Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/v6_CbduNuPgvyLf7EhblM5k54tw.roa
File: v6_CbduNuPgvyLf7EhblM5k54tw.roa (raw, json)
Hash identifier: 3sV7qXM8yhZ96R6l3716YYWosnxqEbQN6pfF2BisHtI=
Subject key identifier: BF:AF:C2:6D:DB:8D:B8:F8:2F:C8:B7:FB:12:16:E5:33:99:39:E2:DC
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0191DC221E099A1364ABEBC642F2B50DEB86
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/v6_CbduNuPgvyLf7EhblM5k54tw.roa
Signing time: Tue 10 Sep 2024 13:31:49 +0000
ROA not before: Tue 10 Sep 2024 13:31:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 217.145.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 08:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dc:22:1e:09:9a:13:64:ab:eb:c6:42:f2:b5:0d:eb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 10 13:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfafc26ddb8db8f82fc8b7fb1216e5339939e2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:0d:80:bd:09:f7:fb:da:94:37:79:24:f4:
e9:34:20:ad:19:6f:80:3a:40:01:b4:e8:78:22:2e:
37:98:9e:2d:6f:23:59:cd:a3:39:20:5a:90:1a:89:
19:ed:4e:e6:48:9b:31:51:6c:e1:a0:57:df:bc:e0:
a2:8f:b4:62:b7:4a:8b:b6:b0:33:eb:b2:ad:1d:fa:
36:c0:f6:12:de:c7:4d:43:04:ee:a0:a0:96:59:cc:
fc:13:97:00:9d:8e:c5:91:68:48:11:45:fb:43:cb:
82:d9:ca:57:16:a0:5a:56:43:a8:86:13:73:e2:ee:
b5:36:8c:05:1b:92:0c:f0:ce:6d:d2:76:5c:20:73:
b0:06:3d:c4:6c:78:2b:cb:24:68:b5:f1:78:d6:1b:
cd:49:1f:af:83:20:f9:ed:a8:07:44:b6:54:58:b8:
1e:c5:fa:88:f4:5a:b0:11:f2:25:97:96:51:7d:03:
35:16:00:9a:a4:b3:98:6a:a6:02:e3:20:53:31:32:
57:2d:30:a4:a9:77:ef:a9:17:c4:5f:31:df:c8:eb:
14:37:a9:9f:f2:dc:1e:5b:fa:08:ba:17:b2:04:44:
f3:95:6c:04:a3:26:ce:5d:8b:4c:8e:29:67:46:f2:
5d:81:f4:c7:dd:1f:e1:f1:b2:50:44:ef:9a:40:1e:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AF:C2:6D:DB:8D:B8:F8:2F:C8:B7:FB:12:16:E5:33:99:39:E2:DC
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/v6_CbduNuPgvyLf7EhblM5k54tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.79.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a0:af:5f:82:a5:16:56:a5:cb:21:5b:3a:34:e4:fe:7f:2f:
1d:0d:ad:72:84:5f:9e:fa:58:ea:8e:91:7f:5d:ea:d5:50:4e:
87:d9:08:c4:4d:99:93:51:9d:84:ae:aa:39:12:3f:8f:9e:7e:
83:85:ae:0c:dd:a9:2d:c1:96:72:79:88:e6:79:6d:2b:21:1d:
58:5e:b0:64:cc:8c:45:f1:56:33:76:08:2e:3e:6f:e3:25:6a:
59:e2:8f:4b:8d:47:c3:13:a4:e2:45:df:aa:73:fb:05:b0:a4:
90:14:80:6c:2a:73:c6:ad:84:67:52:c6:d2:39:20:50:28:e2:
75:4d:ec:7e:a3:6b:76:b5:ee:82:05:0b:b0:83:13:d2:b8:78:
be:1e:ff:9d:5c:67:09:f4:6a:e7:a6:b0:4f:29:44:3a:b6:bc:
7d:cb:47:0e:51:08:75:5b:d4:fa:17:7a:d3:8c:92:88:21:2f:
1e:3e:47:0f:ca:c5:6d:18:3a:51:ad:31:77:8c:7d:17:10:54:
8c:5b:ed:bc:0e:bc:d0:2b:79:a4:ad:65:95:fe:02:f1:b7:71:
3c:bf:29:35:9c:c2:4c:42:88:a8:91:76:74:df:84:ad:56:e0:
1b:64:b7:b7:66:9d:57:da:15:1f:96:22:78:4d:11:5d:55:6d:
af:fd:73:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:14:39 2025 by rpki-client