Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/o0x5tvlNFn-neVMaCFp4hAigfKk.roa
File: o0x5tvlNFn-neVMaCFp4hAigfKk.roa (raw, json)
Hash identifier: vMQyjRKL8zyplSPKy0qxxAQb5ZZ78AMafhkz8rk8GVY=
Subject key identifier: A3:4C:79:B6:F9:4D:16:7F:A7:79:53:1A:08:5A:78:84:08:A0:7C:A9
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 018F0FFB2691FF4DC67E4B207DE7207D7E33
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/o0x5tvlNFn-neVMaCFp4hAigfKk.roa
Signing time: Wed 24 Apr 2024 12:01:08 +0000
ROA not before: Wed 24 Apr 2024 12:01:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 217.147.180.0/23 maxlen: 24
217.147.180.0/24 maxlen: 24
217.147.181.0/24 maxlen: 24
2a0b:2900::/32 maxlen: 56
2a0b:2900:1100::/40 maxlen: 56
2a0b:2900:ff00::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 24 Apr 2024 13:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0f:fb:26:91:ff:4d:c6:7e:4b:20:7d:e7:20:7d:7e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Apr 24 12:01:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a34c79b6f94d167fa779531a085a788408a07ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1c:08:72:38:fc:95:13:c7:6d:76:a7:4c:47:
0f:cd:45:07:53:bd:05:dd:c6:81:4f:41:9a:7a:7f:
1a:42:0c:a4:5f:85:05:12:07:48:7f:07:a5:67:40:
f5:c2:fc:cb:a0:4b:57:cf:3e:f9:cf:ee:0a:5a:d4:
74:16:ba:a7:66:2c:32:be:1e:39:b5:3a:f5:e5:b3:
82:56:2b:84:96:91:37:60:ec:17:f3:05:d2:25:aa:
b2:3a:36:88:46:34:bd:db:3d:cf:8a:3e:b1:26:b6:
78:be:98:58:69:03:40:53:ca:0c:b1:8c:ea:7c:fc:
df:58:a4:c7:c3:69:33:73:80:d8:bd:73:18:26:f3:
3a:08:d9:46:1f:2c:de:6c:14:b2:c6:62:81:a1:71:
ed:ec:40:26:a7:f9:5f:60:5a:b2:d1:c0:d8:c4:64:
67:c7:12:85:bb:da:25:1d:e9:80:ee:7b:bc:99:39:
76:73:fe:d1:fd:79:5b:5f:ff:62:a8:5b:8f:ee:0d:
7e:b5:d6:32:d3:c6:6b:d8:f5:7a:14:ac:4c:6e:46:
83:15:6e:3f:ac:10:da:8f:12:a0:9b:30:69:c0:f5:
db:c3:0f:e6:7c:09:6d:82:e8:8a:03:d1:3b:96:45:
f7:d2:69:71:7b:f3:82:40:be:dc:6d:cc:f7:1a:7e:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4C:79:B6:F9:4D:16:7F:A7:79:53:1A:08:5A:78:84:08:A0:7C:A9
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/o0x5tvlNFn-neVMaCFp4hAigfKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.180.0/23
IPv6:
2a0b:2900::/32
Signature Algorithm: sha256WithRSAEncryption
5e:5b:d1:06:d6:d4:de:b0:2e:01:e1:20:3e:83:4a:cc:05:ee:
3e:89:83:d0:ee:d9:25:50:fd:1e:6e:c2:f4:b4:3f:de:1e:cf:
d3:45:d6:99:ed:56:cd:2d:b9:00:aa:04:d4:ae:e8:55:3e:86:
da:19:b7:56:28:fe:9b:34:99:5b:a0:13:dd:93:02:f0:8d:ce:
e7:d4:5e:a1:5b:7f:e4:df:df:f9:8d:8b:c1:95:2d:66:6c:20:
73:60:f6:7c:b0:91:a3:97:5b:a3:96:39:4b:c4:88:4f:9b:e4:
83:90:7d:92:af:f9:26:b2:77:cc:b7:64:11:3c:6a:d5:d8:33:
5f:dc:30:7f:f6:08:19:cd:ba:e0:d4:f3:c3:aa:02:e6:75:75:
64:97:30:52:3d:e6:be:8c:d6:26:06:ab:1c:fb:07:bf:11:e3:
53:e6:d7:c9:50:21:23:fd:1a:f9:f6:bd:26:60:b8:99:4f:99:
9e:cd:c2:ce:96:a3:b7:ee:e9:c0:29:be:c2:26:85:28:9d:5e:
c1:63:0f:e2:c5:6e:c9:ec:1f:fe:2b:95:6f:69:46:83:b4:d1:
54:b3:63:a5:23:ed:0c:f6:c8:c9:6f:23:d0:d9:10:78:71:7c:
5d:ae:3f:4f:6e:06:c4:9e:94:c0:66:64:cd:63:82:9d:1f:c6:
76:c5:0d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 17:32:18 2024 by rpki-client on console-ams.rpki-client.org