Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iBWTYgogkFJTsQSUk1Ul5U2OadM.roa
File: iBWTYgogkFJTsQSUk1Ul5U2OadM.roa (raw, json)
Hash identifier: HYEwQsgvQjVbDISghOBYSwQcn7ijWJU1KdMC9BQXcYA=
Subject key identifier: 88:15:93:62:0A:20:90:52:53:B1:04:94:93:55:25:E5:4D:8E:69:D3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A22A25B0481A3B4361905EBE2C3BAFDBE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iBWTYgogkFJTsQSUk1Ul5U2OadM.roa
Signing time: Wed 23 Aug 2023 13:43:00 +0000
ROA not before: Wed 23 Aug 2023 13:43:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Sep 2023 14:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:a2:5b:04:81:a3:b4:36:19:05:eb:e2:c3:ba:fd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 23 13:43:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=881593620a20905253b10494935525e54d8e69d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:4c:15:2e:97:26:e1:4e:b2:05:a3:04:0d:
f9:fa:86:31:fe:81:65:e6:e2:da:ef:f6:3a:61:5d:
06:0f:80:16:8f:21:b6:2d:b2:7a:fb:32:0a:b1:d1:
89:65:5f:f4:ba:0d:7b:07:91:bc:eb:cd:5d:ba:9b:
4a:99:b4:2d:72:4f:45:06:9d:6d:35:c4:f7:3e:1e:
f0:87:32:ba:22:ec:a7:07:b7:46:cd:90:a2:46:15:
1c:5c:72:bf:15:8b:66:98:f9:ab:73:66:0f:af:8b:
7d:16:51:10:76:7f:96:e3:67:85:7a:8e:cd:8b:0b:
4a:f8:eb:e8:67:f7:31:d4:0a:57:db:48:99:e1:86:
2a:45:8b:de:8a:fd:d1:f6:b4:7d:46:20:06:14:27:
71:38:83:14:fb:17:a7:ca:f2:2a:30:ef:cf:7f:f4:
64:d7:8c:67:22:09:ea:32:dc:a1:71:6c:ec:65:cf:
2d:42:6b:1e:30:86:53:21:b7:c7:ad:21:cc:8f:49:
4b:23:bc:f3:da:b5:99:ec:da:91:a5:9b:6b:4f:b3:
74:f6:ca:8a:b2:c0:7c:99:de:3d:e0:3f:ef:71:bb:
37:27:96:dc:c5:fe:77:74:c2:db:90:33:82:79:63:
1f:1a:05:fd:4d:ec:10:78:0f:f2:7d:86:d8:57:a9:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:15:93:62:0A:20:90:52:53:B1:04:94:93:55:25:E5:4D:8E:69:D3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iBWTYgogkFJTsQSUk1Ul5U2OadM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
83:65:33:97:86:0f:41:8b:04:3d:7a:57:48:ec:92:4f:dd:6f:
d3:90:52:0f:77:09:84:f1:6a:97:8e:b4:10:44:8e:d4:b5:65:
f0:ec:d9:61:45:97:2c:7a:3b:e1:55:3a:60:d8:e1:0d:cb:5c:
b2:d4:6a:13:47:ba:62:7d:0c:33:46:e1:8c:3e:1e:f5:89:5b:
3c:08:2a:9e:e7:1a:2a:a8:1d:fa:07:b7:f3:e3:a3:47:48:ff:
f7:f3:06:a7:a4:22:4f:76:d2:8c:1a:2d:02:cd:52:20:4c:54:
4b:67:16:98:21:96:38:da:a6:aa:de:89:27:b3:ca:34:64:cb:
14:c4:fd:b9:2a:be:7c:0c:85:d1:1e:40:fc:65:5c:db:78:a3:
54:40:c0:0f:76:4c:83:63:03:08:7c:ff:f0:5a:be:42:f0:7e:
d9:a6:17:b5:dc:db:da:d2:6f:66:91:68:fd:1d:88:6c:23:f2:
6f:01:42:e5:5a:65:6a:01:2b:10:9f:64:85:73:b9:cf:66:83:
3d:dd:1a:2a:f9:5e:f7:59:b2:d3:c8:1e:00:96:3e:7a:7a:ab:
eb:11:a6:4e:82:36:19:fc:0f:c1:05:8b:d5:4a:b2:bc:b9:74:
9a:41:11:f4:e3:69:bc:78:56:e3:1c:09:c4:70:93:a2:ff:5b:
b1:a5:1e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org