Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/F4jpgfWF99g1wVLZBGfe6b1z9yk.roa
File: F4jpgfWF99g1wVLZBGfe6b1z9yk.roa (raw, json)
Hash identifier: fZrG8xs6OktN/9eQmcGU+bSHdTyw3aAmIBLCahRBVHc=
Subject key identifier: 17:88:E9:81:F5:85:F7:D8:35:C1:52:D9:04:67:DE:E9:BD:73:F7:29
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AEE82B2E7BEA86F77810A5BE9D898
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/F4jpgfWF99g1wVLZBGfe6b1z9yk.roa
Signing time: Mon 01 Jan 2024 18:30:48 +0000
ROA not before: Mon 01 Jan 2024 18:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 217.156.22.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 17 May 2024 05:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ee:82:b2:e7:be:a8:6f:77:81:0a:5b:e9:d8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1788e981f585f7d835c152d90467dee9bd73f729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:aa:88:10:31:8d:fd:61:40:b0:4e:4f:10:
ca:eb:f1:65:dd:09:87:9e:8e:bc:e7:16:98:9f:69:
f6:b9:25:3a:7a:eb:a0:6e:6c:11:d3:9b:95:5c:16:
93:1f:8c:70:7b:5b:68:e9:f2:ea:e6:20:86:a9:db:
c9:b7:68:1d:f6:4c:c0:a7:2a:ad:81:68:06:db:bb:
8e:97:62:7e:f3:5a:14:5d:b2:db:e2:ae:d7:8d:3e:
d9:bd:d0:26:9e:7e:11:ca:8d:5c:43:3d:25:6a:c6:
f6:92:eb:cc:1c:f0:6c:17:89:b4:08:89:20:34:91:
0b:b5:0a:d6:bc:80:f2:01:4b:d5:fc:1f:8b:65:76:
08:28:f5:b6:cb:8b:dd:8b:b0:e1:fb:fa:fa:7b:d9:
ec:a1:df:37:cc:ec:d0:10:46:d0:62:50:fd:d0:a0:
4c:74:cb:be:60:61:4e:08:b8:e4:ae:a4:a0:fa:f8:
99:f1:f7:f3:e6:51:e3:59:61:68:6d:ba:44:1b:17:
40:40:e9:77:e3:26:95:72:9f:c9:6f:6d:30:2f:38:
88:91:9a:8b:5c:2c:14:b7:6a:9a:6a:9c:05:6f:96:
40:96:47:6d:27:2a:b6:28:8f:67:fb:c3:bf:7b:84:
16:69:3a:99:8b:63:8b:e9:26:2e:32:db:f0:11:2f:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:88:E9:81:F5:85:F7:D8:35:C1:52:D9:04:67:DE:E9:BD:73:F7:29
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/F4jpgfWF99g1wVLZBGfe6b1z9yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.22.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:a6:dd:5b:d3:fa:46:19:f9:14:3e:4c:1b:49:10:2d:c4:10:
4e:06:9a:20:83:4b:3f:f8:c2:0f:cc:19:51:d4:e0:f3:ea:f4:
bf:7b:b1:2b:3f:96:b2:1b:67:51:e9:9e:ad:69:fd:d4:3c:c3:
0e:72:13:ee:e0:28:a2:ae:89:f6:b8:45:80:80:de:7e:56:ab:
6d:bc:6d:9e:9c:f4:28:4a:f1:3c:a8:7d:a5:ac:a1:17:24:35:
e2:82:76:c0:82:6b:17:90:0e:37:0a:1f:eb:2f:d2:d6:7b:3c:
54:1c:c2:b9:7f:94:38:40:b5:38:d0:40:95:67:16:f8:9e:b8:
11:b4:6e:4d:44:22:8c:9e:14:f1:5e:44:61:24:f3:59:fe:58:
94:92:75:0b:5d:ad:ee:e3:c4:cb:c3:bb:fd:00:f0:ca:78:8c:
ee:98:72:e1:9b:9b:8c:db:bc:06:20:c7:cc:37:5f:c9:80:a2:
5e:17:a5:0f:0d:83:8d:68:a6:54:ab:f3:99:c4:89:27:f7:be:
5e:ad:dc:35:84:86:38:df:f9:a0:20:15:8f:d4:d1:d4:16:56:
e5:68:ee:be:54:99:b2:b6:1a:9a:03:c2:95:88:7c:fc:d3:13:
12:6a:0b:89:18:f3:dc:fd:a3:cb:fa:0a:03:60:c1:26:68:94:
1f:3a:68:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:09:24 2024 by rpki-client on console-ams.rpki-client.org