Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/p9s8KTmS9l3LFAnZm07kpbkAUCE.roa
File: p9s8KTmS9l3LFAnZm07kpbkAUCE.roa (raw, json)
Hash identifier: 7zYPB8BHNLx7YyLstNw2UPu9Vx2kr03SjInlG8vcorc=
Subject key identifier: A7:DB:3C:29:39:92:F6:5D:CB:14:09:D9:9B:4E:E4:A5:B9:00:50:21
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0187388CF661C948CE950D9A75DBF4DB4C85
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/p9s8KTmS9l3LFAnZm07kpbkAUCE.roa
Signing time: Fri 31 Mar 2023 16:42:54 +0000
ROA not before: Fri 31 Mar 2023 16:42:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399382
IP address blocks: 217.26.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:38:8c:f6:61:c9:48:ce:95:0d:9a:75:db:f4:db:4c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 31 16:42:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7db3c293992f65dcb1409d99b4ee4a5b9005021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:bc:d9:bc:82:8f:18:1e:5d:bf:4f:51:52:
4e:61:09:74:5e:06:3d:de:04:86:bd:90:4b:79:a0:
ce:74:28:70:08:db:af:93:64:75:23:c7:dc:d6:76:
19:2c:49:2f:5f:63:0d:ef:9e:93:af:35:12:8b:65:
35:f9:ae:20:14:cf:68:df:b7:48:a0:f8:97:3f:6c:
fa:23:b1:18:06:96:13:35:f0:c2:b7:84:59:f1:d9:
67:89:93:03:f1:a6:cc:fe:4e:44:85:b8:55:d3:e4:
1a:52:66:fa:27:b8:e9:ae:9d:7a:a7:03:2f:5e:c8:
32:77:27:2b:8c:81:98:68:f8:83:67:74:06:a1:2f:
d2:5f:fb:96:02:c0:b0:d2:89:d3:a2:32:9e:b8:d3:
81:20:6e:e5:c4:26:f2:59:cd:25:09:f5:be:73:c6:
29:98:0e:d2:d1:22:77:2b:b3:44:fd:2f:5d:0f:be:
5d:db:73:16:e7:1a:16:a0:1b:96:38:da:cf:cb:b8:
4d:06:42:35:16:aa:49:32:0b:97:13:d0:a6:6f:e8:
3c:49:5b:2e:e8:89:63:80:d9:65:a9:27:a4:c6:b3:
ed:95:e6:1b:f1:ec:19:62:be:57:eb:fd:5d:1b:17:
07:84:b6:65:7e:24:9f:84:d4:2a:fd:cf:cc:94:d0:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DB:3C:29:39:92:F6:5D:CB:14:09:D9:9B:4E:E4:A5:B9:00:50:21
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/p9s8KTmS9l3LFAnZm07kpbkAUCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:2e:72:0d:d4:5a:a1:1b:f8:08:6d:e3:14:f2:9d:cd:f6:ab:
32:80:94:8b:86:87:a6:b0:e4:78:8f:ed:f1:6a:61:6b:69:36:
06:d2:5d:25:b1:92:28:f0:f5:4a:9b:36:0a:7e:75:43:c4:18:
bc:01:b8:1e:df:bc:49:13:e6:5d:fc:d6:22:c7:8c:a6:05:98:
25:e1:e1:f1:75:23:b5:d5:06:3e:3b:8f:4f:f0:d4:1a:8b:e8:
db:8a:76:24:ad:14:10:25:e3:13:44:ac:22:34:55:a7:d2:d1:
7e:9f:c2:12:66:7f:92:d2:0f:bf:23:f0:77:e4:ca:78:e4:21:
12:a6:f1:33:a4:94:93:84:13:4c:01:60:38:4d:ac:64:a9:fc:
9a:c9:9d:e8:b5:62:9a:a0:f0:f0:0c:f0:4e:cf:1a:6e:22:67:
c6:bb:56:c6:c0:97:d4:c9:f2:f7:59:13:40:8a:69:84:48:6f:
ef:e6:57:33:03:1d:df:1c:58:78:a8:96:b4:a3:82:19:f0:58:
2b:8f:cb:28:b7:8e:6a:62:37:54:6d:d6:93:d5:fb:ae:4e:bd:
86:7e:4d:f1:ca:68:d0:df:f9:67:2e:f3:2c:b8:89:7e:a8:32:
c8:9a:f6:7c:67:b3:1d:9a:c0:6c:af:14:58:e8:9c:81:41:13:
0e:fe:31:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:35 2024 by rpki-client on console-ams.rpki-client.org