Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/sFI6jiwEIOSY78SQlf2VjWq1yOY.roa
File: sFI6jiwEIOSY78SQlf2VjWq1yOY.roa (raw, json)
Hash identifier: yimBWYpH1b7o29JpJ+XFoo7m7QTWoVWXILyzAzkkfAo=
Subject key identifier: B0:52:3A:8E:2C:04:20:E4:98:EF:C4:90:95:FD:95:8D:6A:B5:C8:E6
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 018CC8DF284878DC18F00AA923305726D7E9
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/sFI6jiwEIOSY78SQlf2VjWq1yOY.roa
Signing time: Tue 02 Jan 2024 06:31:57 +0000
ROA not before: Tue 02 Jan 2024 06:31:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204471
IP address blocks: 217.197.106.0/24 maxlen: 24
2a12:d8c1::/32 maxlen: 32
2a12:d8c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:28:48:78:dc:18:f0:0a:a9:23:30:57:26:d7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: Jan 2 06:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0523a8e2c0420e498efc49095fd958d6ab5c8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:03:64:05:83:64:76:b3:70:35:ce:27:1f:b0:
17:be:40:d5:dd:16:43:da:49:4e:fb:3b:1a:9f:3f:
7e:9a:e0:bf:8f:4c:cf:2a:0a:c2:c7:0e:e4:78:19:
3f:d7:0a:5c:23:3e:05:ee:c4:b3:2f:51:bc:a4:94:
0c:2a:6a:e0:46:e1:68:78:95:2f:5c:26:bc:91:b5:
7c:2b:1c:27:4f:05:28:62:c4:0a:94:20:bc:cf:ae:
ba:fa:02:01:cb:98:5a:08:7e:4e:02:22:8c:a8:cd:
85:1f:d0:03:d0:1b:9f:ac:10:1e:5d:84:a8:82:d7:
2e:68:ec:38:35:62:96:7d:ae:dd:a8:4e:79:82:e1:
99:47:87:fe:7b:16:bf:e7:14:40:3b:b2:d4:d4:98:
25:ee:42:80:ce:0e:ba:7a:e3:8f:6c:b6:46:f9:94:
c4:2f:61:9a:de:07:77:32:ad:0e:9c:6f:7e:f5:d1:
a5:a2:e8:81:f6:02:72:31:07:69:00:2e:5e:74:a8:
1b:3d:37:a2:8c:85:10:e2:c5:2a:67:13:40:ed:2b:
2a:6a:6d:d2:3c:e4:23:e7:27:9d:2d:b6:7d:36:6d:
9b:a8:56:07:4d:d7:8e:bc:76:90:2c:23:7b:aa:41:
9d:61:f2:09:eb:03:9c:3b:b6:99:7b:fd:5b:0a:bb:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:52:3A:8E:2C:04:20:E4:98:EF:C4:90:95:FD:95:8D:6A:B5:C8:E6
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/sFI6jiwEIOSY78SQlf2VjWq1yOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.197.106.0/24
IPv6:
2a12:d8c0::/31
Signature Algorithm: sha256WithRSAEncryption
b4:84:4d:c8:f8:e5:b6:a4:2f:c3:6f:dc:3b:0e:ed:f8:58:7a:
ce:92:0c:74:92:7d:16:e7:28:72:3a:64:35:4b:0b:6e:2f:46:
14:0f:be:02:ca:aa:2d:28:75:85:84:62:2f:de:60:9b:98:cd:
c9:6c:8a:fb:08:99:11:80:87:45:1d:df:21:44:75:de:4d:77:
2b:b0:42:e2:66:f5:0e:8e:77:2c:41:e4:4a:c0:64:fc:93:34:
af:e4:37:f0:f9:e3:05:f3:c3:76:a8:2a:d6:21:cc:02:a1:00:
eb:70:e3:0a:44:ec:cb:4a:0a:0d:b1:a2:14:1a:d2:88:38:e4:
ca:55:56:9b:31:51:02:c1:97:58:98:d1:dc:c4:7a:73:9c:70:
37:ed:ce:c9:75:12:de:79:3b:a8:86:ea:88:2e:bd:22:0a:a2:
f4:f6:bf:45:35:b0:bc:cd:9b:77:43:7e:2b:4e:13:3c:5a:c8:
31:72:a7:a5:47:fe:f6:67:b1:65:c9:06:fd:d3:df:ea:db:05:
89:aa:f3:5d:b6:5d:ec:b8:f9:9f:ea:07:c3:49:c9:08:fd:2c:
2f:5f:91:64:d3:b7:61:a7:de:2b:6c:60:41:94:ce:43:fc:a3:
ab:e4:c9:cc:91:f4:e6:61:ae:4f:0d:cb:e6:18:87:1f:d6:75:
a0:fc:41:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:54:43 2025 by rpki-client