Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/sysHK0d-bAr9TFJxsSuW0Ck2kCw.roa
File: sysHK0d-bAr9TFJxsSuW0Ck2kCw.roa (raw, json)
Hash identifier: FF/SdejhZ4VP6kkTJEvjpyC4juoX97/FEPqvzSDh16w=
Subject key identifier: B3:2B:07:2B:47:7E:6C:0A:FD:4C:52:71:B1:2B:96:D0:29:36:90:2C
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 01916DF5FA20134BA3E008EA667FD264FDB1
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/sysHK0d-bAr9TFJxsSuW0Ck2kCw.roa
Signing time: Tue 20 Aug 2024 04:05:22 +0000
ROA not before: Tue 20 Aug 2024 04:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61185
IP address blocks: 81.17.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 09:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6d:f5:fa:20:13:4b:a3:e0:08:ea:66:7f:d2:64:fd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Aug 20 04:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b32b072b477e6c0afd4c5271b12b96d02936902c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6f:67:64:66:1c:b5:32:9a:69:9f:cf:49:4c:
fb:32:7b:58:e2:2e:04:04:01:8e:5f:b2:d4:fd:b5:
9a:5d:5c:17:17:09:81:bd:a9:89:aa:1e:03:64:1d:
f8:b2:b7:29:61:42:13:5e:06:2a:78:e3:fe:69:96:
f9:46:0d:67:9b:dc:a9:95:5f:a8:14:23:55:8e:36:
65:3e:96:61:b0:b6:b4:60:9e:6d:2e:cf:bd:92:17:
0d:83:8f:a3:52:74:9d:35:3a:28:91:a6:f1:8d:00:
11:c0:01:1c:5e:c0:a4:e8:77:0e:87:90:74:5a:e3:
d4:a0:93:70:a9:3b:cd:c6:71:18:8d:97:da:6b:5e:
63:35:de:67:d6:1e:6c:47:4f:a1:f9:12:f1:cd:ca:
71:f0:50:07:29:1a:df:9e:fb:f0:f3:ca:82:15:97:
90:f1:91:53:7c:a7:da:62:12:a0:b1:cf:05:0b:c7:
72:c8:c3:f1:49:c2:e8:42:67:6f:20:5d:9b:36:05:
68:2b:00:84:f1:9a:9f:19:77:b9:26:36:be:b7:4b:
53:93:a3:55:0f:2d:7a:ce:49:e8:98:a8:75:38:24:
2d:19:43:8d:a2:70:e6:9a:9f:44:68:9f:78:3f:1d:
c8:86:9a:17:06:9e:ac:55:06:31:44:9e:b3:7b:5c:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2B:07:2B:47:7E:6C:0A:FD:4C:52:71:B1:2B:96:D0:29:36:90:2C
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/sysHK0d-bAr9TFJxsSuW0Ck2kCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.160.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:5d:b1:15:45:5b:1b:92:1a:bf:01:14:49:f6:16:a6:c0:f3:
2e:c8:30:d8:fc:7e:ce:93:8e:55:ef:60:a2:fb:69:92:4d:5a:
36:5a:fc:02:a7:a6:13:d0:c7:e6:80:82:9c:0a:e3:7e:c8:6f:
1c:9f:b9:7f:5e:4e:7f:8b:0d:37:a7:04:cd:13:e4:50:79:32:
d9:3e:af:f3:f8:a1:b8:e1:61:c1:93:b5:58:b3:19:fa:a2:8f:
d0:84:b2:aa:1c:f4:9d:0f:18:f7:ca:3e:df:51:46:33:95:7b:
41:13:14:1f:d4:b4:5e:51:96:e1:c2:fc:1d:3d:d2:9c:8e:77:
70:66:28:f5:44:d9:3f:ef:ec:90:76:bb:12:0e:44:36:e6:13:
a1:a1:fe:b1:4d:d0:a3:aa:4d:fb:05:dd:c6:d9:95:b7:4b:0d:
e7:4d:83:b8:3d:b3:7d:c6:da:b4:30:13:44:a2:93:f4:79:a3:
e9:7e:94:43:5d:bb:55:19:52:01:b8:e2:d2:bd:05:27:de:bd:
ba:91:85:cc:ab:d6:36:69:57:c1:86:1f:17:60:6f:c2:f2:01:
cb:b2:67:e1:a2:29:2c:12:0b:27:08:cf:ce:b2:39:30:bb:f4:
f6:d1:80:27:ea:7f:32:25:bc:23:f3:26:30:94:17:ed:bc:a1:
fd:7c:6c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 14:04:43 2024 by rpki-client on console-ams.rpki-client.org