Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yRsptq2jAw65-xoKCKvesVoDHpc.roa
File: yRsptq2jAw65-xoKCKvesVoDHpc.roa (raw, json)
Hash identifier: D/OMXEBG7m6ptGF/2Nwz2vxn7tjVlazjbo0fk98c6ng=
Subject key identifier: C9:1B:29:B6:AD:A3:03:0E:B9:FB:1A:0A:08:AB:DE:B1:5A:03:1E:97
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E7EEDEB9414F4726D721D60CD5D2105A4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yRsptq2jAw65-xoKCKvesVoDHpc.roa
Signing time: Wed 27 Mar 2024 08:01:45 +0000
ROA not before: Wed 27 Mar 2024 08:01:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197737
IP address blocks: 217.145.68.0/24 maxlen: 24
217.145.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 16:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7e:ed:eb:94:14:f4:72:6d:72:1d:60:cd:5d:21:05:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 27 08:01:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c91b29b6ada3030eb9fb1a0a08abdeb15a031e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:92:c0:c5:77:39:d7:85:aa:2d:d9:09:37:
17:cb:6d:47:16:b9:77:1d:f8:61:6d:0f:77:39:8a:
35:ac:80:05:d3:49:88:07:68:90:d3:b4:68:d6:49:
73:f7:5e:eb:3d:79:0a:c8:1b:d3:ba:39:5f:61:09:
af:44:ab:0c:49:36:ec:92:7d:b2:7d:9f:15:8d:ff:
02:ae:1b:2a:cd:37:84:2f:be:b7:ea:ef:4c:a5:d4:
24:dc:97:a7:28:45:3a:95:ec:c2:c6:e3:e3:ac:c4:
8c:86:37:4b:20:bc:5e:56:75:80:39:56:65:c9:db:
48:be:1a:a7:c7:de:9f:90:ea:9e:b6:0d:47:92:b4:
7b:25:32:6f:f7:89:1f:43:ab:7b:f7:cb:43:c7:30:
c7:51:1a:57:f0:67:00:25:01:9d:60:c9:a0:eb:5b:
85:70:77:da:d9:2f:7f:cf:da:c7:17:37:78:bd:9f:
0f:15:1d:10:c7:6c:7a:e7:fa:8b:51:ad:a6:11:ad:
4d:5a:47:3e:c3:ad:03:a4:d5:a1:c0:c0:8e:63:96:
f3:93:59:5c:11:19:ba:25:92:ff:11:42:92:26:88:
cd:e2:2c:b8:60:ed:1a:76:f2:3a:76:5b:a5:e4:c9:
76:24:45:63:3e:c0:71:8f:12:2e:96:2a:dc:91:27:
7c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1B:29:B6:AD:A3:03:0E:B9:FB:1A:0A:08:AB:DE:B1:5A:03:1E:97
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yRsptq2jAw65-xoKCKvesVoDHpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.68.0/23
Signature Algorithm: sha256WithRSAEncryption
28:bf:1f:62:4d:60:e9:d5:71:9b:39:15:a8:81:4f:52:9c:77:
ce:11:ac:fb:61:50:bb:96:7e:92:da:df:5a:f5:9c:bd:ed:4f:
3c:a4:e2:03:a9:4d:06:78:89:4b:eb:21:55:41:96:06:83:2b:
9d:ed:6f:12:01:1a:91:50:b3:2c:fb:e7:0f:22:d0:6c:e3:dc:
93:e9:35:94:5b:69:e0:18:cb:bc:57:cf:19:a0:fa:c2:34:0f:
c4:db:d8:2a:63:4d:3e:1c:11:8e:4b:d1:85:05:06:10:f9:1f:
66:8a:38:cd:a9:b4:f7:77:08:73:59:7b:81:5c:ac:a3:bb:24:
46:7f:85:8d:8e:96:7e:11:84:01:26:7f:e7:c2:e9:cb:ec:1c:
38:a9:4b:88:7f:1f:63:98:1c:6f:4d:d4:c4:82:cb:ee:13:b0:
4d:79:40:a6:fd:bb:51:9b:1b:21:03:d3:57:18:6f:0b:1b:05:
60:ee:c5:70:ef:1b:c5:e8:3a:2b:d0:cc:fc:a0:44:93:ab:4c:
c8:80:63:ae:a2:bc:a4:38:87:8a:ec:8e:27:8e:38:51:f5:ed:
07:42:50:b2:22:eb:cb:b9:c3:0c:0b:7a:c3:0a:fd:75:07:a7:
83:2c:8f:0e:e2:af:38:e5:e6:67:1a:53:b4:5c:ed:09:6d:6a:
c8:ea:c6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:32 2024 by rpki-client on console-ams.rpki-client.org