Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/R9XLUgvCdNqAhJQ9Wzjw1eQLXzM.roa
File: R9XLUgvCdNqAhJQ9Wzjw1eQLXzM.roa (raw, json)
Hash identifier: NYoKLTXpV29zxL+Mg0u+BraHjLyjVRzL4NS+iynaX+M=
Subject key identifier: 47:D5:CB:52:0B:C2:74:DA:80:84:94:3D:5B:38:F0:D5:E4:0B:5F:33
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 0185707083D2B4BAE89D60C6A091210B5BAE
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/R9XLUgvCdNqAhJQ9Wzjw1eQLXzM.roa
Signing time: Mon 02 Jan 2023 03:04:59 +0000
ROA not before: Mon 02 Jan 2023 03:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17558
IP address blocks: 57.197.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:83:d2:b4:ba:e8:9d:60:c6:a0:91:21:0b:5b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 2 03:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47d5cb520bc274da8084943d5b38f0d5e40b5f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:c6:c1:98:9e:36:a6:cc:ba:a0:2f:8d:d7:
f8:d5:9f:5b:36:15:cc:ba:76:ae:61:e2:99:40:02:
7c:f9:9f:20:6d:f6:19:18:07:be:6d:f9:d7:74:6f:
20:40:4e:10:aa:44:19:d2:f3:98:bc:b3:3a:11:68:
9d:bf:71:c9:11:3b:bc:90:6f:8e:cf:b8:91:b2:c6:
8f:cd:df:a7:8b:1f:f4:c7:9c:cf:ad:28:6c:09:37:
7a:2f:89:19:04:20:63:e2:8d:d4:d6:c9:f8:e6:d3:
1a:60:5e:65:0b:70:51:e8:2a:76:00:ba:bf:04:86:
a6:e6:e1:4f:30:a0:99:1a:20:f6:7a:b7:fb:83:a6:
97:92:a8:eb:22:c2:6c:c4:2b:b3:00:e8:0c:a0:7e:
98:cb:db:6d:c0:9e:74:47:5e:02:3d:2b:e5:ee:40:
e6:c1:dc:04:dd:47:ad:83:dc:ab:f4:3d:0c:02:9f:
8f:23:a6:35:f7:ad:53:5c:6f:37:3e:ce:b4:af:84:
88:68:2a:b5:41:0d:13:47:cf:b9:61:18:38:33:31:
dd:80:de:3b:c2:c7:3a:9b:33:e6:43:7b:85:fd:24:
02:c4:db:2c:4d:c8:16:88:16:77:2c:37:a6:62:20:
0f:2b:96:34:cc:37:8e:a1:6d:be:27:bc:83:41:37:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D5:CB:52:0B:C2:74:DA:80:84:94:3D:5B:38:F0:D5:E4:0B:5F:33
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/R9XLUgvCdNqAhJQ9Wzjw1eQLXzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.197.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:19:0b:b9:2b:f8:c9:73:90:05:a6:64:70:a3:3d:cf:11:d2:
1a:91:02:ad:55:da:32:e6:02:ee:10:71:62:ad:0a:50:05:a3:
b3:be:6a:7f:77:a3:9d:bd:10:7c:dc:54:6f:49:8b:3a:bf:83:
98:4c:1f:36:b9:e8:ee:98:a0:b2:a8:1e:11:dd:2d:7b:87:9d:
f4:74:cf:94:b3:0a:e2:eb:e8:27:ab:9a:48:6a:c2:b9:e3:7d:
cc:93:94:78:02:56:97:e2:f8:4d:1f:49:15:a4:84:ca:2b:47:
d1:27:0d:12:7a:a9:88:6e:2a:a1:21:d7:17:87:0d:fb:71:ea:
68:b9:6c:da:e4:49:e4:a6:a0:d7:25:16:2f:db:c4:23:c3:82:
93:dc:90:e0:9c:da:29:84:0e:db:0d:86:3f:f8:00:61:13:9d:
6f:93:f8:3b:9c:10:b4:ae:60:b3:6d:16:96:b8:eb:68:76:a9:
fc:3f:d9:3f:c0:a1:89:a8:9a:e9:6d:dd:65:ba:e1:2d:a9:30:
88:bd:44:a5:07:dc:c3:87:80:ce:da:3e:10:07:18:5e:d5:7a:
4b:03:ec:da:17:17:74:ef:1b:98:34:8e:7a:8d:c5:66:86:ff:
10:d6:5a:4c:3f:e9:3f:bf:a9:32:f6:d9:cf:a4:14:d1:a1:ce:
96:84:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:35 2024 by rpki-client on console-ams.rpki-client.org