b:32:c5:e8:2b:
39:e9:5c:71:e2:32:54:e7:04:37:16:c1:1f:8c:e8:9c:f3:3f:
6d:1b:80:c3:ee:38:bc:dc:ff:38:1b:ae:46:7e:ef:26:00:79:
b8:19:8d:97:7c:3b:1c:bd:75:b7:d2:c9:8d:d0:b1:e2:41:1f:
27:bc:a9:13:fc:cb:4f:74:23:ce:eb:89:1b:8f:8d:95:82:5d:
da:df:9b:4b:36:1f:32:6d:e0:d8:f3:c3:43:fa:15:b2:27:93:
4a:60:e5:6f:49:6d:2d:6a:7c:3c:d8:53:d4:25:ea:82:4f:59:
71:55:dc:3d:77:30:f5:d9:a5:1c:37:5d:7c:ac:cd:75:e0:08:
ac:ea:76:31:fd:cc:2a:ec:17:bd:be:ae:e8:85:c0:83:44:61:
0f:c1:a2:85:69:76:2a:59:62:36:19:44:e0:18:0c:fd:8e:45:
dd:c5:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:15 2024 by rpki-client on console.sobornost.net