Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/uZ4CpoTO-iINMExO139dXWbC4GM.roa
File: uZ4CpoTO-iINMExO139dXWbC4GM.roa (raw, json)
Hash identifier: mo9zKEW4R2L1GeVN3PRH0nR/m3EyHxq882BLDX3tHyU=
Subject key identifier: B9:9E:02:A6:84:CE:FA:22:0D:30:4C:4E:D7:7F:5D:5D:66:C2:E0:63
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 0185729EDF3E130EAAAFA96D510BE6256EB8
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/uZ4CpoTO-iINMExO139dXWbC4GM.roa
Signing time: Mon 02 Jan 2023 13:14:52 +0000
ROA not before: Mon 02 Jan 2023 13:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 217.117.65.0/24 maxlen: 24
217.117.71.0/24 maxlen: 24
217.117.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 06:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:df:3e:13:0e:aa:af:a9:6d:51:0b:e6:25:6e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Jan 2 13:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b99e02a684cefa220d304c4ed77f5d5d66c2e063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:90:c2:85:2d:25:3c:06:f6:7a:7e:47:16:e4:
f1:71:55:92:2c:85:c6:e5:d4:a6:2f:42:00:4c:31:
e9:e0:c5:db:47:65:48:1b:ce:ce:3f:00:ec:f1:dd:
0b:79:dc:b1:d9:46:7f:5e:04:28:84:cd:97:0d:af:
cb:91:61:c6:76:7e:2c:29:22:fd:69:90:8e:86:53:
b7:3e:81:1c:b1:6d:a8:a7:51:12:5c:d9:b8:f6:14:
8b:2a:4c:7e:b2:aa:f5:d2:5d:68:b3:cb:bd:ad:f2:
37:e0:94:15:3b:be:29:a9:85:1f:99:58:7c:37:35:
1c:14:c6:87:39:32:0f:29:d8:24:ad:ce:9e:91:64:
54:24:25:f0:1c:42:03:e6:9e:57:0f:ab:6d:10:3d:
0e:12:2f:92:eb:ca:b9:e2:55:c6:56:95:0f:25:56:
a2:33:27:6d:18:89:6c:37:65:57:04:4f:2d:4b:e6:
70:48:a5:22:f7:fd:ef:7a:20:0b:61:d1:84:80:09:
ba:19:96:65:58:66:51:0c:08:67:52:9a:80:f1:36:
52:bb:cc:ae:88:04:92:32:5b:0b:27:d1:b8:e1:a7:
f8:45:76:67:91:d5:8c:3e:a3:af:3e:6e:d6:2c:4e:
4c:b0:88:ca:5d:3f:5d:a9:42:cb:35:03:4b:2b:eb:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9E:02:A6:84:CE:FA:22:0D:30:4C:4E:D7:7F:5D:5D:66:C2:E0:63
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/uZ4CpoTO-iINMExO139dXWbC4GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.117.65.0/24
217.117.71.0/24
217.117.76.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:d4:63:f4:33:6b:c2:b3:dd:53:4d:03:1b:94:99:1d:fe:12:
32:ef:f2:03:7b:01:7c:3e:dd:48:40:52:ac:6d:34:e4:f9:4d:
46:58:6d:28:48:7a:c4:fa:5d:25:14:ac:98:32:fb:ae:e8:67:
8a:ba:c7:be:59:54:e4:90:9f:d3:d3:a8:77:9e:c5:e1:98:14:
e9:85:ab:68:27:bd:69:7f:1e:78:27:c6:5e:31:7b:9e:b4:65:
68:4c:6c:fb:e2:1a:72:5d:36:24:a2:a6:8c:8d:10:53:7f:be:
4a:58:2a:35:09:e8:09:2a:e4:52:4b:41:4f:be:5f:e0:8d:c2:
1d:cb:3e:f1:97:b6:1d:72:8b:2e:43:90:84:13:98:e3:ca:fc:
13:0b:a6:11:2d:69:4c:2b:94:34:3f:bf:6c:85:65:0d:ad:5f:
75:a6:94:f9:00:03:4f:30:74:de:84:d3:a0:c1:ce:e7:5c:d3:
7f:18:56:25:73:2c:29:26:0a:d5:63:47:02:2b:2f:9b:4f:ec:
25:84:7d:98:27:63:2a:91:95:71:65:fc:f3:cf:26:a9:ba:ab:
b9:eb:2f:7f:2f:49:71:55:79:2d:e4:4f:07:45:39:f0:4d:f5:
a8:d9:9f:68:0f:12:08:1d:94:2a:b7:60:13:d8:c9:1a:e5:65:
7d:22:c5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:49 2024 by rpki-client on console-ams.rpki-client.org