Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ACV2Q45azIjNxvJfoHIJAY5efM0.roa
File: ACV2Q45azIjNxvJfoHIJAY5efM0.roa (raw, json)
Hash identifier: wauFUrdpUODAXymHJrXLexixAWiXXFNfv7+g8sAozG4=
Subject key identifier: 00:25:76:43:8E:5A:CC:88:CD:C6:F2:5F:A0:72:09:01:8E:5E:7C:CD
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0191E7C711D64105F0D644FDC0099BF97548
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ACV2Q45azIjNxvJfoHIJAY5efM0.roa
Signing time: Thu 12 Sep 2024 19:47:48 +0000
ROA not before: Thu 12 Sep 2024 19:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8772
IP address blocks: 207.244.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 14:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e7:c7:11:d6:41:05:f0:d6:44:fd:c0:09:9b:f9:75:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 12 19:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=002576438e5acc88cdc6f25fa07209018e5e7ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:53:48:4f:4a:31:e8:da:4e:ea:7a:1d:b1:
13:71:1d:62:37:ec:25:76:b9:28:ef:ed:3a:64:3e:
cf:53:a7:82:fd:d5:e4:44:52:cf:69:28:d2:d1:fe:
89:27:37:25:0c:fb:4b:8c:c9:76:82:a7:98:7c:f1:
c8:4e:3a:d3:b2:fc:ee:6b:31:12:6d:a0:02:a6:1d:
78:2b:b4:10:70:6e:bc:f8:44:95:ed:73:0b:00:1e:
c8:73:97:86:f4:69:d7:54:e7:82:45:79:d8:c9:a1:
0a:23:7e:13:29:eb:fa:25:1d:8a:73:53:1f:f9:a4:
39:66:4e:3f:e9:fb:48:b8:ca:f7:0a:93:9d:70:d3:
ee:1c:1b:c4:6e:33:c2:9f:6b:1c:fa:2a:0d:30:e4:
d7:93:1e:18:fc:d5:2c:16:6d:98:a8:a6:88:b7:4d:
56:74:cc:41:43:db:f0:14:64:60:a1:b6:0e:f4:73:
80:eb:64:a9:5b:70:f2:2f:c8:72:76:22:c9:3d:da:
2d:f3:bf:43:d5:a7:d9:23:cc:c0:ad:fc:8c:9b:99:
f5:c4:04:ae:23:74:12:35:54:b7:68:78:2a:58:62:
c6:a2:82:ae:03:5a:b5:de:a6:90:af:86:7b:fd:8e:
69:d7:86:bd:a1:34:56:93:03:7e:94:2d:a0:56:ee:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:25:76:43:8E:5A:CC:88:CD:C6:F2:5F:A0:72:09:01:8E:5E:7C:CD
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ACV2Q45azIjNxvJfoHIJAY5efM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.244.197.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:dd:91:75:88:5d:39:a5:e3:74:a7:2b:78:21:ec:c9:13:ae:
24:79:01:ce:4b:34:0b:29:09:c4:38:5d:fe:28:40:11:e2:27:
01:d7:80:eb:3b:b7:b6:1d:d5:df:23:2e:ca:f0:78:ea:fd:cd:
bc:8b:4e:97:2c:1e:ad:1c:64:b4:01:84:b1:02:2d:b4:96:c2:
af:0b:5d:41:53:d7:b9:8d:4e:5f:99:33:54:3c:9c:e5:97:d1:
ee:a9:f8:7e:e5:22:67:3c:2b:b6:48:16:02:5e:90:08:e7:6e:
d0:0b:80:b9:d4:16:f1:27:45:30:a7:d5:72:18:53:55:7b:9c:
64:fe:cd:fd:c7:d9:8e:b6:c4:b8:31:97:4a:cd:9d:c9:26:3b:
05:22:1e:11:c2:fc:4e:5f:85:eb:ee:95:2f:53:06:a3:22:91:
5d:27:c0:ff:9e:d6:1d:35:fc:92:04:f3:a6:f8:e0:d4:67:5e:
2d:d1:3c:bf:a4:73:a6:48:a1:77:b8:4d:79:f8:55:94:46:49:
d8:ec:6b:fe:81:2d:c8:67:53:ed:b6:c3:57:5d:a3:0c:6e:05:
2e:10:3c:0d:a0:45:41:da:ac:f7:09:e2:d5:a8:4a:51:98:55:
85:22:a2:75:74:b6:25:96:32:18:2b:dc:77:e1:3c:12:93:c8:
b3:06:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 18:52:24 2024 by rpki-client on console-fra.rpki-client.org