Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/3Cpc5o4DqnDEIxOoljRal-B8-k8.roa
File: 3Cpc5o4DqnDEIxOoljRal-B8-k8.roa (raw, json)
Hash identifier: znwG4NhXsm2XNPQAZS5KuzzSG2l7VmhzymVSlw2F06k=
Subject key identifier: DC:2A:5C:E6:8E:03:AA:70:C4:23:13:A8:96:34:5A:97:E0:7C:FA:4F
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0185734CB2ECF41A6AD628C24E9B8D832CF1
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/3Cpc5o4DqnDEIxOoljRal-B8-k8.roa
Signing time: Mon 02 Jan 2023 16:24:44 +0000
ROA not before: Mon 02 Jan 2023 16:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41167
IP address blocks: 217.110.62.0/24 maxlen: 24
217.111.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:b2:ec:f4:1a:6a:d6:28:c2:4e:9b:8d:83:2c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 16:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc2a5ce68e03aa70c42313a896345a97e07cfa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:61:6c:37:ee:28:b9:60:fb:2e:05:a6:28:0a:
85:2b:93:1f:a7:2e:d1:7d:2b:b4:1b:f8:16:39:32:
7e:ee:b2:f2:54:e7:b7:5e:59:bb:3e:94:6c:6e:b8:
ad:22:c2:cc:0a:e1:cc:fb:22:e4:a6:12:e3:25:2e:
ff:a6:bc:af:97:c3:26:49:08:42:a4:73:83:4e:26:
c5:29:14:c5:3a:f9:ec:1a:5c:54:91:de:34:b5:a8:
c9:e0:0f:6f:21:1e:83:b4:86:b6:3a:3d:34:7d:ed:
78:6d:89:1d:f4:80:73:e9:3d:ef:79:c4:00:f0:48:
56:d8:46:52:d1:6f:e6:19:43:65:e8:78:50:58:73:
98:33:2c:27:fd:41:ac:2a:b1:56:7d:09:5f:df:61:
ef:73:1a:3c:ca:ad:82:63:70:0d:50:6e:79:7d:53:
41:9d:5a:c9:fc:51:1a:03:87:55:d8:c5:a6:73:b1:
7d:8f:a0:2d:58:3c:5a:95:bb:e2:99:69:92:1a:1a:
7a:98:2c:f9:2b:24:3d:31:71:c2:3e:8c:d5:4d:1a:
42:1e:11:d2:51:42:22:ed:65:8f:10:30:c1:08:c7:
1d:d4:31:1e:d6:be:ae:10:8d:48:78:e4:c2:b1:a7:
57:9b:b2:c5:28:0c:db:77:b2:15:2f:e7:1a:f9:f4:
dd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2A:5C:E6:8E:03:AA:70:C4:23:13:A8:96:34:5A:97:E0:7C:FA:4F
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/3Cpc5o4DqnDEIxOoljRal-B8-k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.110.62.0/24
217.111.44.0/24
Signature Algorithm: sha256WithRSAEncryption
05:da:7c:dd:d6:f6:02:af:38:cd:95:3a:61:08:07:af:94:6d:
f3:c7:76:5e:32:22:9e:2d:b6:eb:07:d9:8e:58:40:d9:ec:c7:
be:b4:a3:c2:ff:d5:bf:5e:a1:81:40:5c:df:7f:ad:80:60:cf:
db:12:6f:7c:a4:d5:63:b8:dd:24:17:8d:48:78:63:1b:85:b9:
ab:76:ac:56:be:f5:d4:29:c4:b2:ba:ee:95:13:19:6c:a1:9e:
aa:31:0d:2a:ac:c2:d8:17:c8:09:59:d0:11:69:5d:53:51:0c:
fb:d7:50:86:10:ef:d2:89:de:00:b9:cf:6a:82:3f:7e:fe:ea:
bf:48:9e:3f:a4:ea:67:8c:f7:20:d1:39:1f:f0:05:12:66:4d:
15:83:e2:f2:ca:3a:f5:50:8d:e0:88:6a:5f:71:75:b9:54:e3:
14:71:bb:9e:e8:42:d6:fb:38:05:5a:d1:5e:20:fe:9e:d5:58:
c7:fb:d4:95:c4:e1:00:92:e4:8f:3e:9f:aa:55:0b:ea:3b:f4:
5a:55:13:bb:18:8a:2e:eb:d6:59:92:94:81:51:0e:57:cd:f3:
32:3d:bb:7a:72:25:6d:9b:6e:7b:4b:52:3f:ee:3e:a2:9a:c7:
48:85:59:6f:35:33:89:b5:ea:a0:91:ed:87:60:f4:d9:3d:89:
4b:ab:f2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:09 2024 by rpki-client on console-ams.rpki-client.org