Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/owG5oHiz-rA5fwF8x0CpwIlDtoQ.roa
File: owG5oHiz-rA5fwF8x0CpwIlDtoQ.roa (raw, json)
Hash identifier: VuUUFVkperdyrHdLKd0PImLlaVyQH5gtxzBRtLjBJkU=
Subject key identifier: A3:01:B9:A0:78:B3:FA:B0:39:7F:01:7C:C7:40:A9:C0:89:43:B6:84
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0185734CB180A38D4A26D56233E257D1DD8D
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/owG5oHiz-rA5fwF8x0CpwIlDtoQ.roa
Signing time: Mon 02 Jan 2023 16:24:44 +0000
ROA not before: Mon 02 Jan 2023 16:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27447
IP address blocks: 217.111.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:b1:80:a3:8d:4a:26:d5:62:33:e2:57:d1:dd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 16:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a301b9a078b3fab0397f017cc740a9c08943b684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:02:5d:e1:97:73:19:01:a8:95:16:1b:6c:13:
48:bf:b8:56:86:71:29:82:98:f2:33:3b:2d:fa:b4:
f7:1e:9f:31:89:48:70:26:e7:69:a4:ec:13:de:e7:
dc:24:dc:10:a3:5c:53:a6:bc:9e:87:b5:e7:4b:67:
2c:f9:29:63:eb:3c:2c:9f:3f:6a:b3:a2:32:79:63:
5b:68:3c:1d:42:01:88:f0:a5:0a:f0:7d:2c:54:38:
83:a3:7c:91:26:cb:21:9a:31:51:87:a3:16:53:df:
d0:c4:15:50:88:a1:d3:84:6f:32:ac:8f:c4:2b:c5:
5c:31:4b:6c:0b:1a:21:1d:9b:a7:4e:74:ec:a8:87:
a4:39:bf:2e:9c:7b:54:31:91:32:1a:95:ff:12:ee:
df:0a:c7:82:34:31:35:5a:00:d6:80:4a:08:b9:12:
aa:69:44:44:af:30:0c:fe:a2:5a:50:40:c7:89:78:
42:43:90:12:bb:a8:9b:66:e2:c9:55:df:6c:17:37:
62:71:46:69:97:ad:0a:bc:28:86:12:91:7e:b7:a9:
a7:c6:51:ff:75:0c:d9:4f:f0:5a:33:f4:a5:28:c3:
1a:e8:4b:ee:ba:3c:3d:d7:ac:70:5e:1a:d2:0e:f9:
59:c2:af:b6:fa:04:84:78:f9:84:d0:b0:3f:31:f4:
a9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:01:B9:A0:78:B3:FA:B0:39:7F:01:7C:C7:40:A9:C0:89:43:B6:84
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/owG5oHiz-rA5fwF8x0CpwIlDtoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.111.198.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d2:b5:ee:80:a9:fc:e9:f8:77:63:3d:36:a1:11:5c:3a:7f:
9c:69:92:66:72:66:fc:61:65:3a:a1:98:f8:75:29:2a:de:bc:
7e:e2:8e:f9:38:da:46:c1:f2:c9:ac:75:02:49:a5:bc:20:47:
da:9c:55:09:f3:c0:a9:82:24:1d:86:cd:74:56:92:1f:35:d9:
59:12:98:d7:31:d0:a0:8b:92:9e:95:85:78:a5:c1:94:4c:ca:
9c:9a:b5:4f:f9:7e:5b:1c:fe:85:19:6f:d6:7c:ae:1c:3f:05:
24:2e:a1:4d:bf:8c:d4:eb:ff:6d:28:05:93:08:4c:f8:dd:ee:
10:2a:72:ba:eb:b2:d0:62:04:8e:b2:b0:3b:e1:68:f7:09:02:
6b:06:63:8a:7b:b7:0f:29:4a:51:11:f5:46:32:57:3e:68:9e:
e1:eb:d2:59:ea:82:41:57:10:73:bf:66:22:95:64:bd:15:71:
82:c0:82:8b:41:c9:d3:0b:5c:5b:c3:54:25:7d:3d:9e:cc:24:
f9:41:92:c5:32:84:5c:fe:bf:70:3e:8a:08:b7:3e:2c:88:97:
d9:c6:06:90:9d:e7:50:aa:47:84:c2:48:2c:4e:1a:f6:17:58:
27:c6:83:11:95:d3:16:32:58:39:1a:fa:a9:b2:ba:e4:0f:a1:
26:87:37:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:28 2024 by rpki-client on console-ams.rpki-client.org