Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/e-qTfYX6CQCNq7G1H6OfulXBmfc.roa
File: e-qTfYX6CQCNq7G1H6OfulXBmfc.roa (raw, json)
Hash identifier: GnXaDGv2Bw6ON7HEMgZ5cYYYJCcVNcvE1O2Yq/26l7I=
Subject key identifier: 7B:EA:93:7D:85:FA:09:00:8D:AB:B1:B5:1F:A3:9F:BA:55:C1:99:F7
Certificate issuer: /CN=702c39f18682077f072b62116fd4f1690874af96
Certificate serial: 0186C685157CDD39F6A21916766528C93E2E
Authority key identifier: 70:2C:39:F1:86:82:07:7F:07:2B:62:11:6F:D4:F1:69:08:74:AF:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/e-qTfYX6CQCNq7G1H6OfulXBmfc.roa
Signing time: Thu 09 Mar 2023 13:17:35 +0000
ROA not before: Thu 09 Mar 2023 13:17:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35133
IP address blocks: 217.18.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:85:15:7c:dd:39:f6:a2:19:16:76:65:28:c9:3e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702c39f18682077f072b62116fd4f1690874af96
Validity
Not Before: Mar 9 13:17:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bea937d85fa09008dabb1b51fa39fba55c199f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:a5:d0:51:38:cb:f5:8e:11:16:66:a2:3e:
05:70:58:3a:57:3e:fb:f3:5d:23:2a:ff:01:d0:0b:
6e:60:30:5b:82:fb:b0:87:14:2a:82:a7:9b:8a:3b:
dd:f1:79:dc:d7:2e:e0:3d:5b:13:8f:3e:20:c2:b1:
fc:10:ae:98:94:a8:0d:6a:f3:1f:2a:06:58:ba:ca:
b4:5e:3e:64:cd:5a:b6:9d:3a:c8:41:82:5c:f4:f0:
6b:17:2c:60:a6:e6:dc:ac:0c:2c:68:c7:22:51:00:
4f:6b:8d:13:85:a5:b2:5a:2d:86:c7:0a:12:75:36:
ce:ea:5e:35:36:be:4d:59:30:8c:6e:61:7c:db:03:
0f:4d:88:d4:39:af:79:98:ed:e6:ec:73:c5:3a:e5:
e6:4a:63:b9:09:2b:7b:3c:58:15:bc:96:22:e1:86:
f4:99:d4:8d:73:c7:40:88:1c:33:f5:d9:e3:44:9d:
3b:51:15:0a:58:92:37:2d:06:74:94:90:ce:da:1b:
d4:c7:b7:bc:95:79:65:02:18:ec:1c:e0:8e:82:1b:
04:e1:91:21:bb:74:ee:7b:ae:fc:44:0a:d8:91:af:
e7:8f:89:63:24:d2:8c:d9:df:33:fc:2a:47:fd:b8:
1f:e3:54:5a:e5:51:78:c8:08:00:b7:4d:9b:04:8f:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EA:93:7D:85:FA:09:00:8D:AB:B1:B5:1F:A3:9F:BA:55:C1:99:F7
X509v3 Authority Key Identifier:
keyid:70:2C:39:F1:86:82:07:7F:07:2B:62:11:6F:D4:F1:69:08:74:AF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/e-qTfYX6CQCNq7G1H6OfulXBmfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.95.0/24
Signature Algorithm: sha256WithRSAEncryption
39:78:cf:79:4d:70:2c:b6:95:49:04:ff:ce:cd:55:19:f7:5f:
fa:4f:ea:f0:4a:8d:8d:48:6c:91:a9:fa:c3:2e:18:d6:31:73:
66:e5:bd:b2:89:8c:f9:3b:34:7c:40:da:a6:4b:e5:d2:c9:26:
b6:b4:91:af:68:06:2e:23:93:0a:ca:1b:7a:fe:3c:29:5b:08:
78:5a:55:64:c8:ff:23:2d:7d:93:d9:9d:8c:7c:f0:9c:14:92:
97:38:58:6e:dd:92:77:68:72:54:4a:e3:37:dd:a6:3a:5b:7e:
29:ad:41:de:54:1a:3c:2f:5a:bc:76:92:2a:2f:fb:8c:f7:35:
d1:99:29:75:74:76:8c:48:fa:ec:34:fa:9c:6c:ab:56:96:c0:
9b:98:bc:eb:b4:06:3b:e5:b8:de:7a:bc:5b:2b:d3:08:43:55:
e1:e1:08:a9:bf:eb:04:3c:53:1b:d8:32:54:5b:21:0b:34:2c:
7a:84:25:ea:f4:fe:c0:28:b2:4f:3a:0d:1b:31:f9:b5:6f:0c:
c5:34:d2:b4:41:fe:26:39:c1:e9:1c:fe:33:85:77:dd:47:5a:
fb:1e:04:9c:c5:4e:ff:45:06:6d:0a:40:8a:d1:e4:f1:bb:97:
36:fb:01:ef:6d:79:c9:a6:58:4e:cf:cd:fc:b3:5d:15:e3:9c:
50:07:ec:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:21 2024 by rpki-client on console-fra.rpki-client.org