Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/RwL5-x1UwcdGmzrYBlEOIGuzfuQ.roa
File: RwL5-x1UwcdGmzrYBlEOIGuzfuQ.roa (raw, json)
Hash identifier: m1mfbXCXc1W/ZXAM15aNZkw/7zSc66mTsGv1uEUFLzU=
Subject key identifier: 47:02:F9:FB:1D:54:C1:C7:46:9B:3A:D8:06:51:0E:20:6B:B3:7E:E4
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01921F480DAF10D01E93C3D3690FDC59D738
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/RwL5-x1UwcdGmzrYBlEOIGuzfuQ.roa
Signing time: Mon 23 Sep 2024 14:27:48 +0000
ROA not before: Mon 23 Sep 2024 14:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214934
IP address blocks: 217.177.74.0/24 maxlen: 24
217.180.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 08:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1f:48:0d:af:10:d0:1e:93:c3:d3:69:0f:dc:59:d7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Sep 23 14:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4702f9fb1d54c1c7469b3ad806510e206bb37ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:86:2f:76:53:dd:6e:e1:70:e1:76:6d:a2:
cc:f1:58:cc:f2:70:fa:c7:41:f9:7a:b9:2d:c6:c1:
d7:e7:2b:10:13:2a:37:f4:5a:8d:30:b8:78:44:6e:
ad:80:52:e7:3f:8e:3c:74:a2:52:71:f6:4a:97:ed:
bb:36:63:2e:d2:99:fb:a9:f3:65:45:bd:28:f4:40:
ae:9e:26:3d:1f:90:41:cc:49:91:c7:c1:d3:d0:aa:
47:21:fb:eb:12:5b:ce:4c:a8:13:ce:74:dd:d7:cd:
d8:83:a3:16:a5:c5:1c:39:d3:c1:e4:64:f5:52:30:
76:d9:10:d3:e7:4c:63:84:d7:2a:f6:80:34:f2:5f:
77:26:e9:bc:a5:9c:06:8b:e6:e7:17:e5:2d:76:71:
41:d7:23:d2:3c:1f:37:5a:30:52:23:ba:53:26:b2:
41:40:7a:a1:8f:85:90:c4:06:cd:7c:d8:f4:89:9b:
25:23:e2:89:b5:02:1f:67:e1:1e:fe:80:43:6b:c5:
63:3f:f7:63:19:c9:ce:81:d7:6b:03:0a:20:2f:a1:
06:73:cb:d2:4f:65:48:dc:7c:1d:5e:af:7f:e3:d5:
05:a8:2f:82:94:eb:b9:33:fa:94:db:a8:32:07:2a:
ca:36:9e:f4:56:2e:2f:e5:89:5e:7e:18:0c:de:1d:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:02:F9:FB:1D:54:C1:C7:46:9B:3A:D8:06:51:0E:20:6B:B3:7E:E4
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/RwL5-x1UwcdGmzrYBlEOIGuzfuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.177.74.0/24
217.180.56.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f1:b6:4e:45:9d:a9:bf:74:ac:14:d2:79:65:9d:68:1f:bc:
77:54:21:e9:8f:bd:39:6e:1b:00:99:d4:74:83:4f:62:cf:a4:
f4:90:be:cf:8c:e0:d7:ec:15:12:22:29:90:8d:db:7f:e7:f7:
4c:e4:15:8b:a5:3a:9c:63:d4:be:3e:95:8b:5a:02:f5:6c:99:
84:fd:58:00:5a:06:44:be:c3:27:78:d4:a6:28:73:2c:76:e4:
f0:a0:f1:aa:53:6e:a1:7c:26:3b:90:bd:cb:f2:a8:c7:90:10:
04:94:fe:39:59:ec:ec:1f:87:d4:d3:1a:91:1d:c9:41:66:25:
36:a1:9d:40:47:87:14:e0:62:f6:73:85:a3:6d:ff:91:4e:b7:
9c:5d:29:67:a9:35:e0:fb:d1:f5:e9:5f:40:16:d5:ae:d0:de:
e7:f6:8e:90:5e:63:ed:a0:9e:5c:f8:49:0d:ff:fa:a9:e3:bb:
71:e9:44:76:cf:e0:1c:c8:e3:68:4d:4c:4d:58:be:c4:c9:72:
50:4e:5f:ec:29:67:7c:44:d6:6c:b6:1e:97:7e:23:52:96:b5:
25:cd:1d:1a:ae:81:79:51:45:cf:80:d6:b8:78:80:43:9d:3b:
a7:f3:9f:65:67:4e:2f:59:5d:12:90:d7:9c:3b:83:58:e3:1a:
92:a7:61:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 12:17:59 2024 by rpki-client on console-ams.rpki-client.org