Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Vo9V3UwoblUhbQ6fxlBO40AuPbA.roa
File: Vo9V3UwoblUhbQ6fxlBO40AuPbA.roa (raw, json)
Hash identifier: jYji2Wj9QUgOfsbf0zuPl7iiiqvVapJhyr40pvyMkO0=
Subject key identifier: 56:8F:55:DD:4C:28:6E:55:21:6D:0E:9F:C6:50:4E:E3:40:2E:3D:B0
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0190E3A783DD527C6DDB303255B37DF59357
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Vo9V3UwoblUhbQ6fxlBO40AuPbA.roa
Signing time: Wed 24 Jul 2024 07:32:04 +0000
ROA not before: Wed 24 Jul 2024 07:32:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18779
IP address blocks: 217.180.12.0/24 maxlen: 24
217.180.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 15:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e3:a7:83:dd:52:7c:6d:db:30:32:55:b3:7d:f5:93:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jul 24 07:32:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=568f55dd4c286e55216d0e9fc6504ee3402e3db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2e:11:27:d5:b5:6f:48:77:61:8c:f6:67:73:
99:74:67:fa:71:d5:80:1c:0e:6b:98:99:dc:7f:49:
50:bb:5e:0a:96:6e:02:71:1b:3e:f4:fc:0e:4d:18:
66:e3:d3:b2:ab:3e:2f:3e:e2:13:79:7b:ab:b6:64:
a3:58:aa:35:9b:cb:34:76:c7:0a:b6:89:e2:1d:e0:
41:50:3b:c1:78:4b:4b:a8:61:d6:42:86:9a:6c:d0:
29:e8:81:53:41:f0:bb:ba:82:2a:e6:b2:e0:37:bd:
bf:f2:86:df:67:76:50:bc:49:6e:e5:89:da:33:6e:
ba:e3:14:24:5f:2e:58:ab:fe:cb:e3:63:cf:a3:7a:
6e:5f:00:04:da:d8:47:bc:bc:7d:93:dc:25:31:16:
99:6c:6e:79:7c:25:57:2b:d4:f8:a9:02:74:c0:19:
2e:61:93:de:5b:e7:c0:7b:b6:cd:ad:61:73:95:55:
50:5e:12:dc:14:64:65:5e:16:5d:01:4a:aa:15:16:
54:46:c4:22:b8:35:1e:64:cb:9f:74:97:d0:d5:59:
e5:9b:45:4d:53:0e:5a:02:c3:a0:3e:b6:cb:7a:95:
c8:03:19:78:56:5a:34:57:6d:b5:48:f2:9a:95:63:
8b:98:3f:f8:b3:01:43:18:68:ef:65:2f:3e:8a:5c:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8F:55:DD:4C:28:6E:55:21:6D:0E:9F:C6:50:4E:E3:40:2E:3D:B0
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Vo9V3UwoblUhbQ6fxlBO40AuPbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.12.0/24
217.180.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b0:49:af:0d:ad:65:e4:36:01:09:2e:86:af:a3:0e:88:73:
2d:68:55:79:bc:9e:24:a1:e4:f7:2f:50:21:ab:b3:18:26:58:
d9:8a:ff:1b:57:c5:07:4d:02:8d:57:8c:60:e9:86:93:4c:89:
0d:a5:8a:bc:f8:d2:5f:39:97:8e:ea:37:cc:ae:8a:84:03:39:
5f:32:8b:3c:e5:68:74:1b:f3:74:df:d6:7e:51:17:eb:2a:c8:
5f:5c:09:c6:fa:14:64:46:f4:25:06:76:8f:d5:f6:51:ab:43:
85:b7:49:06:08:bd:47:53:33:ee:64:cb:72:95:4c:e8:51:b7:
2e:2e:b9:00:41:2e:9d:03:e6:bf:62:a5:30:45:b1:dc:af:8d:
b2:40:82:bc:99:de:81:c9:22:f5:76:9a:29:d0:b3:8f:92:95:
ee:61:1d:de:48:93:0c:a3:63:62:f6:98:80:33:0a:82:9d:06:
c6:1a:fd:03:0e:ab:08:1e:60:62:bd:09:4a:37:de:23:5a:59:
70:2a:ab:e2:96:b9:2c:b8:98:80:9d:b9:f1:2d:81:38:97:9d:
8b:6b:ea:e7:0a:d8:3b:ac:1a:16:c7:6e:b1:da:4d:f4:22:8b:
54:92:01:04:32:9d:99:b1:f5:fe:59:cb:8e:69:ca:d4:b6:c2:
7f:31:d2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 17:19:07 2024 by rpki-client on console-fra.rpki-client.org