Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7dc391-6bb9-4fff-92ee-a616f02772e6/1/hJNTypPLJ2DB4EDjXXfrulXnDuQ.roa
File: hJNTypPLJ2DB4EDjXXfrulXnDuQ.roa (raw, json)
Hash identifier: 8z+xP5vYLT1tfakg3hjIYwu0+ymmbk9V9NCSpE18YFM=
Subject key identifier: 84:93:53:CA:93:CB:27:60:C1:E0:40:E3:5D:77:EB:BA:55:E7:0E:E4
Certificate issuer: /CN=26e94ce0b4954108b15c4f295938f8c1af0727c4
Certificate serial: 0185719547F18330C1CDF463B0ECB60016A9
Authority key identifier: 26:E9:4C:E0:B4:95:41:08:B1:5C:4F:29:59:38:F8:C1:AF:07:27:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JulM4LSVQQixXE8pWTj4wa8HJ8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7dc391-6bb9-4fff-92ee-a616f02772e6/1/hJNTypPLJ2DB4EDjXXfrulXnDuQ.roa
Signing time: Mon 02 Jan 2023 08:24:46 +0000
ROA not before: Mon 02 Jan 2023 08:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203821
IP address blocks: 217.28.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:47:f1:83:30:c1:cd:f4:63:b0:ec:b6:00:16:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26e94ce0b4954108b15c4f295938f8c1af0727c4
Validity
Not Before: Jan 2 08:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=849353ca93cb2760c1e040e35d77ebba55e70ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:a7:db:3c:92:05:79:d4:ef:f3:07:09:fc:
d1:67:0e:f7:93:40:4c:15:50:b0:08:23:53:84:95:
c8:3e:8e:96:06:1e:34:dc:ff:50:31:64:0c:f8:fa:
88:15:0e:1e:4b:8f:9d:43:f6:d2:3b:f8:1e:a3:b0:
af:19:b3:1c:ac:3b:b1:d8:82:e5:de:26:02:0b:7f:
ed:16:31:05:d1:70:1e:71:43:e6:1a:91:9b:5a:ed:
de:0e:fe:25:04:43:fa:e3:76:99:43:c9:32:32:bf:
59:ee:83:3d:49:be:26:8a:c9:c7:f9:9c:39:b0:12:
72:6e:6c:19:d7:90:f8:00:72:78:c1:2a:34:c2:ca:
8c:c4:a8:1b:e4:82:e7:4e:a4:24:ba:d4:4c:e5:0a:
5f:94:e4:84:de:e5:78:5e:f1:a5:01:53:11:d1:42:
7e:e7:21:15:2e:2a:29:09:db:7c:9b:53:64:9a:9b:
71:6b:89:42:e1:73:75:53:28:87:ab:64:e1:26:2a:
59:fe:87:fd:c7:73:a3:b5:09:57:cd:43:d0:83:08:
27:5b:b4:a6:40:1f:a0:2a:f9:d9:d5:bc:e6:b1:e2:
cd:8b:b4:1a:3f:6d:72:b1:e5:74:9c:ca:c6:68:1e:
90:5f:73:8c:33:88:be:8c:9c:0f:f8:48:52:4e:0f:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:93:53:CA:93:CB:27:60:C1:E0:40:E3:5D:77:EB:BA:55:E7:0E:E4
X509v3 Authority Key Identifier:
keyid:26:E9:4C:E0:B4:95:41:08:B1:5C:4F:29:59:38:F8:C1:AF:07:27:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JulM4LSVQQixXE8pWTj4wa8HJ8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7dc391-6bb9-4fff-92ee-a616f02772e6/1/hJNTypPLJ2DB4EDjXXfrulXnDuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7dc391-6bb9-4fff-92ee-a616f02772e6/1/JulM4LSVQQixXE8pWTj4wa8HJ8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:5f:b4:c7:c0:0a:49:27:48:78:24:38:18:11:b4:e1:74:fb:
a0:9d:02:91:f5:7b:ed:08:2f:38:c7:74:78:c9:f8:97:c6:96:
28:b5:7c:ce:f5:05:3d:fd:5f:5f:28:ba:7b:f2:1e:d9:ec:16:
4c:84:5c:23:b2:7b:ee:d6:57:f9:da:fc:fd:5a:1c:b4:80:f1:
7d:d5:cd:43:d7:ca:22:1a:02:f4:07:73:11:3d:a9:be:ac:16:
af:b3:96:dd:ec:09:9a:be:84:53:dd:0e:24:27:3f:52:06:21:
96:92:fc:48:43:9c:7e:83:70:bb:ce:11:a0:96:17:e6:28:a2:
e5:07:39:a0:4c:95:82:9f:c1:c8:e7:fe:35:78:09:89:b9:a9:
87:e1:46:ed:5e:f9:01:fc:ec:d0:9b:79:75:3e:9a:d6:bd:ec:
a9:5f:36:75:4f:d5:45:0b:e3:83:22:31:9c:0a:97:6d:98:25:
1b:f3:be:04:14:9f:3e:3f:b8:44:e1:d5:53:38:1f:56:78:cf:
df:94:81:08:24:42:84:ad:93:7a:09:49:bd:b9:13:4f:4e:0c:
3c:dd:5c:98:f0:9f:90:5d:cd:5b:76:63:84:2f:0f:eb:be:3f:
95:85:ac:c4:10:b4:88:a8:7f:e4:99:9b:a8:44:51:cd:fe:e0:
db:3c:fa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:41 2024 by rpki-client on console-ams.rpki-client.org