Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/429wtlGccnnSJFZwWHV7tr_eLtU.roa
File: 429wtlGccnnSJFZwWHV7tr_eLtU.roa (raw, json)
Hash identifier: hsMZiwhwNsKMZ42uo9mLb47y/7lwHZHYERPieux8eT8=
Subject key identifier: E3:6F:70:B6:51:9C:72:79:D2:24:56:70:58:75:7B:B6:BF:DE:2E:D5
Certificate issuer: /CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Certificate serial: 01856BC11DEB245C8FB454A1AB1B2A866EBC
Authority key identifier: 55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/429wtlGccnnSJFZwWHV7tr_eLtU.roa
Signing time: Sun 01 Jan 2023 05:14:56 +0000
ROA not before: Sun 01 Jan 2023 05:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16210
IP address blocks: 217.18.96.0/19 maxlen: 20
217.18.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:1d:eb:24:5c:8f:b4:54:a1:ab:1b:2a:86:6e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Validity
Not Before: Jan 1 05:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e36f70b6519c7279d224567058757bb6bfde2ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:14:bd:6d:e9:b8:01:16:29:7f:fa:73:80:
e5:d2:ee:cb:9f:01:c2:5d:cb:b7:0a:c7:3b:ec:4e:
ad:de:29:c0:98:e6:bf:57:6d:60:40:b5:e3:69:17:
8f:6e:80:f7:4f:ea:85:e6:69:b4:37:42:cf:45:66:
75:e5:35:d4:46:07:36:ae:11:90:de:6b:de:b7:e4:
a5:46:da:34:98:76:62:c7:56:66:95:f4:48:72:07:
69:ab:f6:42:98:7f:1b:55:dd:51:45:8c:d8:ed:ce:
d9:5f:4d:82:53:d5:1e:c5:e2:d9:74:c3:cb:cc:5a:
34:74:fa:ea:05:b8:63:59:87:b5:64:d0:6f:2a:18:
6c:2f:19:a9:8c:fd:3e:81:b5:34:85:97:df:e8:b0:
67:3c:a0:62:8f:7b:86:34:c3:42:aa:3e:eb:10:cf:
41:f2:0b:1d:39:75:af:7e:af:91:24:6e:d5:db:02:
0a:6e:61:79:64:90:22:04:33:81:4c:bd:dd:99:73:
90:25:93:c9:1e:7c:d2:60:5c:54:78:4c:94:1b:ee:
f9:5b:24:45:ab:da:2a:2c:2c:b0:50:ce:97:42:2f:
ed:08:96:e0:86:8d:b4:30:21:6b:87:77:67:d0:d0:
5c:10:78:5a:a1:0c:0f:ad:51:4c:17:2e:b3:ba:d8:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6F:70:B6:51:9C:72:79:D2:24:56:70:58:75:7B:B6:BF:DE:2E:D5
X509v3 Authority Key Identifier:
keyid:55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/429wtlGccnnSJFZwWHV7tr_eLtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.96.0/19
Signature Algorithm: sha256WithRSAEncryption
38:ac:59:65:a8:2c:a1:b8:8d:94:b6:7b:8f:7b:13:d6:cb:17:
78:d4:14:64:b1:18:ab:70:49:b6:63:ea:df:74:1f:c7:81:95:
e8:84:cc:f7:c1:16:4a:c4:91:fc:21:bc:8e:b9:29:7a:99:73:
ad:be:ca:c9:63:f1:e1:4f:aa:ec:83:06:61:58:a7:2f:f1:63:
72:bd:0e:87:54:9f:d1:8d:bd:ec:f4:ab:a2:0f:78:4d:6d:90:
a5:2d:f0:22:04:ca:12:71:8f:41:e9:c2:a6:7c:bf:7a:75:d6:
fc:f3:15:97:79:95:d8:7e:5f:e1:9f:21:fa:3c:ba:7c:7f:79:
91:99:20:6b:54:c4:59:21:22:ad:40:80:46:d0:19:a7:97:2f:
b6:af:07:fd:d0:4b:a8:f6:6b:62:59:e9:6f:a6:a7:d4:2e:7e:
39:e6:23:62:e9:70:31:3c:bf:ab:bd:fe:8c:18:14:aa:fd:31:
ca:0d:eb:70:65:97:27:c3:0d:8b:c3:da:a1:b8:77:53:8c:34:
71:9e:40:83:cb:a6:f3:94:77:e3:bc:e5:c3:b7:7c:07:c0:de:
a8:a4:94:40:be:8e:40:00:6c:d6:ec:9f:e8:72:0b:bc:24:e3:
8f:22:e4:50:99:27:fc:68:4c:cf:a7:58:9c:75:f9:cf:22:dc:
54:76:65:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:37 2024 by rpki-client on console-fra.rpki-client.org