Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fi7S7A9t1-z3ivA2i15hAuFT9fA.roa
File: fi7S7A9t1-z3ivA2i15hAuFT9fA.roa (raw, json)
Hash identifier: LVQrYg4HvdjK6useYk84nX6OZhMBHVWbP9dddG2bJJE=
Subject key identifier: 7E:2E:D2:EC:0F:6D:D7:EC:F7:8A:F0:36:8B:5E:61:02:E1:53:F5:F0
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0185DE4317D40BD61CA886AA7242315D0AE5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fi7S7A9t1-z3ivA2i15hAuFT9fA.roa
Signing time: Mon 23 Jan 2023 10:53:37 +0000
ROA not before: Mon 23 Jan 2023 10:53:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Mar 2023 09:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:43:17:d4:0b:d6:1c:a8:86:aa:72:42:31:5d:0a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 23 10:53:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e2ed2ec0f6dd7ecf78af0368b5e6102e153f5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:69:ef:ba:1f:8e:9c:7b:44:3e:13:df:39:05:
cc:7a:25:a4:9c:72:59:ca:76:7e:ed:7e:e5:ef:1f:
fa:ca:05:f9:1b:49:f8:98:31:5c:92:3e:24:f5:de:
49:ca:b5:32:77:35:4f:55:5a:c7:1a:c0:3f:a3:58:
8f:ff:8d:ca:f1:74:cd:c9:4c:c5:16:d2:12:1e:6f:
ee:6d:dc:97:d2:9d:d3:3d:5a:9f:ba:aa:11:4b:34:
20:b2:a2:5c:34:6d:ba:72:ac:a5:88:a6:4c:fa:f0:
fc:6b:2d:48:01:bc:35:15:e3:3f:01:c8:26:24:95:
02:93:43:e7:14:1b:9f:a8:cf:06:bd:6c:c6:36:cf:
41:31:37:54:7b:95:67:10:1e:55:ac:7c:d4:d7:1d:
c9:b1:82:6a:73:f6:dc:bf:c5:fe:f9:05:af:0e:4d:
cd:38:52:89:6a:88:48:0e:5d:c6:b7:65:4f:6e:ab:
67:40:d8:a1:92:a0:ea:9a:b3:43:56:ef:4d:b0:b4:
47:a5:15:02:2c:da:ae:c6:62:7e:9f:22:4c:ed:22:
54:ea:7d:47:d3:f5:ef:69:f8:43:3e:a0:b0:df:5f:
5f:29:8d:cc:45:34:f0:97:16:6a:76:bf:d3:57:a0:
a0:70:76:a4:00:2d:d6:2f:19:d8:23:8f:d4:ea:24:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2E:D2:EC:0F:6D:D7:EC:F7:8A:F0:36:8B:5E:61:02:E1:53:F5:F0
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fi7S7A9t1-z3ivA2i15hAuFT9fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b2:ad:53:7a:13:52:c7:a3:b9:94:0c:f9:80:b2:b4:3a:82:
38:49:d3:00:2a:7b:cd:90:33:8f:e7:6a:fe:39:39:f6:93:4d:
86:73:ef:fc:04:82:f7:4d:3c:0b:79:29:e6:f8:0b:b9:bf:41:
d7:da:72:81:42:b1:83:be:4f:e8:52:48:e9:d4:de:bc:14:f7:
e3:41:50:02:70:8c:06:40:e9:fb:75:fc:f3:da:4a:a5:51:9c:
a8:c1:78:d6:f9:97:7b:2d:52:61:a6:d3:81:d1:ab:7a:b1:ad:
9e:42:9f:37:76:2c:46:68:af:f3:cc:09:58:e6:51:88:9c:0d:
d5:ae:fc:1e:1a:70:31:b8:59:ad:68:ff:95:3d:54:e6:c8:08:
3b:77:ca:46:43:9a:e5:b7:91:b3:93:c7:e9:85:ec:b3:b4:62:
09:b8:fe:39:85:b2:f2:2b:05:63:88:98:74:49:1d:13:29:ac:
2f:12:61:54:d8:e9:b3:a9:39:ae:cf:3c:42:cc:2d:5c:a2:e3:
5f:25:48:cd:c4:8b:c9:aa:a1:08:d1:74:4f:9e:5d:c2:71:73:
43:d5:42:60:c0:c9:9d:83:73:ac:93:06:7b:04:3d:7b:15:7b:
ae:5f:36:26:3b:8e:04:96:d3:60:1a:26:b3:56:86:40:1f:e6:
80:dd:ad:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org