Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/R6NHD88Iip9-bNb6rD5IC2YUZsY.roa
File: R6NHD88Iip9-bNb6rD5IC2YUZsY.roa (raw, json)
Hash identifier: PSOQ/B/Qr6ZcYn9U5yDACGWHOiHo+6UWI7/qfNprajc=
Subject key identifier: 47:A3:47:0F:CF:08:8A:9F:7E:6C:D6:FA:AC:3E:48:0B:66:14:66:C6
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 018D3D1919E2A393EE20F2D0A5C996CAA299
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/R6NHD88Iip9-bNb6rD5IC2YUZsY.roa
Signing time: Wed 24 Jan 2024 20:11:11 +0000
ROA not before: Wed 24 Jan 2024 20:11:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3920
IP address blocks: 117.18.118.0/24 maxlen: 24
117.55.202.0/24 maxlen: 24
117.55.203.0/24 maxlen: 24
212.237.231.0/24 maxlen: 24
2a13:adc0::/48 maxlen: 48
2a13:adc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 28 Jan 2024 17:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3d:19:19:e2:a3:93:ee:20:f2:d0:a5:c9:96:ca:a2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Jan 24 20:11:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47a3470fcf088a9f7e6cd6faac3e480b661466c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:94:15:94:d8:38:b5:e3:6b:f5:a0:58:86:
d1:80:e9:51:20:c2:2a:5b:27:fc:2a:d3:a6:ee:9e:
8f:5d:6b:d6:50:0d:de:15:fc:56:dd:c8:b8:5a:9b:
58:5c:c8:67:45:d6:26:3c:d6:15:ad:09:40:13:c2:
65:f8:49:eb:59:9b:ef:a0:68:3e:27:b0:2d:0a:f5:
8e:b9:74:2b:46:f0:a3:ca:78:9d:09:5f:c5:1f:9e:
d5:af:29:57:0c:f4:83:5f:d5:82:be:b5:89:36:b1:
a1:3d:69:76:e7:a4:ab:f3:47:c8:88:27:35:de:78:
11:bb:5d:f0:d5:f1:94:d2:ea:c9:e9:fa:27:52:d6:
1c:96:cd:c7:38:a6:82:9e:57:99:a1:2d:e7:11:76:
b1:4d:57:2c:1f:a3:97:7d:01:8b:a3:98:0b:b7:ab:
f2:9d:a9:a9:7a:a9:e9:8e:0c:f9:00:14:56:17:66:
f8:15:15:12:16:f7:91:de:f3:ea:39:16:23:f1:1e:
7f:93:c4:d2:f8:96:5b:bf:4b:b8:23:ce:81:96:5b:
64:6f:45:4c:15:33:f7:ec:14:06:a6:2a:64:5e:74:
bb:9c:31:5a:a4:e1:2f:eb:bf:40:a1:24:3a:a6:ea:
29:3b:6e:41:0a:21:d7:22:97:70:3a:64:58:37:96:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A3:47:0F:CF:08:8A:9F:7E:6C:D6:FA:AC:3E:48:0B:66:14:66:C6
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/R6NHD88Iip9-bNb6rD5IC2YUZsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.18.118.0/24
117.55.202.0/23
212.237.231.0/24
IPv6:
2a13:adc0::/47
Signature Algorithm: sha256WithRSAEncryption
57:c0:8e:24:d3:5a:01:26:1e:6d:fb:c8:6c:20:19:29:2c:35:
71:f8:f8:f4:60:9f:a2:a2:8a:b7:9c:55:8a:c3:54:7b:b3:9e:
8a:00:36:c6:b4:c8:28:48:f6:22:98:9a:39:e5:fe:9e:66:0e:
15:de:db:75:24:9d:5e:d5:14:89:1c:8b:0b:6f:d3:a2:80:65:
56:f2:fd:1a:ec:6e:d8:38:bf:4e:59:b2:12:4c:b6:f8:24:22:
87:92:84:a4:28:bb:4b:f8:cd:3f:17:67:80:5b:cc:f6:83:36:
49:cb:84:55:ca:3b:07:d6:b5:24:59:cb:c9:dc:46:a2:6d:6f:
22:d5:1e:6f:3a:7a:9f:76:31:fc:cb:a3:72:dc:67:29:52:9e:
06:62:69:9c:d4:a4:57:e2:a6:8c:9e:76:e1:85:0d:b0:b6:14:
22:07:70:57:01:f3:3a:20:8e:b0:99:ba:54:c6:dd:c9:72:da:
a4:ca:e9:cc:56:3b:66:7e:35:a9:a6:30:fc:12:d7:fd:76:bb:
2e:2a:77:0c:74:a5:94:c1:fb:9c:ea:17:ab:25:6d:08:48:d1:
4b:d4:51:1d:c3:68:3e:dc:8b:bb:f0:01:c4:69:19:b5:ed:98:
86:23:9f:a9:54:1a:33:22:e5:d7:c3:9f:2b:09:1f:ec:b7:56:
56:9d:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:13 2024 by rpki-client on console-fra.rpki-client.org