Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/9Tx3Ii7AJghTTETq-43XhiZHcb0.roa
File: 9Tx3Ii7AJghTTETq-43XhiZHcb0.roa (raw, json)
Hash identifier: c2ojB6sg0ctDN6U6dl5sWFop1wzsknEJINoacpoMxZ0=
Subject key identifier: F5:3C:77:22:2E:C0:26:08:53:4C:44:EA:FB:8D:D7:86:26:47:71:BD
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 01857169A89B6EC4B0A9CFFC1C5F8BE64941
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/9Tx3Ii7AJghTTETq-43XhiZHcb0.roa
Signing time: Mon 02 Jan 2023 07:37:07 +0000
ROA not before: Mon 02 Jan 2023 07:37:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 188.72.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:a8:9b:6e:c4:b0:a9:cf:fc:1c:5f:8b:e6:49:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Jan 2 07:37:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f53c77222ec02608534c44eafb8dd786264771bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d6:01:37:38:61:54:32:c8:66:57:7e:0b:9c:
43:af:5b:d0:be:2f:91:76:23:a5:90:7d:68:a3:90:
30:77:c2:ee:13:b0:f4:7d:ae:3e:9e:d4:a2:a6:7c:
0d:5f:e0:83:88:21:a5:ac:57:2b:63:f8:71:c3:96:
5f:a3:7d:88:00:ac:0d:2d:84:56:5e:30:89:b6:a1:
ff:91:84:5a:cc:cd:c4:d0:d4:d4:33:16:62:09:1b:
5b:07:bd:e8:75:ec:ed:46:9f:ae:39:c0:a9:f7:31:
ea:f9:4b:52:e7:78:c5:4b:fe:7f:d6:0a:7d:a2:eb:
11:46:03:78:3f:e0:32:52:6f:8c:e7:3f:b2:2a:19:
e3:b8:14:43:72:2e:af:01:da:ac:de:ac:c7:d9:0b:
af:5e:ba:79:5e:95:64:20:51:ec:ce:0e:a5:e9:a4:
6e:ef:70:6f:56:9e:3b:e4:56:07:bf:67:f8:27:36:
c9:71:87:fa:f9:56:3f:6b:5a:3c:57:8e:ee:82:82:
66:4c:d3:ea:29:90:64:2d:8d:77:2a:b8:7b:e2:9a:
fc:91:e5:34:f4:a4:ba:d9:92:00:b1:fc:93:0f:d4:
cd:86:d0:6c:b8:44:f7:ed:e5:15:df:65:f7:a4:f2:
71:3c:af:e2:2e:a1:4e:33:51:9c:55:7f:6e:ac:a9:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3C:77:22:2E:C0:26:08:53:4C:44:EA:FB:8D:D7:86:26:47:71:BD
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/9Tx3Ii7AJghTTETq-43XhiZHcb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.17.0/24
Signature Algorithm: sha256WithRSAEncryption
81:cc:a7:43:22:ce:27:26:77:a7:fa:cb:b1:a9:71:e6:c5:82:
eb:d7:74:c6:bf:f1:2c:32:f4:ac:b5:e7:6c:0b:54:ee:54:04:
d5:f6:59:fb:6d:9d:eb:a6:28:cc:14:a2:0a:0e:ab:8b:3d:c4:
09:7a:26:7f:af:ce:93:58:8b:52:19:30:fd:8c:3c:ac:42:cb:
1c:57:5b:38:e4:67:23:23:7d:2c:21:f4:f5:04:d5:40:38:b0:
24:b7:c9:27:0a:d4:1b:bf:5b:fc:9b:88:25:35:11:b5:ed:ff:
45:ee:71:c2:8a:83:f6:19:32:8b:2b:4c:12:b5:4d:fb:76:8b:
cc:92:9c:78:8e:6b:81:17:6b:4f:4b:29:a7:a5:60:ca:b1:f0:
59:a9:f4:1f:6b:a1:57:2a:9d:33:35:9e:6c:47:b9:77:57:9f:
a9:bc:d0:af:ae:60:fa:2d:8d:98:93:10:c4:3c:b0:38:64:2b:
9d:2f:93:c1:4c:87:6d:73:16:9c:42:c2:fa:39:5f:44:c0:08:
55:60:04:71:15:4b:e7:d7:2d:a7:d7:17:32:de:9d:e0:e5:4b:
43:7d:9c:40:5a:9b:ab:c5:d6:c0:2d:bb:1c:49:53:18:a0:7f:
5d:cc:c0:d7:b3:d1:38:0b:24:63:38:a0:5a:3d:b7:78:07:5b:
13:29:89:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:06 2024 by rpki-client on console-ams.rpki-client.org