Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/AX6KMKIxYCxPRtB86wO4yJpxozk.roa
File: AX6KMKIxYCxPRtB86wO4yJpxozk.roa (raw, json)
Hash identifier: 8f0uQDlubSplx/ZYIJq515IVn6/T4lhO9YAiYOf12wI=
Subject key identifier: 01:7E:8A:30:A2:31:60:2C:4F:46:D0:7C:EB:03:B8:C8:9A:71:A3:39
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019395D38E53C2EF05D9573A0A6E0D5FA9FD
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/AX6KMKIxYCxPRtB86wO4yJpxozk.roa
Signing time: Thu 05 Dec 2024 07:58:09 +0000
ROA not before: Thu 05 Dec 2024 07:58:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213888
IP address blocks: 217.177.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:95:d3:8e:53:c2:ef:05:d9:57:3a:0a:6e:0d:5f:a9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Dec 5 07:58:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=017e8a30a231602c4f46d07ceb03b8c89a71a339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:f4:bd:53:f2:22:41:d9:f7:90:0c:77:6a:
53:50:55:c0:df:9a:c0:fb:c1:ff:9c:12:fc:89:99:
02:a8:31:bb:f5:a2:25:8f:be:dd:e1:69:e0:6c:8c:
e1:a7:31:c4:4d:dc:23:df:f2:34:fc:f8:58:74:dd:
26:03:a2:6b:25:7e:ba:77:28:78:5d:d4:fd:4c:f3:
0d:1a:90:f2:4b:9f:44:33:5c:54:d4:6a:e1:d8:46:
ce:97:98:eb:fe:65:73:34:45:47:2e:1a:be:76:01:
33:53:46:36:f3:e5:c7:ae:52:32:b7:c4:9a:cd:de:
66:a3:4d:a3:a6:de:b0:ca:45:d0:b1:f8:8e:26:65:
e2:35:3b:09:2f:08:06:70:af:9c:c2:23:76:f0:88:
d7:5f:ad:5d:bf:f6:0b:8c:5d:ee:ba:a1:69:61:c2:
1c:a0:6b:9f:47:70:c4:a0:86:79:39:cd:7a:00:06:
00:47:95:dc:07:1e:c8:b4:d9:dd:ff:f3:bc:f0:9c:
26:f2:42:b5:55:b9:7c:35:6d:b3:6a:9c:bd:d2:3a:
b4:e2:ca:2c:b4:d6:54:75:0a:75:26:61:e2:d9:01:
a5:c9:51:9c:de:a4:58:f9:a4:1c:6d:bf:4d:9f:49:
f7:4f:5b:e8:fa:4d:e7:28:b8:d3:35:b8:93:e9:e0:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7E:8A:30:A2:31:60:2C:4F:46:D0:7C:EB:03:B8:C8:9A:71:A3:39
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/AX6KMKIxYCxPRtB86wO4yJpxozk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.177.75.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e3:ab:64:32:59:79:b9:95:90:5d:ca:62:cf:c6:10:00:4b:
5d:4f:45:5e:60:0a:0f:c9:9e:63:db:09:ba:11:a5:fa:dd:1a:
16:80:ba:12:91:36:d6:5d:4e:40:bc:4f:47:85:b4:48:a4:53:
b1:a4:0a:22:68:3e:8b:e1:ab:b8:c3:40:bf:08:cd:04:d9:2c:
07:76:78:c9:11:d5:2e:22:07:52:f0:92:17:7a:61:bf:aa:31:
22:ed:a1:3e:40:b4:87:ae:b5:80:ff:75:3a:c6:35:b7:d9:1d:
71:b8:42:6d:58:06:c5:04:ac:a9:00:7f:65:af:dd:4d:44:3b:
7a:f1:38:ac:48:a1:f0:4d:a9:3f:15:0d:d1:ce:79:81:3d:0d:
45:93:31:9f:c5:3f:87:5e:e7:79:4e:de:ae:d2:a4:42:1a:fb:
da:6e:19:f7:8b:00:9c:13:35:7c:66:14:ae:fc:52:d0:eb:d1:
f7:87:17:7b:fb:4a:e0:cd:10:da:e0:5d:04:ac:0e:e8:0f:b3:
21:78:68:dc:e4:e3:2f:79:ac:2a:bf:e9:e1:6e:ef:a0:25:e8:
4e:b8:79:e6:8a:96:e8:79:9d:d7:8c:30:d0:f8:ad:d9:cd:95:
73:a9:90:30:7f:53:84:09:01:f6:ae:dd:6a:3a:a5:5d:52:75:
ed:eb:5d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:50 2025 by rpki-client