Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/_I4R6JIDit6isrWAeNVHbb9UiPc.roa
File: _I4R6JIDit6isrWAeNVHbb9UiPc.roa (raw, json)
Hash identifier: HO0DD+kkyFbklaK4AsVeSTusYJ0p9Ut2wkJL0e3vMXg=
Subject key identifier: FC:8E:11:E8:92:03:8A:DE:A2:B2:B5:80:78:D5:47:6D:BF:54:88:F7
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB84B035AED3094F87EBDB77A722F34
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/_I4R6JIDit6isrWAeNVHbb9UiPc.roa
Signing time: Sun 01 Jan 2023 09:44:55 +0000
ROA not before: Sun 01 Jan 2023 09:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34000
IP address blocks: 217.108.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Mar 2023 06:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:4b:03:5a:ed:30:94:f8:7e:bd:b7:7a:72:2f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc8e11e892038adea2b2b58078d5476dbf5488f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c4:6d:5a:2c:cb:1b:5a:c4:24:75:b8:e9:7f:
aa:97:00:93:94:21:67:aa:b2:f2:23:2d:25:cf:cf:
86:91:02:11:84:93:bc:40:e4:96:b3:eb:fa:68:1b:
e8:9b:0c:40:67:0c:8c:d5:92:42:8b:15:33:59:30:
c6:5a:11:a9:5b:47:14:f9:31:b8:48:bf:9f:08:f9:
5e:dd:2e:0e:2d:94:cc:67:b3:80:09:23:05:79:d3:
b7:65:ad:52:3a:af:a9:c8:48:99:9b:f9:af:5e:0d:
58:0a:d6:6e:e9:89:1c:92:f1:45:ba:9e:31:a9:34:
bd:e6:71:00:a3:c3:e3:91:87:f7:a2:39:c4:8a:f3:
83:56:56:5d:7e:62:e0:8e:64:71:69:36:88:fa:36:
94:b3:be:05:9e:f2:82:77:1c:17:c6:94:c1:fa:11:
59:30:dd:64:14:20:85:fa:2c:71:2b:93:ab:cc:19:
97:41:71:64:ab:0a:0b:fc:9f:fc:5c:f3:81:92:30:
5f:ea:05:52:73:f1:5d:e8:b9:a5:43:ec:f5:ec:7c:
5e:9b:d7:0e:64:1d:1c:2c:60:58:30:ef:32:44:f7:
e9:80:77:12:eb:a7:8f:53:11:86:47:5d:19:8f:6f:
3a:9d:26:db:5c:79:12:78:a0:6c:f7:aa:76:ee:43:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8E:11:E8:92:03:8A:DE:A2:B2:B5:80:78:D5:47:6D:BF:54:88:F7
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/_I4R6JIDit6isrWAeNVHbb9UiPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.108.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:df:29:a9:1e:88:e7:31:0b:26:31:6e:85:c6:6e:5e:78:0d:
3d:92:d2:b6:c4:1c:d9:7a:21:16:e1:44:c9:41:c5:28:11:07:
6c:f5:fa:ad:44:23:0d:91:ca:f8:6b:0b:78:b1:b2:39:a9:b1:
bb:17:22:14:2d:10:6e:b0:dd:c2:b6:98:23:bb:4a:5b:ea:03:
a0:f7:49:41:25:50:8d:fb:59:c9:5b:04:be:b9:eb:77:26:72:
bc:71:b8:7c:3c:81:5c:cc:0d:0b:b6:66:28:38:06:0e:1b:0e:
ac:37:22:7a:bf:dc:24:76:0f:af:40:62:80:b3:5e:9e:28:f7:
56:a9:4d:51:d4:61:a8:9a:f5:fa:3c:f9:8e:b8:77:a9:9a:df:
fa:46:1e:68:b2:37:25:a1:96:94:ed:cb:68:e3:bc:45:88:9b:
de:ac:79:56:19:9e:47:ed:1e:00:f2:76:67:e0:16:31:ef:d9:
af:f8:7e:39:da:06:6d:bb:5a:7f:1a:8e:5e:9e:12:23:84:2b:
55:65:59:1b:c0:ce:54:b0:b0:10:bb:52:75:a6:a5:93:16:53:
99:30:8d:79:39:13:f1:bc:91:60:01:c3:77:e2:65:b7:27:16:
f9:a0:4a:4c:a8:a9:20:75:23:cd:31:be:fb:f3:e1:e2:35:cb:
61:0d:ef:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org