Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/17V-J6KNmEm6jwSfIZXux1cpTT4.roa
File: 17V-J6KNmEm6jwSfIZXux1cpTT4.roa (raw, json)
Hash identifier: eOMhTlerJUSjJovTlc4fjlLY2dWzQUXIgRol6wVM9aU=
Subject key identifier: D7:B5:7E:27:A2:8D:98:49:BA:8F:04:9F:21:95:EE:C7:57:29:4D:3E
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018C6C9B9B81BDB293891DA1B7193926A989
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/17V-J6KNmEm6jwSfIZXux1cpTT4.roa
Signing time: Fri 15 Dec 2023 08:33:06 +0000
ROA not before: Fri 15 Dec 2023 08:33:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 62.204.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:9b:9b:81:bd:b2:93:89:1d:a1:b7:19:39:26:a9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Dec 15 08:33:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7b57e27a28d9849ba8f049f2195eec757294d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:2b:3b:8d:31:48:62:15:66:52:49:7a:aa:
fb:19:51:bb:ba:07:78:30:01:64:93:5d:0c:eb:65:
5a:c7:de:87:fa:7a:cb:da:28:1c:05:34:12:28:1c:
1f:5d:5f:2a:5b:cf:01:c1:43:bc:a9:01:65:78:21:
88:e5:35:6e:19:31:62:0d:23:ea:9e:e1:55:96:8d:
f0:af:c4:35:bb:04:06:1c:f3:49:f3:b0:ec:a0:af:
77:86:02:34:dd:77:33:fd:3c:8f:e9:f9:ce:17:dc:
74:26:91:12:1f:e6:30:77:a6:a7:9c:dd:cb:7b:ff:
4c:74:62:d7:96:da:e6:52:19:4c:1c:8d:ca:ef:ec:
a2:95:b3:1f:94:b6:d9:cd:e9:9e:45:c3:73:a4:64:
9e:10:84:f6:0c:96:a1:8f:80:0d:5e:28:ea:1d:78:
29:c0:6e:9f:ff:36:63:5a:60:5c:63:1d:b9:90:7f:
6b:10:aa:fa:15:7f:e0:6a:bf:97:8b:74:4d:b6:87:
9b:04:d7:f7:5a:69:11:a3:b4:e9:b8:81:9f:de:28:
a8:36:13:24:42:7f:ea:55:c3:8c:6d:b7:7c:36:f7:
f5:f4:7f:3b:22:51:f2:27:4c:8d:33:13:31:f6:df:
ed:fa:6f:9e:85:98:fe:f4:f1:28:a1:51:ba:ea:85:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B5:7E:27:A2:8D:98:49:BA:8F:04:9F:21:95:EE:C7:57:29:4D:3E
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/17V-J6KNmEm6jwSfIZXux1cpTT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.35.0/24
Signature Algorithm: sha256WithRSAEncryption
28:36:60:cc:0c:e5:f3:2c:0a:1b:5e:bc:cd:09:ef:4b:99:b2:
21:78:33:19:26:a3:dc:a9:3e:8c:d3:77:cc:91:95:5f:a9:c8:
d1:82:42:1d:da:04:89:9b:da:70:c0:a9:20:bc:2f:a1:65:e0:
86:7f:26:c1:e7:db:09:cf:c2:03:40:82:a5:19:b9:f0:43:3c:
03:95:51:35:eb:36:3b:5e:f0:e3:06:11:c9:d6:35:05:d9:2c:
34:0b:71:50:89:36:61:47:a7:5e:03:e2:7d:77:5f:b6:be:5a:
f3:37:2b:2f:02:6c:39:10:52:5b:56:69:2b:93:75:48:a6:14:
e2:b1:86:8f:39:2f:b6:10:d4:81:60:f7:7f:73:6c:ca:7d:7f:
0c:aa:0b:a2:1f:10:77:ff:b6:7e:f9:1d:99:51:86:8e:27:41:
54:38:14:3f:1f:fa:5d:4d:bd:84:9f:27:8f:17:3e:9d:83:02:
bb:ff:95:3d:8f:21:51:85:27:99:46:58:dd:96:67:62:5d:db:
f0:c2:93:9b:40:35:ce:18:59:11:a6:0b:72:03:9b:32:19:d4:
5d:96:09:67:93:9c:49:ec:06:dd:9d:20:b1:79:57:34:7c:40:
2b:ff:6d:76:fe:41:c0:e7:fb:8a:e8:13:dc:ea:02:9f:26:31:
a6:82:a5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org