Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ISn68CiUj4g5X2vHpFKLJ-IVAIc.roa
File: ISn68CiUj4g5X2vHpFKLJ-IVAIc.roa (raw, json)
Hash identifier: KsB+zKAA+4YbqqROqZNOGyAPBoQmGMIeVYcxyjyQCgE=
Subject key identifier: 21:29:FA:F0:28:94:8F:88:39:5F:6B:C7:A4:52:8B:27:E2:15:00:87
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01922413C791995DDAB8C7AD40CFC96D4765
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ISn68CiUj4g5X2vHpFKLJ-IVAIc.roa
Signing time: Tue 24 Sep 2024 12:48:48 +0000
ROA not before: Tue 24 Sep 2024 12:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 217.177.33.0/24 maxlen: 24
217.180.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Oct 2024 19:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:24:13:c7:91:99:5d:da:b8:c7:ad:40:cf:c9:6d:47:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Sep 24 12:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2129faf028948f88395f6bc7a4528b27e2150087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:63:03:ea:6f:f1:8e:6e:34:c7:d9:a0:33:
50:bd:73:6e:b1:b6:cd:4c:66:3c:e3:11:d4:46:a8:
7d:bc:9e:29:e2:48:3b:27:b6:30:09:40:29:22:5c:
9d:0e:5a:e7:ca:0e:15:0d:88:d4:7d:9a:a9:0a:72:
cb:a0:8f:d5:ee:18:4c:95:8e:9e:3a:89:06:0b:7b:
5d:61:28:8f:f7:99:c8:ae:88:29:74:19:67:1b:56:
64:d7:76:9b:d1:e7:a1:87:22:49:70:ba:e7:25:19:
35:c8:12:c9:7d:21:c3:77:e8:6d:d4:f6:29:9e:e1:
12:4a:4b:a3:a1:88:5e:1a:53:53:bf:c8:5e:91:54:
66:07:17:f9:81:8d:a9:9a:59:1d:0c:22:10:f7:a0:
16:3f:d5:de:81:3f:57:6b:0a:95:76:e5:ae:d9:02:
e3:fc:c7:05:32:3a:f1:72:f2:af:07:43:b1:93:98:
8e:ab:4a:52:43:54:86:d4:ed:b2:f8:44:9e:40:38:
df:aa:bf:a9:43:71:fb:58:0b:96:37:96:ee:64:27:
4d:6a:4b:3a:be:d7:6c:9f:dc:93:9d:25:4a:e7:f2:
22:24:34:2b:59:61:4e:3d:ef:28:bd:fe:e4:6b:cb:
d2:e0:24:77:1a:d4:f8:9c:0c:bd:bb:80:71:62:3f:
16:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:29:FA:F0:28:94:8F:88:39:5F:6B:C7:A4:52:8B:27:E2:15:00:87
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ISn68CiUj4g5X2vHpFKLJ-IVAIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.177.33.0/24
217.180.57.0/24
Signature Algorithm: sha256WithRSAEncryption
90:7e:91:28:a5:c9:03:d1:e6:e8:8e:a6:14:50:ae:58:8f:4f:
09:9f:4c:83:fe:85:63:e4:b6:28:90:b1:2c:17:fc:f0:35:7a:
cd:bd:a9:d5:af:ea:9f:64:0d:e2:2c:1c:08:81:6f:3f:ce:1f:
81:a8:d6:8d:f9:2b:01:e8:8e:ef:bd:13:62:9e:b2:6f:be:75:
1d:61:5d:bb:c5:71:39:1c:73:95:25:e1:db:79:af:3c:e7:06:
5f:68:6c:26:eb:56:57:03:9a:cf:a4:bb:8b:a6:59:ab:ba:66:
cc:0a:af:88:11:b0:c1:f2:96:42:50:bf:3e:3b:23:69:20:90:
4e:09:37:b1:14:88:6f:76:3f:69:4a:05:29:f7:14:b0:a5:fd:
a9:57:93:08:60:58:32:9b:13:44:8b:e8:23:8e:45:0a:dd:ea:
b3:38:e5:7a:81:a6:22:78:96:a8:3d:01:54:63:ae:2a:7d:aa:
63:f9:1e:72:82:ce:5e:53:d0:ea:51:e2:7e:0c:44:3b:e8:bc:
6e:e6:77:c9:c7:ec:09:8d:93:56:85:61:7f:87:88:be:c7:b6:
59:49:ce:a4:56:04:43:f7:9d:96:f4:fa:02:de:b3:cc:2c:4b:
1a:26:97:44:6e:3d:85:15:67:0a:6b:5f:e3:fc:1a:d9:2e:02:
3d:0c:2f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 13 22:30:29 2024 by rpki-client on console-ams.rpki-client.org