Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/SQiOIOjiDpi8dVRK_hFJOZPscKI.roa
File: SQiOIOjiDpi8dVRK_hFJOZPscKI.roa (raw, json)
Hash identifier: I+B5Sv1m6MQ9Qq8YypMiMjReQw6My6T5pYzuuz8bjrU=
Subject key identifier: 49:08:8E:20:E8:E2:0E:98:BC:75:54:4A:FE:11:49:39:93:EC:70:A2
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018571DE81EC4E5A0C5B5E6A52B84DA12C65
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/SQiOIOjiDpi8dVRK_hFJOZPscKI.roa
Signing time: Mon 02 Jan 2023 09:44:45 +0000
ROA not before: Mon 02 Jan 2023 09:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399029
IP address blocks: 193.107.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:81:ec:4e:5a:0c:5b:5e:6a:52:b8:4d:a1:2c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 09:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49088e20e8e20e98bc75544afe11493993ec70a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:c1:46:49:40:c9:fa:3d:2c:99:8f:b5:74:
24:3e:b3:4e:30:be:66:d1:78:44:f3:57:ab:ad:25:
65:64:f2:a8:7d:8e:ee:85:74:c5:ba:8b:f7:51:aa:
27:dd:84:4d:ab:36:40:e1:4b:27:eb:8f:dc:97:6a:
28:9f:ce:2f:1f:f1:0d:c3:78:db:d2:f6:c7:43:df:
54:69:d7:a7:6d:b5:f9:af:d0:e7:37:65:f0:1b:fa:
e6:89:ec:ee:a1:fe:76:68:bf:eb:b4:43:7e:b8:2c:
c0:66:b7:55:89:85:00:22:23:29:5b:e2:fb:43:65:
ff:d6:f1:f6:88:3c:be:5d:fc:63:f5:09:ed:e8:94:
58:68:ea:10:05:a0:38:8a:60:2d:ab:2e:a0:c8:02:
f9:5e:e0:8a:f7:dc:f9:23:10:f3:01:86:e3:73:bf:
b4:cc:5f:20:ff:c8:47:0a:c0:76:99:9c:1c:af:04:
28:73:34:41:bb:88:9f:50:eb:e5:b8:fc:30:5f:05:
8e:15:e4:ac:be:30:97:a0:39:5d:a8:f2:eb:78:fb:
9d:34:6d:61:ca:ad:28:e6:f3:04:1a:34:0c:00:c0:
43:a6:4e:06:a9:64:43:d6:c7:0b:be:0a:29:77:0e:
5b:db:85:8f:03:5d:94:9b:be:02:b8:83:f1:78:5d:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:08:8E:20:E8:E2:0E:98:BC:75:54:4A:FE:11:49:39:93:EC:70:A2
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/SQiOIOjiDpi8dVRK_hFJOZPscKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.217.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c0:81:73:d9:60:36:a1:03:f9:90:d6:04:14:d3:28:fa:1d:
08:c0:eb:ff:d0:0b:8a:57:7f:4a:26:97:24:66:d0:1c:72:79:
b3:27:92:b8:05:35:7d:55:bc:a5:cd:24:26:8a:a7:ad:d7:de:
df:3b:69:da:27:18:ae:43:4d:d7:44:b8:d7:c4:cf:61:f9:57:
a0:1e:46:1b:79:e4:ee:d2:51:ca:24:42:17:31:1b:bd:5c:7a:
aa:b6:fd:61:eb:71:0a:8c:9a:ca:d1:b0:80:4f:e6:a2:d9:93:
5a:ac:2b:78:c0:4e:2f:61:05:bf:30:d8:e6:1c:9d:81:34:86:
f7:ff:8c:7b:e3:fb:ae:07:24:ec:e0:48:f1:53:f4:63:76:b4:
5c:b6:c1:36:17:97:d1:3d:a2:4d:2c:86:b1:f5:ab:5e:c2:75:
a1:f4:b4:2a:9b:4d:8f:e3:69:40:58:87:75:c9:f5:b0:89:50:
eb:29:d7:b2:2d:0a:d2:a5:c8:fe:73:c3:c7:f0:4b:02:d0:9e:
7c:21:79:d5:5e:ce:3c:0e:dc:26:d6:af:0e:7b:5b:d2:1c:e3:
5e:be:38:6b:9f:22:2c:3c:b5:b7:7c:c8:68:61:5b:74:c5:86:
d2:d7:49:f4:b1:f3:3e:b1:dc:33:73:0d:4f:27:13:57:1b:e8:
5c:99:ff:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org