Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/df9gJgdC43VdF4BEinnbsDKP1qE.roa
File: df9gJgdC43VdF4BEinnbsDKP1qE.roa (raw, json)
Hash identifier: 0MgUa3PKqOrfpmyR0cVDIL+vwTKs3YyvqE2o3Fet4Ys=
Subject key identifier: 75:FF:60:26:07:42:E3:75:5D:17:80:44:8A:79:DB:B0:32:8F:D6:A1
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0190B223935FE2240293E07AD4206F61A7D0
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/df9gJgdC43VdF4BEinnbsDKP1qE.roa
Signing time: Sun 14 Jul 2024 16:46:34 +0000
ROA not before: Sun 14 Jul 2024 16:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203380
IP address blocks: 217.180.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 07:43:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b2:23:93:5f:e2:24:02:93:e0:7a:d4:20:6f:61:a7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jul 14 16:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75ff60260742e3755d1780448a79dbb0328fd6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:65:31:54:85:c6:4d:d8:ef:d8:e5:2b:93:
4d:c5:86:3f:8b:40:6e:49:a0:f9:b6:b0:06:6e:0b:
d8:f0:a3:f9:df:f7:79:c4:50:14:18:d7:90:b3:7e:
e3:fc:61:68:8b:fc:80:3d:39:b6:a7:d3:ca:16:b1:
dd:ac:97:65:81:d8:a1:e6:46:41:bc:39:e3:69:57:
b7:aa:d0:fe:31:6e:b9:62:23:69:0a:da:49:5c:3d:
af:b1:3c:dc:1a:54:8a:72:79:d0:27:e6:a0:60:09:
12:c7:47:15:f4:41:84:c5:6d:f4:11:df:4e:73:83:
41:ef:07:2a:af:81:96:e8:2d:d3:5a:4b:ee:05:e1:
c1:bb:df:1c:0a:19:cf:81:fe:fb:03:89:1c:25:bb:
4c:2f:8c:d5:2b:f4:a7:9c:8a:ef:cf:f6:1b:d7:63:
e3:54:db:57:67:20:d1:7f:8c:bc:34:9b:e1:2f:76:
03:f4:29:cb:4a:9c:a6:e4:6e:67:f2:47:34:cf:f2:
5d:d8:b0:41:a7:9f:06:b6:d4:a4:e2:95:6e:76:92:
a6:4f:9f:f6:3c:3e:1c:38:ee:01:1f:15:13:d7:67:
5f:00:39:65:5b:85:06:e0:36:ae:c4:93:60:ae:61:
c4:2a:1d:3e:a7:67:16:cd:a4:13:e3:2c:81:06:0b:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FF:60:26:07:42:E3:75:5D:17:80:44:8A:79:DB:B0:32:8F:D6:A1
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/df9gJgdC43VdF4BEinnbsDKP1qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.58.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:b7:fe:15:0b:ba:8a:8b:00:79:a5:6d:4f:d2:70:54:60:9d:
1e:9f:c3:e5:f6:9d:39:55:e9:e4:f5:44:4a:f1:0a:de:1c:48:
74:3e:d6:f1:2d:5d:2f:10:b5:97:6d:16:79:28:16:df:73:df:
cb:59:ab:38:23:d0:d3:78:36:a8:eb:60:f2:da:47:67:a0:d7:
66:6a:43:55:94:27:f4:30:35:dc:67:c0:f9:9d:12:27:7d:44:
d4:be:9c:86:ea:8e:47:b5:36:76:cb:bb:62:8b:1d:29:d0:b1:
c1:de:1a:dd:70:f8:5a:3f:88:85:ef:52:93:14:63:d4:08:cd:
ec:f2:76:97:96:f0:df:5a:2d:51:d4:73:a8:ff:40:49:d9:a1:
3c:af:03:ed:01:1c:ee:ec:39:d5:2d:6a:2a:72:84:2e:5e:73:
37:3e:c4:fc:09:97:e7:53:57:7f:e8:d6:36:a9:bb:db:b0:97:
90:c5:7a:d6:6f:ae:85:0a:61:97:fb:3a:75:c7:48:37:4f:1f:
d8:77:cc:0e:f2:4b:2d:e9:19:88:4f:32:4a:ef:ce:ef:bb:3c:
f8:8a:a9:43:6b:9c:fe:52:e9:fd:91:04:0e:5e:b6:60:6a:1a:
56:33:6c:1f:98:92:3f:89:fe:68:89:c2:95:55:1b:2a:7c:84:
b7:a1:74:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZCyI5Nf4iQCk+B61CBvYafQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjQwNzE0MTY0NjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWZmNjAyNjA3NDJlMzc1NWQxNzgwNDQ4YTc5ZGJiMDMyOGZkNmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApttlMVSFxk3Y79jlK5NNxYY/i0Bu
SaD5trAGbgvY8KP53/d5xFAUGNeQs37j/GFoi/yAPTm2p9PKFrHdrJdlgdih5kZB
vDnjaVe3qtD+MW65YiNpCtpJXD2vsTzcGlSKcnnQJ+agYAkSx0cV9EGExW30Ed9O
c4NB7wcqr4GW6C3TWkvuBeHBu98cChnPgf77A4kcJbtML4zVK/SnnIrvz/Yb12Pj
VNtXZyDRf4y8NJvhL3YD9CnLSpym5G5n8kc0z/Jd2LBBp58GttSk4pVudpKmT5/2
PD4cOO4BHxUT12dfADllW4UG4DauxJNgrmHEKh0+p2cWzaQT4yyBBgvIAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHX/YCYHQuN1XReARIp527Ayj9ahMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvZGY5Z0pnZEM0M1ZkRjRCRWlubmJzREtQMXFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2bQ6MA0G
CSqGSIb3DQEBCwUAA4IBAQC/t/4VC7qKiwB5pW1P0nBUYJ0en8Pl9p05Venk9URK
8QreHEh0PtbxLV0vELWXbRZ5KBbfc9/LWas4I9DTeDao62Dy2kdnoNdmakNVlCf0
MDXcZ8D5nRInfUTUvpyG6o5HtTZ2y7tiix0p0LHB3hrdcPhaP4iF71KTFGPUCM3s
8naXlvDfWi1R1HOo/0BJ2aE8rwPtARzu7DnVLWoqcoQuXnM3PsT8CZfnU1d/6NY2
qbvbsJeQxXrWb66FCmGX+zp1x0g3Tx/Yd8wO8kst6RmITzJK787vuzz4iqlDa5z+
Uun9kQQOXrZgahpWM2wfmJI/if5oicKVVRsqfIS3oXQ8
-----END CERTIFICATE-----
Generated at Mon Aug 12 12:10:14 2024 by rpki-client on console-ams.rpki-client.org