Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/i96bM4bFgI16Nw7g22VcQWQYNpo.roa
File: i96bM4bFgI16Nw7g22VcQWQYNpo.roa (raw, json)
Hash identifier: X+JeIQclVR/d6/4Q9Ir+T9fo8LWidOZvYgpsNc8YNhc=
Subject key identifier: 8B:DE:9B:33:86:C5:80:8D:7A:37:0E:E0:DB:65:5C:41:64:18:36:9A
Certificate issuer: /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial: 01856D01C40C6C544D1B7847EADB601570DF
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/i96bM4bFgI16Nw7g22VcQWQYNpo.roa
Signing time: Sun 01 Jan 2023 11:05:10 +0000
ROA not before: Sun 01 Jan 2023 11:05:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24951
IP address blocks: 217.196.176.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:c4:0c:6c:54:4d:1b:78:47:ea:db:60:15:70:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Validity
Not Before: Jan 1 11:05:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bde9b3386c5808d7a370ee0db655c416418369a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:b9:2a:f4:88:aa:4b:ce:52:2f:9f:c2:e1:
86:ab:c2:3d:54:e7:60:24:e7:33:c6:aa:fc:af:6a:
a8:10:b5:48:2c:df:b7:2d:81:b5:68:f3:6a:17:90:
a7:d2:42:d4:51:f1:86:e0:b3:1a:96:8e:32:7f:4c:
93:f6:06:0e:72:63:70:31:16:ee:4a:c5:db:97:0c:
18:c3:3a:87:e6:a7:5c:aa:d3:90:9b:26:1f:a2:e9:
93:c8:67:8a:eb:c0:6c:dc:9d:6d:84:54:18:74:b5:
ec:d5:18:69:3f:6a:23:7a:75:91:ab:78:52:da:00:
08:e5:f0:da:f9:90:cc:58:55:36:60:81:b7:e2:36:
06:9a:79:4e:bb:d9:98:93:f2:72:db:bf:af:9a:56:
91:4f:61:b9:f4:2c:ff:58:4c:e8:95:03:04:90:f1:
e0:0a:05:e7:f1:d5:18:e5:43:bd:09:37:4a:aa:9d:
1d:21:f4:61:17:d5:36:3a:a1:e3:21:b3:a5:d0:ce:
4e:8d:f2:0a:65:ac:fc:b3:92:2c:f6:a9:03:a1:2b:
b6:06:77:de:62:5d:d6:5f:e3:7e:2f:f4:bf:92:95:
32:31:18:64:02:ec:96:09:b9:73:da:17:a2:8e:96:
b7:8e:71:03:61:6d:b3:a0:78:e3:28:62:98:f2:f9:
b0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DE:9B:33:86:C5:80:8D:7A:37:0E:E0:DB:65:5C:41:64:18:36:9A
X509v3 Authority Key Identifier:
keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/i96bM4bFgI16Nw7g22VcQWQYNpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.176.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:3d:dd:48:65:07:c5:58:90:04:81:44:60:91:c6:06:89:4c:
c9:7a:58:3c:10:74:48:d0:e1:89:60:03:1c:f8:90:24:b9:44:
31:f0:78:a6:fa:a2:97:e3:ea:1e:a4:34:76:50:66:36:e4:80:
75:29:a6:62:54:74:a8:9c:bb:13:c0:e3:ad:ba:b9:30:bc:2b:
38:2a:10:a1:93:58:ab:1c:35:6e:6f:0a:f4:7b:d4:7a:ef:97:
e4:64:c6:81:c2:da:4a:2c:a4:fd:d4:ea:e6:3f:61:61:fb:f0:
57:c2:7d:4f:70:36:6c:ef:80:76:78:e4:82:32:24:ed:28:06:
c5:01:fd:98:13:19:d0:3f:3f:aa:ae:34:12:3a:b3:aa:af:00:
ef:55:d1:66:0f:b1:c8:3a:83:f9:06:93:49:98:91:cd:f2:cb:
2f:43:0f:9f:11:47:24:42:07:57:08:81:ae:4e:60:04:b8:27:
9c:a6:02:47:75:73:5f:71:f4:a7:6b:c9:ec:14:e1:35:8a:5d:
58:5b:0c:b0:74:06:a7:05:da:7d:43:d5:59:21:13:9f:54:ae:
1e:04:93:e5:fb:e7:2d:59:77:0c:4a:47:e7:38:ab:01:33:6e:
1e:ac:dd:6c:76:45:33:94:93:dd:60:54:58:fe:fd:49:b2:fb:
6e:d1:6c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:44 2024 by rpki-client on console-ams.rpki-client.org