Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/MIxOwQx74iaGExKJz1TdyYsgAm4.roa
File: MIxOwQx74iaGExKJz1TdyYsgAm4.roa (raw, json)
Hash identifier: +VbnvbqSwEZpv1P/62BVz+HVWGbFJjYWJZlN01P6P4w=
Subject key identifier: 30:8C:4E:C1:0C:7B:E2:26:86:13:12:89:CF:54:DD:C9:8B:20:02:6E
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F024DDEAEAB2F13425F2712D4E3CABF
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/MIxOwQx74iaGExKJz1TdyYsgAm4.roa
Signing time: Sun 01 Jan 2023 20:25:00 +0000
ROA not before: Sun 01 Jan 2023 20:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201611
IP address blocks: 217.69.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:4d:de:ae:ab:2f:13:42:5f:27:12:d4:e3:ca:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=308c4ec10c7be22686131289cf54ddc98b20026e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:51:6b:b9:58:3e:97:08:8e:3a:9d:4d:c0:d1:
ce:4a:56:b4:aa:46:9e:fe:cb:cb:0e:a3:27:74:b0:
9c:95:56:3a:c9:48:7a:59:a8:ee:3b:93:b9:82:7d:
4b:3a:f9:39:73:08:92:04:e7:0e:8d:f8:30:90:e5:
18:46:21:a7:b4:35:c7:8d:28:f9:da:32:bb:99:47:
60:75:33:ae:f2:61:53:85:e2:7e:ca:fe:06:0e:ee:
bc:13:12:a4:44:3e:ac:2d:8d:35:bd:dc:e1:8c:74:
b9:f3:cd:09:cf:b3:19:64:68:fb:3f:ec:ff:2e:f6:
39:39:43:33:e0:54:01:13:df:30:62:63:c0:ae:c9:
a6:54:69:72:8b:43:a9:8c:af:50:37:cf:7a:2d:6b:
40:7f:2d:5a:03:04:88:b6:8c:b2:4f:ae:a2:f8:0e:
20:df:20:ba:cd:5c:b9:89:48:88:ed:46:05:1f:2f:
bd:6c:d9:8b:0b:66:e1:a0:e3:fd:2e:80:da:9f:1c:
83:16:0b:4c:13:5c:37:53:71:22:38:8c:6a:ff:f6:
43:8e:0f:d1:88:09:6e:a1:c3:90:b9:ea:89:c7:4f:
18:f2:f4:92:c3:14:6e:73:df:42:9a:e0:8c:19:eb:
98:96:27:11:60:df:63:1d:54:6b:40:a5:70:55:a5:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8C:4E:C1:0C:7B:E2:26:86:13:12:89:CF:54:DD:C9:8B:20:02:6E
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/MIxOwQx74iaGExKJz1TdyYsgAm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.69.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:26:f2:9a:70:6e:3d:ad:88:01:68:ed:b6:a4:0d:9c:91:93:
9a:84:6f:17:35:c5:2f:e1:31:83:32:2e:c8:ae:28:5b:83:ce:
49:98:e8:5d:93:cc:6b:65:09:47:31:d3:1a:a6:e1:f9:8b:27:
b2:0c:11:cf:ef:86:11:8d:4a:78:ff:b6:be:b9:51:55:5a:ce:
53:a5:5f:4e:79:39:34:02:4c:dd:67:9c:5f:11:b2:87:b7:f3:
b7:63:7b:7f:f1:94:e8:f4:8d:7e:e3:8e:f0:65:02:61:11:ed:
88:1c:f9:6a:44:2e:fb:11:87:45:38:a7:12:70:e8:f7:12:94:
35:eb:1d:30:10:25:30:2d:ee:7e:17:a5:51:ec:96:0f:c5:ee:
2a:be:6a:f9:6b:d6:d6:fe:0e:a0:00:6d:41:93:fb:b0:de:6f:
09:12:6b:85:0f:7b:a0:c0:f2:a0:28:6f:2f:ce:80:e6:bc:3e:
2e:c1:40:40:60:bb:e8:1d:be:d2:f0:a0:01:8e:a2:59:95:97:
da:2c:68:e7:88:68:87:5b:98:db:7c:50:fb:6e:36:6d:52:4b:
0b:37:d3:6f:37:28:92:43:46:21:47:09:46:b1:9a:87:04:4c:
07:5e:e2:0b:82:0a:3a:6d:65:6b:69:6c:a3:15:54:9a:81:f8:
94:3f:25:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:38 2024 by rpki-client on console-fra.rpki-client.org