Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/0MK4-yEgwBZWHyYt_W_cpIN9txo.roa
File: 0MK4-yEgwBZWHyYt_W_cpIN9txo.roa (raw, json)
Hash identifier: SlJSBrX3q7jenvHrLg0obCmywSxKMRWs0PjuxOpgwfw=
Subject key identifier: D0:C2:B8:FB:21:20:C0:16:56:1F:26:2D:FD:6F:DC:A4:83:7D:B7:1A
Certificate issuer: /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Certificate serial: 01856B811BB5238C81BFF50D4CFA7E8173FE
Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/0MK4-yEgwBZWHyYt_W_cpIN9txo.roa
Signing time: Sun 01 Jan 2023 04:05:01 +0000
ROA not before: Sun 01 Jan 2023 04:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8560
IP address blocks: 217.73.68.0/24 maxlen: 24
217.73.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 May 2023 14:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:1b:b5:23:8c:81:bf:f5:0d:4c:fa:7e:81:73:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Validity
Not Before: Jan 1 04:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0c2b8fb2120c016561f262dfd6fdca4837db71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:49:47:e1:d7:1d:bd:81:92:36:ad:8f:e5:
1c:2a:fe:ad:e8:6d:0b:49:ae:10:44:3a:16:ca:73:
a8:b2:d2:8e:da:f0:0a:59:cc:0e:9c:7e:bb:c8:15:
97:8c:a9:c5:51:f4:3e:d2:e0:84:55:82:72:17:97:
98:df:b0:23:13:4f:77:d5:35:b9:83:68:90:d2:96:
54:bd:b3:38:63:63:c5:5a:49:90:8d:45:99:5d:8c:
63:57:15:01:78:fb:81:78:06:ca:4d:c4:e2:5a:7f:
80:c8:93:c7:93:5d:85:a7:34:fc:e4:54:bd:39:b8:
f9:1b:8e:c1:b2:fc:bf:cd:26:2d:21:a3:09:d1:89:
16:11:31:6b:e6:de:db:de:1b:d2:4c:33:b4:a1:d8:
ad:3c:23:74:7f:1d:96:41:da:56:4a:fb:bb:6f:fa:
92:8d:79:f6:d7:cf:7a:2d:ee:16:41:08:51:10:2d:
49:af:8c:cb:ae:cb:c6:00:3d:5b:b7:2d:f6:dc:b7:
de:2f:c7:2d:e2:b9:43:72:7c:0e:a2:52:83:07:cf:
20:e1:ce:c9:8c:fd:a7:5c:3a:82:b8:f0:f2:56:67:
d7:04:69:43:6e:c9:c9:a2:16:dd:7e:98:87:51:20:
2d:da:50:9a:a9:90:3c:eb:e5:a0:c2:bc:6b:d1:b0:
fd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C2:B8:FB:21:20:C0:16:56:1F:26:2D:FD:6F:DC:A4:83:7D:B7:1A
X509v3 Authority Key Identifier:
keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/0MK4-yEgwBZWHyYt_W_cpIN9txo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.73.68.0/24
217.73.70.0/24
Signature Algorithm: sha256WithRSAEncryption
69:0a:63:8f:e3:cc:11:9f:ad:50:f4:f2:3c:25:75:ea:67:ae:
f7:91:b2:f2:a4:b4:3d:70:60:8b:18:d9:fa:c1:52:e0:e0:98:
e9:9b:a3:dc:86:a8:af:5b:95:40:c7:2c:95:f8:6c:b1:6c:25:
45:83:cc:a4:d8:cc:e8:84:34:de:87:89:f1:cf:a7:08:38:c1:
9a:eb:b7:12:1e:b0:6c:96:d0:c0:a0:ca:a2:62:e9:35:c3:fb:
0b:a4:1e:5e:ec:20:86:30:aa:ae:64:f4:19:6b:d8:8d:24:36:
84:41:76:1d:4d:96:13:6d:55:bb:b6:ac:8a:eb:f2:d8:25:ff:
18:4d:28:d7:29:bd:c8:bb:19:67:de:3b:a5:77:38:be:e3:97:
08:29:38:29:f8:c7:4f:2c:c8:9b:72:a3:6e:dc:77:8a:1c:be:
fe:17:3c:45:96:8c:7a:46:e3:37:2e:63:29:56:9c:b0:50:71:
af:a6:ab:60:a6:f8:80:89:4c:4c:af:ff:2f:72:16:c0:da:b0:
c8:d7:91:f0:7c:16:f5:22:83:4a:41:9d:13:ae:1c:48:a6:6e:
77:ad:2e:4b:44:62:bb:1c:81:51:f0:a6:7f:1e:3b:e5:67:9b:
5f:f9:75:4c:5c:3d:3d:24:b4:02:82:ad:34:54:da:cc:01:fe:
31:d5:45:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:09 2024 by rpki-client on console-fra.rpki-client.org