Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/eD4jX_A5SBxocFzIRxMM6JF6XG8.roa
File: eD4jX_A5SBxocFzIRxMM6JF6XG8.roa (raw, json)
Hash identifier: hzobFoKScMOLR0PcMn5G32K7M0Kwpa7MQ/hhJDTjAk0=
Subject key identifier: 78:3E:23:5F:F0:39:48:1C:68:70:5C:C8:47:13:0C:E8:91:7A:5C:6F
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0191986B1ED3CC733535B8AA09A9C7F28042
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/eD4jX_A5SBxocFzIRxMM6JF6XG8.roa
Signing time: Wed 28 Aug 2024 09:57:22 +0000
ROA not before: Wed 28 Aug 2024 09:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 217.180.16.0/24 maxlen: 24
217.180.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 09:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:6b:1e:d3:cc:73:35:35:b8:aa:09:a9:c7:f2:80:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Aug 28 09:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=783e235ff039481c68705cc847130ce8917a5c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:0d:60:4d:c3:4a:19:0b:e8:79:61:58:26:
36:79:b3:a3:b7:f8:c8:b2:de:44:7f:4a:2d:a6:f1:
6e:fd:f5:93:a2:0c:e0:02:61:7f:ae:fc:af:e7:f6:
da:db:e4:3d:ad:74:8c:d6:48:67:5b:06:de:ac:aa:
0e:4f:18:12:90:a2:af:ab:68:27:24:9e:42:66:aa:
33:3f:22:1b:a6:56:22:58:c5:53:74:9e:71:3d:96:
1a:16:bb:af:90:f6:f2:da:f8:c6:98:be:c8:f1:ad:
7b:ce:b3:07:1d:48:f9:5d:93:6b:07:e2:30:52:e6:
c6:37:77:62:75:de:6e:73:b5:1c:eb:9f:63:98:b5:
16:a8:bf:cb:53:c6:86:50:39:4e:50:6a:93:e4:cf:
6f:ea:d9:fa:c7:c0:df:bb:84:f8:85:1a:4c:29:26:
8c:6d:11:92:52:a2:c4:8f:08:6d:ca:83:5e:96:3f:
23:d6:0f:e8:db:57:c3:60:e4:81:75:02:f9:6b:ba:
20:0f:d4:54:17:7b:eb:ba:c9:bd:52:21:5b:31:f1:
3d:a2:06:9b:95:b0:ca:90:e0:66:cd:59:34:78:41:
ba:43:aa:21:7b:38:78:71:17:69:e0:70:08:36:0b:
a0:1f:dd:2a:60:a5:2f:b6:94:eb:0e:36:af:d9:c7:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3E:23:5F:F0:39:48:1C:68:70:5C:C8:47:13:0C:E8:91:7A:5C:6F
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/eD4jX_A5SBxocFzIRxMM6JF6XG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.16.0/24
217.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
57:3c:c0:9d:1f:fb:45:55:52:ad:39:1e:f0:de:0a:b7:12:17:
d1:59:3c:da:c4:8b:75:54:d4:e3:a0:ed:eb:5e:42:5d:e1:0a:
a9:8a:df:8b:bd:55:a4:19:e1:1d:8a:d1:09:7c:7e:68:80:fc:
59:3c:88:7b:53:00:18:4d:c0:0b:09:af:58:2f:aa:08:fb:4e:
44:ce:9d:0e:ab:f7:a2:ab:70:fd:84:03:4c:9b:cb:68:f6:d6:
c9:53:36:d3:6f:08:3a:6f:8a:4a:a2:b3:88:88:5f:15:4f:e5:
46:2e:40:1b:fb:f2:e7:7a:8c:90:4c:22:04:10:b1:fb:10:db:
96:c3:75:6f:7a:54:84:03:18:b5:67:15:14:f6:14:b3:c1:91:
a7:66:36:bd:29:c5:ec:7c:1c:0c:33:66:93:1e:a7:64:59:d3:
f1:a6:98:2c:5c:0d:31:3e:12:e0:33:1a:22:76:ca:26:a5:51:
13:21:bd:f2:d5:98:3f:56:c9:bf:64:f2:ae:3b:26:6d:8c:14:
66:e8:be:37:a3:7d:d3:67:ab:58:04:e6:25:a1:bd:29:66:92:
32:cd:51:3d:9e:12:a3:2f:da:08:48:e3:63:79:43:d2:f1:b3:
87:03:1a:83:89:21:49:b5:7a:69:f2:aa:31:02:10:5c:ce:bf:
eb:a8:cd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 12:49:59 2024 by rpki-client on console-ams.rpki-client.org