Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/x23BpTBmfErjgl9XnPcKGuq816M.roa
File: x23BpTBmfErjgl9XnPcKGuq816M.roa (raw, json)
Hash identifier: /9DY+Ltho+PB7+QoIFjNBfe5AxE+6832bhbx2GH3drM=
Subject key identifier: C7:6D:C1:A5:30:66:7C:4A:E3:82:5F:57:9C:F7:0A:1A:EA:BC:D7:A3
Certificate issuer: /CN=69a28c2f84c75e8d0388694355152dd2b731f249
Certificate serial: 0185720342465E7EBA368D4E45B5FBD14255
Authority key identifier: 69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/x23BpTBmfErjgl9XnPcKGuq816M.roa
Signing time: Mon 02 Jan 2023 10:24:54 +0000
ROA not before: Mon 02 Jan 2023 10:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41783
IP address blocks: 217.26.16.0/20 maxlen: 22
2a00:7c00::/32 maxlen: 40
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:42:46:5e:7e:ba:36:8d:4e:45:b5:fb:d1:42:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a28c2f84c75e8d0388694355152dd2b731f249
Validity
Not Before: Jan 2 10:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c76dc1a530667c4ae3825f579cf70a1aeabcd7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fb:62:64:ff:44:4c:03:47:74:17:ff:04:c9:
38:9d:df:82:40:64:54:ed:e8:a5:8e:48:21:d2:f5:
e7:69:2b:8c:2e:45:92:af:a6:f1:ba:e5:71:b1:04:
c9:cf:6a:a1:f5:48:43:cd:b8:d7:53:6f:e7:58:2d:
57:76:2f:2e:f7:b0:ed:6f:6d:93:97:6c:e6:cf:2a:
b2:ee:62:87:04:db:93:ff:c0:f3:ab:a8:66:bf:92:
ce:f5:da:18:e1:ca:ed:b8:ca:12:0e:d9:ef:98:4d:
9a:c8:12:f9:bd:7c:60:aa:d7:d5:b6:5e:db:72:68:
43:12:ba:ba:52:b6:76:76:8b:e7:d1:af:a5:5e:b7:
d7:be:85:52:bd:ac:ec:60:eb:14:4c:80:e9:59:a9:
ce:5e:46:6a:3a:f4:16:15:a0:e5:d1:0f:2e:d8:8c:
62:60:15:eb:05:ca:bb:a7:fa:48:60:85:c6:0d:8d:
24:e6:64:93:b7:3b:66:7d:62:52:30:56:8a:42:e6:
13:b6:cc:0c:3e:7c:c3:0b:26:f3:73:b9:25:e7:cf:
6b:38:1a:01:2d:89:e4:f4:06:16:b3:b3:8d:26:83:
6b:e2:9a:01:cd:ea:41:21:d6:f5:fb:39:5e:f3:01:
42:48:b8:dc:46:61:1a:1e:6d:c5:f4:8e:ed:5b:9c:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6D:C1:A5:30:66:7C:4A:E3:82:5F:57:9C:F7:0A:1A:EA:BC:D7:A3
X509v3 Authority Key Identifier:
keyid:69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/x23BpTBmfErjgl9XnPcKGuq816M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.16.0/20
IPv6:
2a00:7c00::/32
Signature Algorithm: sha256WithRSAEncryption
69:7f:00:35:e9:08:cb:c8:ea:41:89:61:38:6f:c6:20:6d:a7:
4c:f1:3a:7e:fa:39:be:70:e7:ec:90:03:9e:74:98:5b:0c:8b:
77:c4:03:f4:06:d0:d3:f4:4a:50:29:01:69:e8:0e:99:d3:1b:
29:ac:c6:81:b6:97:84:37:a6:c7:71:d5:47:a0:a9:b9:ec:36:
22:73:35:1d:67:28:bc:d3:dc:1f:ba:1c:72:57:4f:d0:b9:fa:
eb:8c:f1:eb:63:7e:ee:6d:84:40:c5:58:a2:39:19:11:82:76:
44:fc:fd:be:fc:e4:46:fe:a0:02:92:5f:1a:2f:b1:75:88:ab:
8d:a7:72:73:d4:9b:76:75:d0:37:f8:2c:50:aa:4d:86:c9:46:
ab:e8:a4:50:f4:4c:7d:fd:18:21:88:ae:b1:a4:1f:4f:30:d4:
c7:11:bd:e9:68:9a:f7:92:e7:09:4e:37:cc:47:b9:05:58:c5:
4a:33:20:96:f2:0f:f2:14:0e:c3:73:71:dd:61:04:77:e0:d0:
e8:5d:25:e3:d5:fe:92:ec:3b:f8:5f:92:70:cf:38:e4:6f:44:
f5:df:d2:93:b6:2f:0c:bd:51:1a:44:32:a8:54:02:ce:88:a7:
9b:6f:33:a9:52:dc:92:e4:8f:1b:13:64:57:1e:d5:00:bf:9f:
c0:0d:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:03 2024 by rpki-client on console-fra.rpki-client.org