Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ebvV-QYN41QpJsT1JpcCi30-3dw.roa
File: ebvV-QYN41QpJsT1JpcCi30-3dw.roa (raw, json)
Hash identifier: Hx1Op/MUMd9j6JjRy06nazzbsXZFRyMjvpcbb2plnXI=
Subject key identifier: 79:BB:D5:F9:06:0D:E3:54:29:26:C4:F5:26:97:02:8B:7D:3E:DD:DC
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018E9D578F6EF5AA255C503CCAA438E00378
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ebvV-QYN41QpJsT1JpcCi30-3dw.roa
Signing time: Tue 02 Apr 2024 05:45:45 +0000
ROA not before: Tue 02 Apr 2024 05:45:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 217.60.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 05:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9d:57:8f:6e:f5:aa:25:5c:50:3c:ca:a4:38:e0:03:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Apr 2 05:45:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79bbd5f9060de3542926c4f52697028b7d3edddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:bf:fb:fc:37:c1:53:e9:fe:79:41:87:17:
63:a5:21:dc:39:9b:1c:39:46:2f:74:1a:be:c3:33:
6f:3f:c0:de:33:b5:d5:f2:74:40:d8:0a:91:dd:1e:
aa:fa:f6:f2:35:e0:47:37:d8:96:7b:46:44:fc:97:
ed:ae:00:ca:9f:11:b9:34:c0:cb:58:db:31:b6:0e:
05:83:2f:6d:f2:a4:b2:53:aa:ef:a4:ff:aa:1f:09:
41:42:60:a2:80:66:05:8f:3a:73:02:40:76:c9:f3:
89:06:7e:37:3d:55:22:49:dd:54:04:1f:d5:f7:39:
52:63:4b:ca:2b:05:08:32:56:a6:c8:59:a5:f6:e6:
ff:e7:52:9a:1a:04:00:3c:39:57:1f:25:19:d2:ac:
67:d1:f4:e9:49:0f:f4:be:7d:d4:8e:14:c6:d7:ff:
57:2a:d8:6a:09:37:1f:e7:8b:2d:0d:ba:47:7c:cb:
ea:8d:34:0b:e5:54:09:56:01:61:6c:82:f6:ad:86:
c6:32:93:1b:b0:a5:34:52:eb:b1:ae:b2:cb:62:d0:
a2:84:cc:05:39:4a:00:0c:4c:6c:22:1b:6d:ae:0b:
da:ca:93:99:15:cc:83:c1:4d:2a:34:00:b3:91:28:
93:c9:a1:b7:aa:53:fe:be:55:cc:b9:0c:3a:ba:7e:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BB:D5:F9:06:0D:E3:54:29:26:C4:F5:26:97:02:8B:7D:3E:DD:DC
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ebvV-QYN41QpJsT1JpcCi30-3dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.245.0/24
Signature Algorithm: sha256WithRSAEncryption
75:14:34:9f:a1:3c:bb:d4:4f:bb:b8:44:2a:bd:eb:31:be:b0:
f4:f4:12:22:4b:1b:c9:b8:50:26:3c:a2:ee:e7:a0:ba:30:29:
36:27:a9:fb:68:cb:b7:36:4a:cd:69:dd:74:26:fb:73:59:6b:
9f:4c:9f:6d:0c:dc:57:ef:3d:d8:8b:c4:4a:09:ae:63:f4:00:
d0:08:7d:f3:ef:d1:4a:d1:82:a3:55:0d:aa:ed:0d:11:f0:22:
a7:cc:a1:ee:c7:6f:07:04:e9:85:f1:e9:af:3d:69:ae:2f:23:
c0:29:eb:91:ee:9b:a8:d5:b6:64:f3:92:f6:24:90:29:26:cb:
ab:56:ac:75:f6:39:c0:16:2f:f0:38:31:b1:f8:0f:7d:3d:db:
72:0c:68:05:21:10:b4:64:e8:59:20:c9:e0:4d:4b:95:37:a9:
de:b7:bc:c3:d9:67:8d:49:29:d3:03:b3:bc:ac:45:d8:d4:42:
40:ca:6b:63:b3:5f:a1:84:84:49:34:87:21:cd:d2:e0:4c:f7:
2b:f8:2a:c8:8f:87:83:40:dd:31:28:20:0b:16:c7:44:20:56:
3b:86:80:a3:25:11:12:1d:d3:80:00:60:44:5c:6c:cc:25:be:
91:5c:96:f0:74:89:d8:9a:98:37:7c:fc:21:6b:fe:a4:ae:e2:
04:4e:a3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 09:01:07 2024 by rpki-client on console-ams.rpki-client.org