Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/rP4tvwLVo6eRbG_nY8yjcbrmVnI.roa
File: rP4tvwLVo6eRbG_nY8yjcbrmVnI.roa (raw, json)
Hash identifier: 8ASLp+UNFrIaTOIW1Sc1CzBrhHUSoSmCtcJsyEe+XKc=
Subject key identifier: AC:FE:2D:BF:02:D5:A3:A7:91:6C:6F:E7:63:CC:A3:71:BA:E6:56:72
Certificate issuer: /CN=6992125e3d53cc481336105483fcff701fda1bb3
Certificate serial: 01856F9DB08508D8A7CD3E13A6214897125F
Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/rP4tvwLVo6eRbG_nY8yjcbrmVnI.roa
Signing time: Sun 01 Jan 2023 23:14:43 +0000
ROA not before: Sun 01 Jan 2023 23:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209761
IP address blocks: 213.226.88.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:b0:85:08:d8:a7:cd:3e:13:a6:21:48:97:12:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3
Validity
Not Before: Jan 1 23:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acfe2dbf02d5a3a7916c6fe763cca371bae65672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:97:b8:ec:72:cc:8d:04:9d:42:f9:ec:17:
c6:4c:08:b9:20:06:7b:9d:aa:97:31:77:6d:2e:24:
1c:8a:ba:d5:61:b1:58:d3:3f:3a:a4:a7:41:42:ff:
6f:ae:1c:28:17:85:24:a1:0f:8d:9c:3b:04:5b:77:
78:6f:19:31:57:26:14:91:5e:33:b5:1d:33:a7:00:
7d:37:c3:d7:fd:5c:54:ef:bc:a0:93:27:59:8b:9b:
71:62:23:ee:0c:fd:e4:7f:51:3d:f1:ea:46:70:f1:
97:ca:c4:09:a3:e0:91:13:b8:51:61:e5:70:81:93:
0e:0e:e0:45:42:1a:bf:40:75:8d:d4:04:be:3e:99:
9d:07:fe:59:88:29:76:57:67:67:d3:4b:f5:27:74:
bb:9c:93:03:7f:f0:3d:f9:db:20:10:13:b3:eb:11:
04:fe:e7:84:dc:c3:b0:bd:9d:19:28:ac:cf:c7:dc:
0f:7c:07:49:36:4f:97:9c:36:62:b0:44:7e:0c:e5:
31:6e:b2:cc:ec:b3:dc:9a:31:d6:8a:8e:8e:61:cf:
93:86:13:45:47:1a:3c:e0:31:c0:98:63:70:60:cd:
69:9d:44:5c:6e:39:a2:ba:97:92:be:97:eb:8f:61:
62:2d:f8:c5:8b:3e:72:63:03:ca:6e:db:a6:86:86:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FE:2D:BF:02:D5:A3:A7:91:6C:6F:E7:63:CC:A3:71:BA:E6:56:72
X509v3 Authority Key Identifier:
keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/rP4tvwLVo6eRbG_nY8yjcbrmVnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.88.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:77:e5:61:84:11:d0:fd:30:bd:89:81:56:c5:fb:62:e0:49:
e4:3b:14:e7:40:cf:23:d1:72:6f:51:32:32:e7:f8:a0:b4:ad:
23:3e:19:2f:a1:4f:f8:9e:38:a1:de:d6:0b:72:0f:c2:bd:28:
ed:2f:1f:56:65:52:41:f0:5c:26:5f:39:02:83:01:48:2b:b4:
30:9d:2e:63:bf:ad:81:81:e7:f8:7a:95:69:b4:03:55:4a:51:
d2:a6:ef:2d:ba:ac:fc:22:81:c5:b2:ab:e4:25:ad:df:8f:57:
e2:00:14:57:20:8f:3e:88:06:08:a7:15:f3:19:4a:ec:be:7e:
75:36:21:d0:03:ff:49:e6:56:c3:f4:b7:92:fe:7e:95:59:24:
e6:08:5f:a9:e8:94:fb:1f:9a:2b:eb:b1:72:70:34:b8:28:3a:
21:cd:11:d7:df:b9:69:a7:ee:b0:ce:60:6a:c6:4b:0f:92:9f:
3f:90:e5:96:37:a8:5c:e2:77:5b:d6:f8:c7:1c:ee:ec:27:b0:
5c:54:48:34:88:b9:00:59:b2:61:1c:24:df:2c:e4:3c:9c:57:
36:4b:15:d9:5a:39:c3:76:b6:5f:ea:42:c8:7b:4c:22:00:01:
6f:8a:13:e5:a6:41:9d:3e:23:12:e7:1f:5d:96:b2:45:46:86:
bb:d9:0d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:11 2024 by rpki-client on console.sobornost.net