Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/0hpAOYqX23p5t3WJuSM4bCt3wB4.roa
File: 0hpAOYqX23p5t3WJuSM4bCt3wB4.roa (raw, json)
Hash identifier: EI0KdW+IBRk4P46U6GLIxXGzGlOk0a/4sH/R58hprR4=
Subject key identifier: D2:1A:40:39:8A:97:DB:7A:79:B7:75:89:B9:23:38:6C:2B:77:C0:1E
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 01856B40C3DEEB83585FECA21E11C806D590
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/0hpAOYqX23p5t3WJuSM4bCt3wB4.roa
Signing time: Sun 01 Jan 2023 02:54:44 +0000
ROA not before: Sun 01 Jan 2023 02:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50926
IP address blocks: 217.130.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:40:c3:de:eb:83:58:5f:ec:a2:1e:11:c8:06:d5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 1 02:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d21a40398a97db7a79b77589b923386c2b77c01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:e7:af:fe:cf:8f:62:75:0f:86:e1:d9:b9:
85:0e:47:0d:df:13:36:65:6c:d4:8d:ae:93:55:21:
3f:2f:ba:62:fa:26:21:9f:57:3c:50:83:3e:fa:35:
6a:5a:df:b6:f7:17:77:8c:c0:ae:0d:5f:c9:40:87:
44:bf:4d:a9:73:a0:ad:a8:b8:3d:98:59:45:f2:4c:
27:c5:5c:d9:9a:f4:66:29:3c:24:67:1e:23:ec:ae:
40:f1:6c:fd:c1:d6:2e:b7:77:fd:e7:7f:2d:29:51:
78:76:4b:98:78:37:80:99:a2:f2:ba:c4:01:6b:d7:
d4:73:60:48:4f:b4:b2:27:de:28:ab:9e:47:d5:86:
bd:e4:3b:42:bc:50:d9:3a:5c:b3:ac:08:70:2d:30:
3f:83:c5:6c:ab:c5:a2:d9:66:28:9d:d1:43:05:36:
93:ab:ae:6e:3d:c3:88:5c:4f:96:2d:92:3b:54:3c:
55:c4:0b:5b:c4:c5:84:5b:10:dd:0a:0d:4d:f7:30:
c7:1d:54:75:fd:95:11:e0:72:96:65:24:2c:d1:e2:
56:60:3b:02:79:e8:35:b5:9d:ab:0d:37:96:66:a5:
c1:04:7f:59:12:5b:54:fb:48:cb:92:81:41:43:8b:
ba:38:d3:e6:bc:9a:89:62:63:13:9b:4d:21:b8:92:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1A:40:39:8A:97:DB:7A:79:B7:75:89:B9:23:38:6C:2B:77:C0:1E
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/0hpAOYqX23p5t3WJuSM4bCt3wB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.130.244.0/24
Signature Algorithm: sha256WithRSAEncryption
33:4d:30:ed:76:77:bc:ad:ce:b8:0c:3f:6e:ac:ca:f8:b0:93:
09:bc:61:fc:f7:63:ab:e8:09:9b:74:50:c7:45:e5:e6:db:35:
a0:35:83:40:b9:40:95:f8:9a:c0:4f:70:fb:d8:55:f7:22:36:
2c:8b:b3:59:35:8f:f2:d6:de:d1:c7:dc:39:fc:e6:a6:08:c3:
5f:ab:b0:09:0e:7f:ea:68:e5:34:da:9c:62:9a:3c:74:e1:93:
2e:05:05:8e:f1:93:fd:f2:07:ec:a0:49:4d:75:58:c2:78:64:
ce:bf:b0:cf:1f:6b:8f:b1:66:2c:52:e6:b2:a8:78:53:72:3e:
e3:af:a3:50:b4:2e:33:e2:f3:df:15:49:8a:eb:0d:a5:2b:de:
65:c9:65:23:15:ab:db:64:f6:61:f8:a7:f9:4f:a5:42:d7:3e:
87:97:67:e8:b5:77:97:a4:50:fb:13:e8:8e:f7:ee:b1:98:bf:
aa:b0:0c:b0:54:68:a5:0a:1a:2f:aa:1e:f8:f5:3b:0f:14:d4:
00:68:33:45:b3:50:0d:4e:e0:c9:6b:ba:6d:85:d4:49:c7:ba:
1a:45:ad:71:e0:5e:f9:54:8c:45:f9:41:a7:0b:9a:37:f3:7d:
c5:c1:1d:17:d7:96:6e:8a:e5:b0:4f:69:7b:61:7d:6c:33:45:
05:85:a6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:01 2024 by rpki-client on console-fra.rpki-client.org