Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1cjzCwLFuUgKnz0J0mZPVezuDO0.roa
File: 1cjzCwLFuUgKnz0J0mZPVezuDO0.roa (raw, json)
Hash identifier: jDrN+SkSUZClQdeh87Py7knOIkz/tE1pqbRqpn+UmNg=
Subject key identifier: D5:C8:F3:0B:02:C5:B9:48:0A:9F:3D:09:D2:66:4F:55:EC:EE:0C:ED
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019293EEC5C5D287A84B3EBE8EE9CB574B23
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1cjzCwLFuUgKnz0J0mZPVezuDO0.roa
Signing time: Wed 16 Oct 2024 06:05:51 +0000
ROA not before: Wed 16 Oct 2024 06:05:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 207.244.208.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:93:ee:c5:c5:d2:87:a8:4b:3e:be:8e:e9:cb:57:4b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 16 06:05:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5c8f30b02c5b9480a9f3d09d2664f55ecee0ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:c5:08:b0:6b:31:5e:44:33:f0:cf:95:c1:
3f:53:fb:ff:fc:2b:63:04:3a:29:fc:84:e7:ce:dd:
42:11:2f:30:c2:27:17:6d:40:fb:b3:46:eb:aa:41:
95:9f:62:93:4d:81:22:29:c5:86:69:51:06:fd:85:
29:b9:38:59:e7:86:d8:51:35:8e:06:67:59:4b:97:
63:11:77:cc:5e:5d:e2:e8:1b:ba:c2:1b:cc:c5:54:
c1:b7:31:1c:8a:2f:61:30:ea:dc:50:5b:ad:aa:ee:
4d:43:e3:ee:73:38:ef:6d:28:9e:ab:56:e0:a4:4d:
f8:c1:1a:42:79:f6:2f:92:d5:92:5f:03:c1:5c:45:
17:34:a6:21:d2:39:b5:1d:07:ef:61:12:fd:9a:53:
68:65:d3:f4:44:56:03:94:08:0c:a8:df:9f:3b:49:
26:da:2d:fa:d5:60:6e:fb:94:d4:0a:23:76:9c:20:
fe:02:2a:67:02:df:d6:2c:c0:81:de:cd:71:27:b4:
7e:76:61:34:b1:72:7a:80:4d:58:db:13:11:71:b3:
87:ae:cb:65:1d:7e:d2:55:3e:0c:29:1b:a1:71:f2:
c0:7c:2e:14:a5:87:4f:89:34:e3:6b:9e:d1:82:52:
c7:31:94:4d:43:42:5b:e6:d9:f3:6d:b7:6a:97:ab:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C8:F3:0B:02:C5:B9:48:0A:9F:3D:09:D2:66:4F:55:EC:EE:0C:ED
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1cjzCwLFuUgKnz0J0mZPVezuDO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.244.208.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:a9:38:c2:b9:68:e0:fe:57:3e:97:d3:be:ff:e6:77:95:9f:
87:76:66:d4:56:b2:e6:39:5a:cb:00:66:06:55:7f:38:03:1f:
5d:8f:82:8f:be:dc:37:41:65:9b:d6:66:1c:25:da:bd:29:cc:
e4:50:96:97:d3:8e:df:5a:c1:86:a6:f7:31:cd:a2:3d:11:82:
6f:30:46:23:39:d5:5e:71:84:76:ef:2f:df:2c:7d:f2:82:f9:
9c:59:48:18:7c:b1:2d:bd:44:2a:28:68:7a:83:10:c3:1c:2c:
d3:23:5a:81:0a:dc:b0:01:e7:98:69:29:17:6c:97:6d:e9:28:
5b:31:18:72:2f:be:4a:40:c2:84:82:91:c5:99:78:48:cf:45:
e0:1f:bd:b1:51:82:79:4c:1c:6a:7e:b2:8a:65:3b:2d:3f:0a:
9e:e0:4b:08:1f:ce:ff:b9:18:88:00:99:c2:bc:6a:24:9f:68:
94:ed:2a:10:82:f4:de:70:85:8b:a8:88:a8:50:c3:6d:cd:21:
8d:83:12:d9:30:cf:83:63:a1:2d:85:7d:a8:68:d6:55:12:76:
15:2b:d1:f6:e0:1e:13:5d:e0:30:0c:d6:5c:b5:a4:ea:23:bc:
5a:f6:4f:6b:c5:d1:90:01:22:5a:3e:2b:ad:dc:f5:5e:1e:cf:
fd:4b:16:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 17:19:20 2024 by rpki-client on console-fra.rpki-client.org