Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/w3fwmgKSYrwhroDwHOvFd22dJKg.roa
File: w3fwmgKSYrwhroDwHOvFd22dJKg.roa (raw, json)
Hash identifier: aEg5cfw5LH+KwHO5uiWBr8QGfaPFCygikStWzs5Lrew=
Subject key identifier: C3:77:F0:9A:02:92:62:BC:21:AE:80:F0:1C:EB:C5:77:6D:9D:24:A8
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 018C196CAD1B38170157C2D736EAF36EC819
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/w3fwmgKSYrwhroDwHOvFd22dJKg.roa
Signing time: Wed 29 Nov 2023 04:53:21 +0000
ROA not before: Wed 29 Nov 2023 04:53:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197787
IP address blocks: 217.114.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:6c:ad:1b:38:17:01:57:c2:d7:36:ea:f3:6e:c8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Nov 29 04:53:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c377f09a029262bc21ae80f01cebc5776d9d24a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:8a:c0:ce:0f:fb:27:b3:da:24:05:dd:54:
5a:35:ce:8e:31:54:c7:57:f7:58:ed:2a:ec:14:44:
ce:79:5d:50:4a:ca:5d:ec:66:aa:19:44:07:0a:1d:
f7:bf:ca:a3:46:e2:8e:88:8d:59:d9:eb:bd:d8:84:
cc:eb:ef:b1:bf:5d:2a:78:8d:1b:6a:fc:3d:4b:61:
8e:39:f5:14:ce:6c:36:8c:55:9a:81:e3:eb:24:3a:
46:3b:a1:59:12:91:60:9c:f2:58:81:08:52:66:91:
8b:22:52:20:49:db:8e:ff:8e:69:52:e4:28:79:cb:
d6:64:61:c8:1b:74:8c:21:5d:3e:6d:69:6b:38:0b:
c6:dd:ca:43:ac:55:5e:5b:de:06:73:25:f7:b7:97:
e0:af:a3:95:d8:29:bf:6f:ca:11:95:d0:12:6e:a3:
4e:2f:75:d7:16:62:4f:8b:2e:ef:58:cc:1b:31:a3:
77:00:52:f8:ef:ff:de:09:3e:bc:d8:55:1f:b8:04:
f1:e1:ce:ff:3e:e6:a6:24:da:91:c2:9c:a5:1e:a2:
a8:79:d8:40:c9:c7:07:66:bb:42:81:93:84:8a:f9:
16:e4:ae:a1:4d:7c:df:26:d0:27:dd:5d:a8:73:f6:
00:a6:aa:6c:74:3b:dc:02:a7:33:d9:3d:8a:45:4b:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:77:F0:9A:02:92:62:BC:21:AE:80:F0:1C:EB:C5:77:6D:9D:24:A8
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/w3fwmgKSYrwhroDwHOvFd22dJKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.46.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:91:78:f8:7a:c6:92:87:ff:dc:b1:30:aa:80:06:46:f1:52:
1c:8e:ea:f9:53:27:9c:54:b7:71:14:4b:64:09:39:12:ba:19:
55:8c:21:4b:9b:fb:2a:8e:6c:6b:3d:c6:89:44:e9:b0:68:b2:
5f:39:51:77:d2:99:6c:36:ab:f5:19:85:e4:d5:c0:94:42:a3:
89:6a:02:4e:dd:7d:ca:7f:b1:3b:b6:98:7b:64:78:09:c6:9e:
1e:b9:a3:40:61:50:54:90:0b:58:8a:22:8e:f1:58:18:25:21:
c5:77:f0:4b:63:4b:75:7d:2f:49:08:9f:d6:23:72:05:b0:cf:
f2:dd:5a:56:d2:55:14:0a:ed:c4:6d:22:71:d7:f1:9b:89:64:
e9:2c:06:dd:4d:fe:6b:54:93:22:ec:d2:f8:27:5e:82:79:01:
97:3d:c5:73:46:ce:c8:39:4f:95:1d:f4:b6:13:d8:de:2f:55:
f1:0e:81:43:b2:da:de:d9:8f:18:98:29:54:d9:e4:98:36:e0:
59:bb:16:f6:58:40:9b:3c:9d:46:01:c0:cd:a9:f5:19:a5:71:
cb:2f:ca:5c:e6:aa:86:b6:14:2d:21:02:9a:7a:49:04:f8:04:
1e:67:2d:77:c7:cf:57:b6:95:3c:95:7a:2e:f6:45:9b:2a:77:
93:da:91:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:24 2024 by rpki-client on console-ams.rpki-client.org