Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/74siMaYfwiU6ZhOYGltE4DvwXeQ.roa
File: 74siMaYfwiU6ZhOYGltE4DvwXeQ.roa (raw, json)
Hash identifier: LsLZeqX85VeXObI3+wU9GmoLmmlAKKVgqr/F1ZTcHF8=
Subject key identifier: EF:8B:22:31:A6:1F:C2:25:3A:66:13:98:1A:5B:44:E0:3B:F0:5D:E4
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 01856CAEF9A532DAD936551F6B2548C3428F
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/74siMaYfwiU6ZhOYGltE4DvwXeQ.roa
Signing time: Sun 01 Jan 2023 09:34:44 +0000
ROA not before: Sun 01 Jan 2023 09:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210876
IP address blocks: 217.67.161.0/24 maxlen: 24
217.67.162.0/23 maxlen: 24
217.67.166.0/23 maxlen: 23
217.67.168.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ae:f9:a5:32:da:d9:36:55:1f:6b:25:48:c3:42:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Jan 1 09:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef8b2231a61fc2253a6613981a5b44e03bf05de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:b9:54:fa:4f:70:53:fd:c4:98:81:76:6b:
e0:bd:7c:a1:a3:0a:26:78:ee:96:dd:8b:b7:ea:de:
2c:c4:50:c8:7d:f1:f7:d7:a3:ac:81:8c:da:80:d9:
34:81:61:98:6c:b9:d8:74:c6:a4:0c:d5:49:1a:86:
36:14:db:63:a0:a1:3f:0c:39:74:ba:51:f7:fe:83:
de:67:67:3d:e6:89:40:bb:b0:0d:f2:bc:1a:ae:fe:
62:70:eb:fc:1f:e1:4f:77:18:9a:c8:0e:44:59:09:
12:eb:c4:83:df:7c:e4:50:77:9d:ee:79:ea:5b:67:
f7:15:bd:05:61:79:5d:41:db:cb:75:ba:0f:8f:df:
bd:7f:19:b8:8e:c1:dc:7b:22:fc:83:05:50:5a:69:
f7:bd:b4:64:32:1a:d2:b7:b7:b7:34:53:9f:82:16:
29:b5:64:1e:a8:c9:e8:19:f9:ee:47:07:bd:ad:df:
bb:b4:a1:1a:1f:f0:d0:25:b7:9d:c4:36:05:94:cb:
d0:c5:a4:8b:47:c2:7d:11:1e:00:1a:c9:ec:a1:c8:
3a:d0:57:2f:85:d9:05:96:e4:f5:92:77:b3:21:a4:
7a:af:aa:b3:2f:f6:93:78:54:5d:a8:65:c2:3f:e4:
7f:ef:aa:8c:39:56:82:32:23:77:ae:28:fc:25:38:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8B:22:31:A6:1F:C2:25:3A:66:13:98:1A:5B:44:E0:3B:F0:5D:E4
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/74siMaYfwiU6ZhOYGltE4DvwXeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.67.161.0-217.67.163.255
217.67.166.0-217.67.171.255
Signature Algorithm: sha256WithRSAEncryption
48:6f:49:e7:8e:b5:76:c7:a1:ff:94:c0:3a:5d:22:a0:11:63:
29:27:71:6e:ec:af:ae:c5:8d:4e:c6:e2:af:ba:0e:a8:6f:5b:
4d:e1:88:12:e1:31:66:21:47:1e:f4:8e:97:72:e4:b4:20:57:
63:a9:8b:85:5f:4f:c6:a9:76:05:33:f9:a1:d2:49:d2:46:f2:
46:a9:80:0c:8c:92:80:b3:96:ac:ed:5d:4a:61:98:dd:f7:60:
c8:01:d1:2c:8c:f2:e3:f9:0c:91:a4:4c:82:d6:cc:3c:8f:92:
0b:e1:c9:de:7a:8a:d1:22:f4:85:f8:c6:e9:98:ca:84:14:72:
0d:a8:34:e8:ea:5a:c7:1d:5e:1d:b2:bf:64:23:81:47:56:7e:
c5:14:72:ce:d9:2f:7f:27:cd:26:f3:cf:1d:5c:8d:50:46:c0:
df:8b:0e:6a:17:20:c9:86:56:23:0d:db:4b:ec:f8:d8:09:23:
7a:35:84:cc:2e:5f:fb:dc:51:ce:d1:6b:13:e1:7b:c1:45:83:
00:2e:57:f0:40:24:33:ad:8f:67:be:31:7e:28:be:65:c6:a2:
47:52:90:0b:ff:ea:07:8e:85:bd:59:28:bd:f1:f1:ca:fd:97:
f2:1c:68:e0:3a:d2:0d:64:f5:98:d6:50:e3:f0:dc:98:a1:37:
d2:e4:58:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:05 2024 by rpki-client on console-fra.rpki-client.org